Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db5bdd98-a49f-3d36-9cec-6b668c228f66.roa
File: db5bdd98-a49f-3d36-9cec-6b668c228f66.roa (raw, json)
Hash identifier: 9zwwmog7e0vM1ll3MZSrBQoNERkSs0oH3bo4I+MsleE=
Subject key identifier: F6:B5:ED:66:63:79:97:B7:A0:C8:55:18:85:8E:28:85:54:62:6A:66
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DBE0A31BA2F7D404C10093840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db5bdd98-a49f-3d36-9cec-6b668c228f66.roa
Signing time: Fri 29 Apr 2022 12:00:00 +0000
ROA not before: Fri 29 Apr 2022 12:00:00 +0000
ROA not after: Sat 04 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.15.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:be:0a:31:ba:2f:7d:40:4c:10:09:38:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 29 12:00:00 2022 GMT
Not After : Jun 4 04:00:00 2022 GMT
Subject: CN=b488d98d-d228-4d39-9ef5-9f9866c9555d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bc:c3:a5:24:a6:01:b0:fa:98:7f:b4:e9:25:
6c:bb:d3:9d:c1:8e:c2:4c:38:60:b0:a2:3f:25:16:
a5:ea:ab:18:84:e5:03:76:96:63:3a:60:90:33:88:
1b:34:52:32:f5:f3:3a:6c:ca:0a:b2:84:4e:95:c3:
a0:e6:4b:6b:8a:d2:88:32:94:40:7d:8f:10:98:54:
cb:ee:e3:c1:24:ac:9b:06:fc:8a:7b:9b:ce:71:38:
c7:2a:60:61:85:34:10:d1:a0:af:0f:b1:4d:1c:e1:
c0:e3:49:5a:67:bf:c6:2a:61:4b:2f:2b:17:c6:76:
cd:3e:f7:04:be:16:06:51:34:ea:85:92:e8:6a:6d:
6f:a4:f2:b9:67:7a:74:c7:38:a0:97:c0:9e:2d:a3:
4f:e5:7e:84:a6:f5:4b:01:69:44:18:9d:39:82:e3:
52:f7:a2:d3:75:f6:84:d4:e3:b2:e7:15:83:d6:67:
1d:53:fb:48:fe:80:2d:d0:ac:c1:b8:9e:29:3b:b0:
e2:d2:52:b1:a2:46:91:dc:47:c7:d2:db:fd:8a:6b:
45:03:3c:e8:b0:ff:c9:e1:84:f3:1e:3b:c7:6e:22:
5b:1e:5e:16:7b:c7:66:be:e5:bd:ee:b0:f4:6e:57:
51:a4:e9:69:01:f7:12:47:eb:d1:ad:b2:f0:66:79:
f6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B5:ED:66:63:79:97:B7:A0:C8:55:18:85:8E:28:85:54:62:6A:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db5bdd98-a49f-3d36-9cec-6b668c228f66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.15.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:bb:04:3f:d4:52:bc:00:06:a5:5c:81:11:2b:27:87:b9:b6:
17:0e:f8:01:a0:3c:cf:e8:f7:d1:9b:73:02:92:03:95:98:ee:
d8:54:f2:ca:88:61:67:1a:89:8e:c5:bb:e2:48:56:e3:ee:f1:
e3:67:0b:d7:62:d6:30:8c:ee:ff:63:6b:66:48:83:8c:fa:79:
91:68:76:92:b0:a4:50:67:f7:e5:be:56:71:09:7e:09:0f:13:
c3:22:aa:6e:76:8e:a3:fa:73:47:17:92:e6:34:9a:08:77:3b:
40:23:8d:62:2b:cc:c8:d7:49:a7:d9:6c:11:c0:4b:27:f6:5c:
b7:76:37:4b:fe:b8:3b:a0:57:61:12:f9:1b:2a:9e:cc:4f:a1:
99:f5:56:c6:71:58:7a:5c:a9:4b:0b:d4:a0:28:49:6f:ae:2b:
d3:9d:2d:1c:9c:36:c6:bf:70:64:05:7c:53:ca:06:0e:ed:57:
f7:b5:11:76:bf:25:1b:db:eb:74:c4:01:95:3a:a4:cd:f6:34:
a5:5c:b1:80:99:42:71:33:f8:6c:5a:88:78:c4:3e:e6:73:61:
01:bb:7e:e3:b0:75:7e:d7:cb:5c:63:38:ff:b2:11:e7:eb:74:
4b:4b:33:5e:e3:e1:9e:54:06:09:40:fd:e8:bb:49:b1:1e:62:
8a:b1:7d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:16:59 2025 by rpki-client