Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef187fd6-4a02-33c0-95c9-ed0316909d71.roa
File: ef187fd6-4a02-33c0-95c9-ed0316909d71.roa (raw, json)
Hash identifier: 0Iiq4XfKM0KLR3fMKcoMSlVwup+jNrov5IrsQ9Y7C2Y=
Subject key identifier: 42:1C:D7:72:C9:3B:1A:DF:F1:18:59:B8:2C:12:69:B6:0F:4D:A7:64
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D323148E5BD949323E82D89F0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef187fd6-4a02-33c0-95c9-ed0316909d71.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.159.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:31:48:e5:bd:94:93:23:e8:2d:89:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=0516f3c3-11d4-4234-877d-0c68c907328d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b9:ee:59:37:b7:ab:08:4d:55:e8:c6:a1:7d:
0f:85:07:72:3f:e3:1f:6c:19:05:53:40:80:1f:e5:
51:56:5c:09:cc:59:de:4c:60:bd:81:68:24:50:0a:
d1:61:2c:59:84:0f:f1:da:ac:f3:e5:f4:51:d1:80:
11:fd:f6:0b:df:7f:82:ef:a8:26:41:50:c5:50:57:
80:09:25:9b:b9:cd:25:ea:24:8a:f5:73:68:0d:cf:
81:69:6b:08:37:ec:21:a3:f5:e8:b0:21:92:13:d0:
e1:a6:52:6b:19:c9:95:2d:d3:ea:23:e2:d4:17:22:
bd:03:db:46:85:bc:81:09:83:78:c9:0f:53:c9:87:
a5:50:90:2c:da:02:ab:fe:09:59:2e:bb:3a:a7:6d:
b5:44:9d:2f:cc:97:a5:f1:f1:c4:77:60:5b:90:cf:
88:8a:46:3e:d7:a9:56:e6:ed:be:b4:6b:8e:4f:3b:
b8:88:d5:c4:b2:a0:5d:64:39:2e:ea:df:1e:12:a4:
31:2b:b5:66:ab:c4:16:3b:af:af:24:12:88:ac:68:
7f:5a:6c:40:2b:a4:e5:d8:c2:b8:54:fa:17:4f:62:
ce:67:2c:d5:72:fb:aa:75:75:05:41:c5:de:89:a3:
81:ba:95:d3:eb:aa:3d:8f:2a:52:16:56:ce:04:6a:
b8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1C:D7:72:C9:3B:1A:DF:F1:18:59:B8:2C:12:69:B6:0F:4D:A7:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef187fd6-4a02-33c0-95c9-ed0316909d71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.159.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:f1:bc:e2:c3:e1:7d:44:eb:a6:0f:07:92:e6:72:f8:8e:55:
f6:e1:52:fb:ba:11:ea:d1:32:7f:d7:fd:65:98:a8:f5:e9:25:
ae:47:92:3c:e2:bb:9d:17:61:ac:f1:ea:86:a8:6f:be:5c:08:
6e:46:d1:24:ce:90:12:54:55:d9:64:17:97:70:32:33:41:80:
7f:d6:a9:7e:d2:62:c7:c2:f1:47:cd:e8:06:a5:ae:6e:b1:29:
4b:ca:df:d1:f5:fa:4e:7f:59:fe:bc:6c:23:68:f8:ac:f3:bd:
f0:ce:e4:5a:e0:01:f1:9b:e1:77:e8:66:a8:a4:fa:d7:21:af:
c8:04:20:47:24:c9:a9:9e:93:3e:c1:d9:eb:a1:f3:61:01:cb:
59:13:6e:bc:08:d2:0b:fa:2c:ad:13:56:52:b6:6b:32:ff:a9:
ff:6b:d2:35:da:75:02:0c:8c:90:bf:38:01:84:0e:4e:e7:95:
e9:9e:74:df:39:68:c1:be:32:0f:0f:88:78:5b:4e:e2:b2:54:
00:a3:d6:a1:29:df:47:11:25:15:4c:cd:13:d7:1f:c7:7a:5f:
56:d7:b1:42:2f:aa:e9:30:f5:e8:2b:dc:60:48:6c:b8:24:2f:
42:51:84:d8:72:a6:28:68:41:b9:1c:ac:71:ff:8b:e1:fd:df:
a9:82:61:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:23 2025 by rpki-client