Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d71e0f1b-bd1b-390d-8a4e-db1206f0ae48.roa
File: d71e0f1b-bd1b-390d-8a4e-db1206f0ae48.roa (raw, json)
Hash identifier: CTsnRRbr5fIysLUv47cWhYGH3/9VpsSTqoxtMowR40c=
Subject key identifier: 06:14:E0:4E:B9:CA:78:C9:13:96:29:60:A0:8D:8F:18:47:11:7F:D0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FAF24F2309249DCD40CD6C400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d71e0f1b-bd1b-390d-8a4e-db1206f0ae48.roa
Signing time: Mon 24 Oct 2022 12:00:00 +0000
ROA not before: Mon 24 Oct 2022 12:00:00 +0000
ROA not after: Tue 29 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.190.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:af:24:f2:30:92:49:dc:d4:0c:d6:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 24 12:00:00 2022 GMT
Not After : Nov 29 05:00:00 2022 GMT
Subject: CN=79a1aef9-fc29-49ff-9324-f127a53c05d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b5:f8:b4:7c:75:49:bc:e8:c1:a3:ac:75:7c:
63:c9:0e:5e:dc:9b:0f:66:fb:75:72:08:95:cb:dc:
c0:bf:ee:66:ff:e1:ef:48:10:98:53:0b:a8:dd:fb:
9c:a4:12:e6:f9:b4:05:e6:ab:13:36:89:f7:cb:b2:
77:e3:16:d5:72:c3:84:e0:44:ec:ac:b3:ec:6a:7f:
2d:8e:c2:fe:11:bb:b4:85:ac:62:31:50:6e:df:9b:
b9:81:86:25:9a:18:2d:d1:ae:b3:3a:66:eb:ff:ad:
36:34:da:6e:d7:9d:f6:4f:dc:dd:6c:2b:b9:08:05:
ee:61:46:7f:52:9c:e4:e6:05:1e:47:68:82:b6:07:
95:3b:71:3e:3f:22:f1:7e:df:33:b7:5d:07:8b:a1:
6f:03:b9:64:26:aa:38:e1:e4:f0:95:51:f8:06:b9:
1d:ef:ec:1a:82:79:00:11:bf:c8:88:d4:7c:98:5f:
58:c2:d6:fd:a1:f3:cd:31:fb:d7:77:61:11:b5:70:
6f:f5:35:d3:06:a9:42:34:e7:a8:f6:76:35:bc:5a:
7f:e4:2d:0b:5f:23:92:5d:92:b2:0e:b1:a8:b9:92:
69:15:ae:9e:57:2d:e4:ac:54:35:15:c2:c9:df:a2:
13:4c:4a:4c:9a:81:09:2b:2e:ee:87:43:d3:8b:76:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:14:E0:4E:B9:CA:78:C9:13:96:29:60:A0:8D:8F:18:47:11:7F:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d71e0f1b-bd1b-390d-8a4e-db1206f0ae48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.190.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:e1:a8:e1:52:6f:6a:4b:c8:74:fc:5a:d2:e7:6c:48:6f:49:
69:8c:fe:34:4b:c6:af:94:00:ae:18:3a:c8:9a:8f:a4:4c:76:
81:9d:d1:81:68:86:55:ad:15:4d:44:4a:85:3b:4d:a5:31:f8:
ac:3c:e5:64:32:1f:a0:91:85:54:b9:ee:62:7c:ab:f2:c3:23:
6d:1d:2a:29:12:a6:52:a0:de:bc:23:2e:c5:41:24:40:c8:a3:
dd:21:3a:7a:9d:fd:fa:46:29:75:89:00:ed:a8:1c:9d:3d:53:
b2:6e:36:b4:4c:da:b8:0a:2c:d9:60:13:97:2d:ec:e2:8f:92:
c9:e8:9f:b4:de:9b:10:56:fa:6d:43:89:27:8e:b0:d5:66:ec:
b7:1e:50:c1:7a:f3:42:ba:46:32:70:3e:28:1c:a6:4b:c7:8b:
0c:c9:8a:d5:ab:e9:14:4b:c0:fa:0b:47:c5:e7:92:98:bf:04:
7d:5d:9d:6d:ae:5e:3c:56:a0:27:33:93:1c:c8:7b:f1:22:27:
0d:fc:09:d7:c1:0f:3b:e4:27:12:86:89:cc:45:ac:d8:ee:76:
e5:26:bb:48:f9:d9:5a:93:0e:f5:4e:ee:dd:4d:28:79:4c:7c:
f9:e4:43:95:bc:c8:00:53:1c:81:f8:ab:55:2b:92:43:6d:e1:
8c:a8:5b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:27 2025 by rpki-client