Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d75fa999-3735-3391-8979-a5f40e45a36f.roa
File: d75fa999-3735-3391-8979-a5f40e45a36f.roa (raw, json)
Hash identifier: YnV0Wpf4l4aaEc7t0lFU7cOUxJkaoMO/4bP7xwvL4G4=
Subject key identifier: 4E:30:66:4A:50:66:5B:B2:73:FB:50:1B:0A:F6:E8:3D:1E:99:CB:65
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F4534130D9C5BDAA779B33E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d75fa999-3735-3391-8979-a5f40e45a36f.roa
Signing time: Fri 16 Sep 2022 12:00:00 +0000
ROA not before: Fri 16 Sep 2022 12:00:00 +0000
ROA not after: Sat 22 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.16.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:45:34:13:0d:9c:5b:da:a7:79:b3:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 16 12:00:00 2022 GMT
Not After : Oct 22 04:00:00 2022 GMT
Subject: CN=544f9ec0-0dc5-4f09-9091-96c72e6baf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:8f:64:82:40:cb:18:af:38:c0:eb:86:dd:
fb:18:2f:cd:d4:ba:f0:ff:21:83:8a:09:19:f9:59:
08:f2:90:3d:96:5c:cd:12:ce:43:19:b2:5f:f2:f0:
06:5e:99:54:1b:2e:9f:f7:46:e2:67:81:82:41:54:
9d:b1:23:1a:dd:87:dc:2a:50:56:52:38:de:e6:e6:
4d:44:aa:41:b9:91:77:5e:fc:12:02:c1:92:ee:af:
25:e8:4b:43:fe:44:c9:05:cc:f1:cc:0e:9d:81:77:
42:3f:25:c6:30:43:bd:31:e5:d6:e2:3b:69:06:9c:
df:97:25:54:6b:14:05:11:0c:58:4c:30:07:0f:04:
64:3b:67:b4:08:a8:23:5a:08:31:50:ca:8b:0b:d8:
4d:49:02:c7:d8:6a:00:34:fa:85:43:0d:44:72:22:
f9:d1:3d:5d:69:d4:59:cc:37:c9:60:96:5e:18:07:
df:bf:af:ef:a9:a7:32:25:74:2e:93:81:e7:66:17:
80:27:6f:17:69:7d:28:23:68:5f:26:69:c7:be:a5:
b0:01:f3:a1:01:11:4f:c0:31:0e:b0:a2:62:b1:c3:
36:00:0d:b5:e2:4d:26:7f:f8:c2:ac:1e:98:51:f1:
9d:ab:a0:42:7b:db:0e:59:92:25:89:bc:a9:32:1d:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:30:66:4A:50:66:5B:B2:73:FB:50:1B:0A:F6:E8:3D:1E:99:CB:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d75fa999-3735-3391-8979-a5f40e45a36f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:65:38:c5:b9:a5:5f:8b:72:95:5d:5e:10:d9:f8:1b:10:42:
58:dc:2f:59:f7:11:86:32:7d:4e:1d:2a:32:22:5a:a4:88:96:
0b:fb:da:78:bc:7e:7f:ab:23:f1:8b:22:7e:26:7b:fe:2c:c6:
1e:3b:8f:e6:e2:be:11:9b:af:9d:31:72:97:00:17:f1:00:0a:
f6:df:61:b0:aa:4c:8f:55:ff:94:db:74:15:16:51:ab:ea:89:
64:43:79:af:d8:3c:02:9c:54:b9:5b:15:4d:10:df:6d:24:36:
c2:87:d1:b1:a4:a1:21:ca:60:de:51:a3:da:d2:13:23:4b:78:
49:80:13:8d:ac:1b:f2:b9:53:6d:6f:ef:92:2d:d4:38:0a:c1:
16:a2:17:48:a9:14:90:9f:30:45:18:b6:3e:31:28:6b:ca:f3:
72:c1:c2:bf:ee:34:d4:d9:f9:62:45:a9:ed:4f:71:6e:56:0d:
30:19:cc:59:52:5b:1b:40:e6:a3:d5:7d:05:80:63:22:32:16:
46:d5:35:63:86:8c:66:b2:c6:65:d6:f8:46:36:6a:d5:55:4e:
6e:da:08:1e:c7:34:81:8d:e1:4d:bd:ad:1b:0a:04:c0:c6:e3:
14:2e:23:e8:0c:89:5c:da:6a:89:01:4d:71:ff:6a:56:0a:61:
36:46:65:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:57 2025 by rpki-client