Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e16e1102-c98c-39cd-9783-1fc32d09b78a.roa
File: e16e1102-c98c-39cd-9783-1fc32d09b78a.roa (raw, json)
Hash identifier: /k5IDs3hIvuSZjSPhlSmq0UmcwDWnWZUwIkzNBVIw1Y=
Subject key identifier: 5A:9D:03:52:42:64:4F:D3:57:DE:85:0B:2E:9E:75:06:43:9B:11:23
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840197660DDD9BE4A1C92012F40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e16e1102-c98c-39cd-9783-1fc32d09b78a.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:76:60:dd:d9:be:4a:1c:92:01:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=90b44064-660c-4776-b966-f25f3843cf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:24:ba:4a:70:81:8f:86:5e:85:80:a1:04:
42:be:2a:ae:09:2a:29:9d:f2:38:85:4e:37:17:e2:
a7:12:82:48:15:08:e0:6e:8c:5c:39:d8:00:7b:d7:
7d:c4:5e:71:2d:4a:ac:86:52:bf:0c:9d:4a:3e:a9:
66:da:be:39:ac:bf:b9:c6:69:c0:57:79:fe:10:28:
b7:26:83:57:28:c9:96:d6:67:93:0e:1f:91:95:92:
3f:0b:12:28:5d:2f:9e:c5:76:51:0b:82:04:72:b6:
7a:9a:98:26:59:3b:ea:4a:b3:01:9b:39:3d:30:0d:
36:cb:7c:dd:19:f9:fb:a5:3a:7b:8f:31:da:7e:95:
32:5c:d9:d3:79:93:58:ee:00:75:aa:5f:d2:2c:b4:
21:ca:b2:4e:10:bf:10:be:55:7b:24:35:15:82:17:
4a:13:64:13:a0:7c:85:16:f6:e7:3a:98:49:7f:d5:
15:78:67:ff:d7:23:19:ea:43:69:6e:20:41:73:c8:
e9:c0:12:60:25:e7:d6:1c:90:c4:c6:73:bd:96:13:
39:7f:32:92:3a:53:2b:bc:fc:f6:37:bf:85:9d:85:
e8:61:06:ce:8e:93:9e:40:71:62:30:0f:4f:3a:82:
bb:36:85:7a:e1:70:78:d0:b3:10:d8:41:18:cb:e8:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9D:03:52:42:64:4F:D3:57:DE:85:0B:2E:9E:75:06:43:9B:11:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e16e1102-c98c-39cd-9783-1fc32d09b78a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:f3:a2:b1:e7:fd:50:ea:4c:d8:cc:73:20:46:d5:27:dd:1a:
70:fb:d8:1b:27:f5:cc:8c:d6:c7:db:e4:9c:af:62:6b:88:7b:
41:09:40:a1:0e:81:47:92:eb:3f:d7:20:d9:23:96:77:52:88:
d5:de:d7:37:0a:c1:3a:9d:a1:95:f7:07:b5:60:c6:7f:e3:e8:
72:e9:9a:2e:30:6e:a2:06:38:06:55:c2:f5:86:bc:54:24:21:
b7:38:a0:1c:83:27:96:04:dc:b0:3c:b4:ee:73:8b:a4:ff:5e:
30:70:04:fb:e6:22:3c:ae:71:a5:83:21:08:07:de:52:5c:08:
ce:97:82:42:d3:18:28:f7:e8:ed:05:2b:30:90:7f:12:ae:a2:
e3:12:66:8a:09:1d:83:34:e2:c5:87:fc:55:d4:6d:04:21:bd:
52:5b:a1:81:d9:7b:c2:ee:68:b2:17:91:71:be:74:33:04:3d:
ce:2f:68:ed:d5:52:00:1b:dc:eb:cd:55:f6:79:58:e4:74:21:
a1:ec:83:6c:ad:b0:f4:98:5c:56:1e:a9:41:91:5f:11:b8:34:
2f:4c:83:41:cf:46:c0:79:f5:ad:24:74:76:4d:a5:d4:9a:5d:
94:1d:78:1a:43:f8:07:bd:2c:bc:99:c0:dd:dc:8e:8d:33:f2:
ff:74:d2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:43 2025 by rpki-client