Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df802bde-b618-3bab-b05e-1ab0ef5f1615.roa
File: df802bde-b618-3bab-b05e-1ab0ef5f1615.roa (raw, json)
Hash identifier: +galzky2IOsg9rMHfjYrpWYrxqdnrVv2Jljch+UAl10=
Subject key identifier: F3:38:EA:99:82:8F:B0:E5:9E:B8:30:84:5B:10:F4:97:09:DD:B6:EE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CB97326AAF454FF2FF6CD8900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df802bde-b618-3bab-b05e-1ab0ef5f1615.roa
Signing time: Wed 26 Jan 2022 05:00:00 +0000
ROA not before: Wed 26 Jan 2022 05:00:00 +0000
ROA not after: Wed 02 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.156.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b9:73:26:aa:f4:54:ff:2f:f6:cd:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 26 05:00:00 2022 GMT
Not After : Mar 2 05:00:00 2022 GMT
Subject: CN=9e174fda-6d81-42f9-aa62-906dbcf8ec78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:51:11:41:c9:bf:09:e2:1b:01:2d:70:de:
1b:97:40:0b:d8:ee:c9:0e:38:b2:6f:72:18:a1:f0:
ee:09:fb:57:85:30:e9:44:3d:3c:d8:29:b4:4b:38:
9e:88:cd:dd:03:7e:e9:1b:0d:ec:b5:9f:ed:b4:16:
dd:33:c0:56:ca:0d:25:43:dc:6a:b6:54:09:bf:bd:
06:5e:5f:88:27:e0:20:76:a6:03:cb:45:53:34:7d:
08:92:16:5f:bf:f3:62:aa:95:f7:94:74:9d:2c:ae:
46:bd:b8:dc:d6:0c:d5:06:e5:08:c6:26:c1:35:c3:
df:7d:46:e1:37:5b:3e:66:dc:dc:dc:55:54:49:ca:
e9:4d:ca:1c:4e:20:83:52:63:d5:9a:81:e2:d7:93:
81:e1:16:5a:80:9e:06:03:35:d2:b2:58:4a:e3:14:
de:02:89:11:08:86:b6:52:31:d8:bf:4a:ac:8b:e0:
21:d3:70:1e:47:ae:31:48:3a:15:52:a6:e9:99:56:
dd:9f:1d:57:5b:df:81:b1:19:36:b8:d5:1f:6c:4e:
02:d3:96:da:91:99:9b:69:86:2f:54:0b:d2:6b:0e:
19:50:94:6b:30:00:7d:ff:36:5e:24:67:f3:c6:a1:
ec:3c:38:d0:78:10:f1:e3:b2:2f:07:9d:c2:bc:e8:
4e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:38:EA:99:82:8F:B0:E5:9E:B8:30:84:5B:10:F4:97:09:DD:B6:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df802bde-b618-3bab-b05e-1ab0ef5f1615.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.156.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:44:46:09:31:77:9d:de:7b:dd:e4:78:56:b9:ea:f6:a0:c4:
b1:d0:1b:6a:9f:db:12:18:e3:91:ac:10:94:3e:5f:e5:dd:7f:
a9:4f:dc:95:72:c3:b4:6f:c8:9b:74:96:ac:3a:10:aa:62:a4:
01:1f:e8:4b:a5:eb:30:37:cd:96:fc:fc:29:7c:fb:db:77:5f:
1e:00:28:2a:58:f7:d0:42:f1:65:96:c5:b5:4c:e9:bc:e4:df:
05:6f:8c:7f:d2:2f:17:cc:d9:41:83:9c:f6:13:6d:46:83:25:
13:46:e4:14:06:6e:d9:49:cb:37:7a:f6:46:e8:93:f3:9b:45:
e1:31:e8:7f:a8:12:b8:e2:b0:19:28:d7:4f:08:93:a7:7b:eb:
0e:b1:e5:30:bd:02:06:b5:13:e2:81:56:94:f1:f4:72:65:c6:
24:1a:d1:3b:3c:3d:6e:10:6d:b4:63:cb:6c:bd:83:cf:a8:2b:
60:71:1b:3b:d8:10:82:a6:18:63:f2:ae:81:25:ef:b9:a1:28:
47:dc:7f:62:d0:7e:dc:f9:ba:4f:01:93:a3:2f:5a:58:51:1c:
6e:be:35:bf:7e:35:25:54:02:e5:c0:c5:ee:cb:05:8c:ce:27:
e1:e0:3b:0d:6a:06:13:2e:a8:1c:18:e9:29:9d:e7:32:a4:92:
55:0c:59:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:43 2025 by rpki-client