Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dceb1e1f-29c2-3dfe-b8a9-c9bfaa3fb057.roa
File: dceb1e1f-29c2-3dfe-b8a9-c9bfaa3fb057.roa (raw, json)
Hash identifier: NN9IfaEd+Vgcxu0117UM4JpKtJnTRAdWvv/qpyuieY4=
Subject key identifier: A1:20:E7:EB:DA:EC:C8:BE:53:92:55:2D:BD:F1:F0:8F:01:8B:D6:B5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E012880EA7DE058351CCABC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dceb1e1f-29c2-3dfe-b8a9-c9bfaa3fb057.roa
Signing time: Mon 23 May 2022 12:00:00 +0000
ROA not before: Mon 23 May 2022 12:00:00 +0000
ROA not after: Tue 28 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.185.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:01:28:80:ea:7d:e0:58:35:1c:ca:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 23 12:00:00 2022 GMT
Not After : Jun 28 04:00:00 2022 GMT
Subject: CN=5d1866f2-3a38-42bd-9ee5-82c296697073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9e:1f:42:96:5c:3b:b4:7d:b9:d8:01:14:82:
25:f2:78:21:f9:ec:15:84:7c:2c:b6:5d:ce:a4:49:
06:8a:af:66:68:65:b5:01:93:19:e8:9c:89:8b:46:
f9:d9:26:08:9c:34:68:92:4e:07:52:b8:62:46:a3:
b6:d5:e6:0f:28:0a:1e:37:52:a7:bc:62:b6:77:db:
8c:a6:10:fe:db:cb:dd:f3:22:ac:6f:04:0b:0d:21:
e4:06:a4:5e:d0:ac:58:5e:23:15:bf:51:6c:32:b8:
c3:2b:57:61:7b:79:4d:77:a5:81:4c:98:58:74:14:
1e:ed:86:3b:9f:7e:8f:f4:88:60:14:ee:5d:c3:ca:
bd:76:3d:67:51:f9:35:79:20:e2:73:ef:5f:77:4c:
04:89:f4:64:7f:99:21:29:ce:4f:76:e5:30:35:4f:
84:8d:e2:f5:a0:f8:70:c5:a1:1d:18:fa:71:77:7b:
a9:45:01:f9:90:28:b0:e2:23:3e:8c:02:82:6c:b9:
2c:28:5f:55:a4:71:3f:dd:46:9a:59:14:ec:4d:0d:
57:19:a2:62:04:32:44:e3:93:0a:7b:39:8a:c2:a5:
9c:42:1d:dd:e9:6b:b8:ae:87:ff:ca:3d:e7:4f:36:
60:b1:dc:aa:37:30:6b:71:78:61:45:db:cf:8f:d2:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:20:E7:EB:DA:EC:C8:BE:53:92:55:2D:BD:F1:F0:8F:01:8B:D6:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dceb1e1f-29c2-3dfe-b8a9-c9bfaa3fb057.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.185.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:87:b5:b6:9f:d3:35:b0:31:d2:52:91:c6:2a:6b:af:60:8c:
3d:4b:85:88:58:0c:f2:3d:de:14:43:e1:e8:b3:8f:59:a4:84:
9f:14:8c:de:4b:d3:3e:52:d2:81:a9:d8:cf:9d:ab:58:ca:ef:
d6:35:9b:0a:a8:d2:70:4c:7d:8e:e4:45:ad:fe:21:18:f8:6d:
95:b1:c0:75:5a:0d:52:a6:a6:7c:2f:0b:e3:ea:10:2e:59:5e:
12:c6:d5:a6:32:1d:24:9c:83:c3:af:7d:1a:e7:45:c7:7d:57:
ef:50:76:95:12:9d:ba:02:e3:d3:3b:c7:c2:94:09:b3:a8:68:
8b:10:3c:41:9d:f8:71:a5:de:cd:6e:d5:68:2f:b4:32:78:cc:
ef:c2:e2:05:fe:bb:34:5e:33:fe:1b:8f:73:ce:62:a6:fb:97:
6c:05:53:ee:4e:1f:90:19:d1:87:82:f6:e5:a1:8c:71:83:f8:
03:90:50:21:cc:48:40:1d:21:b5:e7:ca:1a:05:19:52:f9:93:
ea:86:83:9f:07:87:f7:89:64:5f:b0:67:8e:95:06:ae:ad:aa:
51:3b:92:5e:42:97:58:1f:5d:38:67:f6:63:ac:44:6d:13:d4:
fe:4b:0c:a4:f0:23:3f:84:2e:a4:60:8f:f4:f6:29:d8:1f:3e:
75:78:a9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:49 2025 by rpki-client