Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da056c36-9373-3ebf-8500-1efd30d72eb3.roa
File: da056c36-9373-3ebf-8500-1efd30d72eb3.roa (raw, json)
Hash identifier: 1ofHq+QG2UwpgHmW8DwBY65CA/t/fZwxFp9Zl8PpFqE=
Subject key identifier: DE:38:27:A0:69:BE:BF:CD:2D:C1:98:4C:5C:78:98:AA:F7:5F:35:0A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0B143D13DF1E1FA9A554ED00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da056c36-9373-3ebf-8500-1efd30d72eb3.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.170.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:14:3d:13:df:1e:1f:a9:a5:54:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=8d7c0db9-3cc7-4245-b25e-1c79cbbed3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:5e:3e:7b:75:7e:4e:c1:47:a3:b4:fe:04:
a8:f2:2a:a2:07:e1:5e:00:79:af:df:49:52:a0:9f:
3e:c1:9d:51:aa:a7:60:45:6f:db:9c:4f:c2:06:26:
5a:38:8a:b0:1d:a2:b4:29:70:0b:f1:6f:2c:49:a3:
dc:a9:27:7e:8f:9b:ee:cb:2b:84:8e:63:fd:c1:b2:
a0:01:c4:db:81:7a:fa:b5:ea:ec:0c:99:cf:9b:bd:
09:f7:28:32:d2:8d:49:ef:83:61:38:33:88:66:ec:
55:63:80:34:5e:37:06:0b:d1:1c:ea:44:34:87:65:
61:55:6c:94:bf:6f:19:5b:6d:b2:44:ae:13:4d:b7:
36:41:0c:fe:4f:39:bf:03:b8:47:10:b4:e2:a3:e6:
23:d7:97:07:7a:c0:5d:69:ce:30:6a:32:12:47:81:
15:42:68:7c:2f:bb:9f:1c:8b:51:2e:4c:1f:69:1c:
fd:af:77:9b:c5:14:84:04:59:72:bb:79:8d:94:72:
14:f0:0a:d6:37:f4:16:a5:42:8a:fa:92:3c:15:aa:
9a:28:0d:20:ed:59:28:5a:12:70:5f:20:57:b2:1b:
9b:92:8f:67:4b:4a:02:47:9e:d2:89:47:87:28:7e:
61:14:9c:7f:c8:d4:6e:f6:c1:44:33:52:05:83:55:
08:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:38:27:A0:69:BE:BF:CD:2D:C1:98:4C:5C:78:98:AA:F7:5F:35:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da056c36-9373-3ebf-8500-1efd30d72eb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.170.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:a2:8b:40:6f:56:3e:a1:8f:a0:24:93:fb:0a:b7:a8:8d:14:
dd:f4:28:60:b1:c1:90:a4:93:84:ac:da:4f:2c:0f:5e:e4:22:
66:b0:9c:04:28:49:76:16:16:77:61:ca:8e:14:01:0d:ec:c3:
04:19:44:f6:90:1c:13:b1:66:ab:fa:3a:91:23:e9:9a:5c:29:
16:43:33:e0:77:6e:fc:66:e9:c5:46:bc:e6:fb:3d:5e:ee:b1:
91:de:99:66:1c:50:9c:68:79:65:1c:64:0b:25:0b:14:2a:39:
52:69:42:d3:5c:bb:7d:28:23:46:d1:63:41:e7:e1:6d:a2:b6:
5d:76:da:ae:cf:7e:2d:10:83:fa:7c:d7:f9:a8:da:57:ee:e8:
0e:8f:41:28:9f:b4:53:11:bb:fc:84:f6:95:84:be:3b:f5:e1:
34:ce:36:2c:cc:be:a3:d9:ee:89:56:b0:a6:b4:e5:1a:84:06:
68:32:2f:db:1d:bc:ea:4a:d6:98:2b:85:5f:26:0a:94:6c:e8:
15:9d:65:5a:1f:dc:96:e7:1f:ce:c0:30:5a:e4:7b:a6:6b:db:
91:db:e7:05:44:85:06:ed:80:58:94:eb:95:76:e9:46:e9:35:
ae:2e:d9:c4:d2:e5:29:fc:7b:39:57:b7:7a:d5:84:79:cc:cf:
85:85:a4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:26 2025 by rpki-client