Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d6072b8f-1aea-3b6e-b0e8-1105779d2ad0.roa
File: d6072b8f-1aea-3b6e-b0e8-1105779d2ad0.roa (raw, json)
Hash identifier: K4CNMTXpV68YIE+2pvBm8ed7GV9CfWb5Ia8/tVnwa3U=
Subject key identifier: 89:9C:33:8C:BF:8D:86:E2:F2:83:30:3D:E9:4E:0A:67:7D:C5:9A:97
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840030A5E8A5D4C5D6718B67580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d6072b8f-1aea-3b6e-b0e8-1105779d2ad0.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.187.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:0a:5e:8a:5d:4c:5d:67:18:b6:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=c8ecabdf-1dfe-4d24-880a-15de1ed9edf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:11:18:b0:08:43:1f:dc:cf:0d:58:1f:0a:
d5:ba:4c:ac:7a:76:43:58:1c:64:97:b8:95:60:0a:
7f:34:b9:d3:73:f3:6c:de:79:38:60:e1:1b:a5:cd:
74:41:ad:61:c0:ea:c1:c1:84:79:10:15:3b:0b:bc:
1d:08:fb:29:1a:ff:79:d0:d7:5c:96:f7:8a:4e:ba:
3f:60:94:b8:de:45:3b:07:5e:d1:3f:10:30:74:5f:
0e:f7:c4:b0:a3:5c:84:16:81:bb:5b:44:73:79:82:
d1:30:3a:e5:6b:bd:d8:ab:42:94:8e:89:ab:3d:89:
43:7c:b6:b2:47:8f:71:22:62:7c:ce:0f:06:d3:e5:
7c:f6:d6:33:c7:b7:eb:53:22:ab:24:31:a5:d2:c2:
9a:29:88:08:4a:72:3b:2d:e1:03:97:b5:67:26:3e:
89:e0:05:86:69:14:2d:2e:80:8f:73:03:90:ee:ba:
1b:e1:88:ac:3a:93:77:38:ee:17:2e:ec:2e:df:3c:
e9:c5:b5:35:b6:51:be:2b:c7:34:e1:98:ac:4b:60:
ef:1a:d1:7e:7d:a4:aa:a9:26:04:22:3c:f0:79:6d:
38:d8:47:48:cd:8e:e7:2b:c1:4a:aa:d4:c3:45:9b:
6c:36:7a:c9:1a:c4:45:12:6e:5b:ee:2a:2e:af:11:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9C:33:8C:BF:8D:86:E2:F2:83:30:3D:E9:4E:0A:67:7D:C5:9A:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d6072b8f-1aea-3b6e-b0e8-1105779d2ad0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.187.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:42:2d:49:9a:16:3e:24:3d:a4:93:f6:e6:90:93:a3:6c:65:
cb:82:c9:66:1a:de:d1:30:f3:c4:c2:5e:2e:36:9b:d9:88:92:
d5:c8:80:46:2d:13:02:73:59:75:81:1e:07:97:5c:6f:1f:53:
40:76:6e:e2:48:ec:52:1b:e1:77:80:ca:8e:fb:4f:a7:82:6f:
7c:f7:a3:a5:5d:54:5b:4a:a4:49:b1:a9:03:9a:5c:20:31:82:
15:df:61:f8:25:39:25:e2:dc:75:c2:4d:11:ac:50:96:af:c1:
38:86:1a:65:43:a2:1f:cb:e7:a5:3d:0d:fc:03:44:00:7a:d9:
1b:77:0d:cb:42:20:4d:59:32:2f:75:d4:74:f4:74:ba:8c:7f:
6f:97:c8:43:56:2d:e5:64:2b:88:c7:13:02:89:0d:4c:c2:a1:
74:87:5f:59:fd:4c:50:cb:d1:77:51:95:a4:05:03:03:ae:88:
4e:02:7d:d2:6f:73:9e:66:ed:04:fd:8f:4e:a7:3d:8d:6f:d9:
fc:10:0a:3f:96:af:1a:97:26:ca:b2:42:6b:df:8d:75:bf:ea:
6c:b4:5a:70:bd:fd:3d:1f:a1:08:f1:a0:9f:64:a8:ae:b2:b8:
d2:5f:f6:cf:16:50:6f:c2:10:21:1c:4a:09:f4:ca:6e:a7:7f:
48:3e:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:52 2025 by rpki-client