Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef9c9a3b-1d16-36c8-a820-743596a0ceb6.roa
File: ef9c9a3b-1d16-36c8-a820-743596a0ceb6.roa (raw, json)
Hash identifier: 4NgtW9w1k441Cvx8q0EET60kni2zcxn3HS/O/hVAyWo=
Subject key identifier: AE:2C:E9:3A:F5:F5:7D:88:0E:6B:54:58:E3:DB:C1:EC:62:3E:23:A5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F13026F7D8D2C0F0A19AC0F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef9c9a3b-1d16-36c8-a820-743596a0ceb6.roa
Signing time: Mon 29 Aug 2022 12:00:00 +0000
ROA not before: Mon 29 Aug 2022 12:00:00 +0000
ROA not after: Tue 04 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.175.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:13:02:6f:7d:8d:2c:0f:0a:19:ac:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 29 12:00:00 2022 GMT
Not After : Oct 4 04:00:00 2022 GMT
Subject: CN=df870da9-4467-4ecc-9b6e-dcc549f0dc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:6a:41:34:25:99:3a:f7:00:17:6c:f2:1f:
0a:c8:6b:e8:8c:10:3d:5c:35:a7:d6:c9:05:75:f5:
a7:bc:ee:2f:0f:69:27:da:ee:18:d4:fa:40:51:1c:
65:04:7b:14:43:fe:75:56:a3:bb:22:87:8b:16:dc:
ac:70:ec:50:b0:cd:38:a8:cc:0f:dd:aa:3b:1c:21:
41:53:35:25:93:bf:2b:c2:be:8b:76:ca:66:5c:6f:
41:fd:df:fa:84:ba:7c:8b:f6:d7:8f:33:ba:86:31:
a0:2a:24:f8:87:8b:4e:d9:f1:0e:03:0f:3f:2d:b2:
27:e1:64:34:c6:8e:63:4a:8c:86:96:7a:3a:c0:42:
24:62:0c:1a:73:14:7d:49:4d:6f:61:d4:9e:ab:e6:
9e:ed:59:86:57:fb:50:9c:75:cf:7b:8f:30:81:d7:
76:52:d9:a8:c4:17:14:7e:97:d7:f0:bd:0a:97:95:
ac:07:42:11:e4:63:e5:c6:ae:cf:2d:46:83:e2:d3:
2a:ad:4c:29:57:44:ab:33:c9:04:5f:da:f5:66:61:
e0:17:39:0e:bd:b3:b5:07:ae:f3:9f:3d:b3:86:33:
02:d2:85:30:1a:6b:29:bd:91:1e:72:a5:f2:8e:46:
6e:60:4f:63:5a:c1:91:cb:b0:ce:68:70:9a:c7:d4:
55:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2C:E9:3A:F5:F5:7D:88:0E:6B:54:58:E3:DB:C1:EC:62:3E:23:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef9c9a3b-1d16-36c8-a820-743596a0ceb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.175.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:bf:12:3b:aa:9e:74:69:b0:ad:16:50:0f:1a:e9:4f:4f:0e:
d0:9e:bb:80:76:b3:71:c8:41:92:ec:01:39:69:07:1e:f6:05:
8a:0a:ac:92:23:12:27:ea:f3:b2:45:f5:8d:e0:44:0a:7d:b5:
da:6b:cd:dd:57:ed:0f:5c:03:76:7e:f5:ba:79:89:0e:65:f9:
52:65:c8:9f:70:bc:9f:c4:aa:3f:24:6f:ec:4e:5d:25:dd:de:
df:e7:3c:84:7d:5d:f7:bd:c6:30:c8:fc:fe:a8:35:29:80:84:
ba:13:88:b6:fa:dc:f3:0b:7f:74:7c:62:56:b3:3b:f8:43:13:
93:eb:2e:7a:32:7d:3a:d4:65:6b:5c:c0:f0:ca:2f:72:72:c4:
dc:0e:f5:14:2b:aa:9a:ae:4c:c7:1b:98:48:43:59:a3:67:2f:
90:9d:d5:ec:27:5f:ff:b9:8d:6c:19:c7:95:37:20:5b:d6:5d:
16:c0:ee:cd:9f:bc:a6:3e:0d:3a:bd:06:43:3a:29:36:b5:2c:
38:6c:1e:9d:b0:a9:9f:9a:6f:d1:a5:a6:48:5c:7a:86:f3:c5:
c3:24:a9:52:a6:07:89:8d:47:38:0c:0f:c9:e0:29:52:d8:41:
b0:7b:c6:25:5a:3f:88:60:d9:d6:19:c6:a4:d8:fc:06:53:ba:
f7:6a:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:15 2025 by rpki-client