Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd49fb7b-59b9-370a-80a2-816f37a8c0a6.roa
File: dd49fb7b-59b9-370a-80a2-816f37a8c0a6.roa (raw, json)
Hash identifier: SAVMVcdF3s83hM7c6P8gZbCHmtrKePHbUuMuzWN+MEg=
Subject key identifier: EF:7E:02:13:6A:34:1A:6A:92:37:F3:F6:23:CB:07:CF:CB:96:E6:7E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D593F9E610CF9C08310DC2000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd49fb7b-59b9-370a-80a2-816f37a8c0a6.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:3f:9e:61:0c:f9:c0:83:10:dc:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=a5631ba8-a941-4772-86e4-a9467e9111b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:b9:fe:0a:87:42:f3:ce:21:97:4a:7a:d7:
21:7d:c3:93:07:2b:6c:be:e6:e0:6b:64:b3:a6:25:
cd:f3:76:7e:ad:5f:51:e8:db:09:73:7d:1f:de:63:
86:12:60:75:47:8b:6d:e4:a4:67:1e:35:d1:5c:0e:
55:7e:60:af:11:f4:bd:37:4a:bb:91:ef:bb:5d:cb:
7a:ee:d2:bb:9c:04:ed:e8:20:52:6b:dd:8f:17:58:
2d:ed:cd:1f:a2:88:5e:e3:cb:f5:c9:50:00:89:f4:
dc:b2:d5:1e:4a:bb:38:27:2d:65:a3:0f:09:3e:9a:
81:d5:6c:43:5c:50:eb:f9:a5:0a:5d:6b:be:90:0a:
2a:bd:2d:ab:68:01:1a:65:bb:c1:43:cc:a4:08:2d:
e6:31:39:69:68:f6:ec:2d:05:4b:af:7e:d2:16:ba:
eb:09:fc:87:4c:87:ba:30:81:ab:41:1d:8b:d0:50:
6a:59:12:c5:cf:2c:8d:ad:67:7a:51:6b:ff:26:3e:
90:73:36:fb:f7:d8:fe:a6:ec:74:da:ad:90:e5:33:
3a:1b:88:bb:d9:6d:5a:1d:11:3e:2e:38:43:5f:6a:
e9:ab:cc:aa:cc:27:40:05:a2:0d:66:89:a1:de:74:
3c:7d:db:b4:cd:3b:a0:5b:31:c0:cd:e2:23:91:48:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7E:02:13:6A:34:1A:6A:92:37:F3:F6:23:CB:07:CF:CB:96:E6:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd49fb7b-59b9-370a-80a2-816f37a8c0a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:bc:ec:84:cb:53:af:c4:9f:2e:ac:ae:81:d9:da:6a:72:f0:
be:32:7c:57:99:67:55:5d:16:b1:80:6a:45:1d:a0:d1:48:ca:
18:9c:01:54:95:bb:8d:a0:f6:e7:55:43:fa:80:e5:12:6e:81:
d6:cc:0d:7f:a3:32:11:46:92:09:a4:80:50:fb:b7:04:84:1d:
ac:6c:cd:43:19:fb:fc:41:b9:7c:98:7e:e4:98:ef:76:c1:ec:
52:c2:18:5a:bf:b3:c7:79:de:10:89:13:5f:44:e9:36:ff:6e:
4a:6b:67:06:ee:b5:06:0b:7d:3e:ed:33:fc:10:08:75:b8:ba:
9b:5f:4d:89:a3:c0:f5:8f:00:7d:c3:36:2d:a8:6b:b4:f5:7d:
9a:5c:8c:2e:db:a3:21:f3:19:37:4d:fb:fc:23:b5:85:6f:47:
60:31:37:e0:d0:b3:23:38:3d:55:5d:83:96:ac:a6:ad:82:56:
6a:21:02:75:83:59:3d:f7:83:6b:81:d2:ce:12:9f:d2:87:80:
3b:d9:65:08:16:5f:1a:71:3d:8a:03:ca:d0:86:3e:da:27:37:
fb:f2:a1:03:4f:40:b5:08:26:01:79:fd:16:08:de:a2:6b:83:
6a:c9:37:76:74:74:43:a2:25:39:2a:28:b0:52:3f:4e:72:2e:
24:7f:15:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:57 2025 by rpki-client