Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f023702d-4bb5-3673-82ec-187adc37128c.roa
File: f023702d-4bb5-3673-82ec-187adc37128c.roa (raw, json)
Hash identifier: Bi1PYLno3sZHdT5YzyVa+UCPYMe6nR1KbClvZDhEJZE=
Subject key identifier: 32:0D:64:FD:D3:F1:43:DD:54:69:55:90:15:14:B7:6F:D8:64:32:F2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D32312FBB70BE0D2FCCA59500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f023702d-4bb5-3673-82ec-187adc37128c.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.170.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:31:2f:bb:70:be:0d:2f:cc:a5:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=12bd22f6-39f6-46cb-b667-f6b0a32ec8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:98:9e:c0:b2:6b:80:3e:19:b1:21:f9:18:
41:cb:ff:23:6b:3a:58:5f:29:cc:de:06:a8:60:2d:
dd:a7:b5:e1:1c:c6:cd:8d:25:5b:63:bb:92:67:bc:
65:ed:3a:26:ea:36:3e:ee:1b:a4:d3:e3:ff:51:83:
e3:13:92:75:35:f3:bc:ad:ac:78:f2:29:a2:f3:ba:
6f:82:7d:0e:ed:69:32:77:c0:45:0d:b7:6e:ec:32:
2d:4f:06:82:1a:8d:49:40:27:7e:e0:e1:0c:75:78:
79:b6:97:9b:09:c6:2d:fc:c2:bd:17:ce:87:0f:14:
67:9e:93:b7:18:2e:4d:53:6a:41:a2:ca:ad:93:bf:
48:8c:ca:1a:5f:59:a2:bf:16:55:9c:79:8d:d1:9d:
04:03:d3:14:7b:ca:bb:84:7e:72:f2:10:f2:29:93:
4e:5b:7e:6b:f5:9c:18:43:dd:e7:86:17:7e:1b:d3:
c2:cc:8d:bf:0f:91:ba:f8:72:16:37:d2:3c:b4:37:
ab:89:34:2d:e8:76:99:c5:88:b3:99:7c:79:fe:fe:
cc:46:cd:b7:36:a2:10:fa:75:88:99:25:01:50:05:
34:e3:46:af:38:dd:19:44:df:8c:7a:89:56:75:5b:
d5:26:4b:73:47:4e:3a:24:6f:bb:34:c5:1c:b3:9a:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0D:64:FD:D3:F1:43:DD:54:69:55:90:15:14:B7:6F:D8:64:32:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f023702d-4bb5-3673-82ec-187adc37128c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.170.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:1b:47:23:77:76:59:d8:2c:47:1c:eb:0d:f9:1a:a0:4a:47:
37:45:ba:61:98:05:7f:2c:8d:05:21:0a:1e:7c:99:f9:bf:71:
0a:4c:aa:d9:26:24:fe:7a:2c:db:d2:49:b1:6b:03:e7:9c:70:
28:a4:63:27:67:bd:e2:05:b1:23:75:ac:b7:84:5d:f1:a3:ab:
75:a5:e3:61:7e:b0:ae:e3:a6:bd:69:fe:16:aa:00:49:58:a7:
aa:b5:06:dd:38:1e:e6:85:f2:cc:fc:1e:10:b4:95:2d:5b:dc:
2a:c4:7a:07:1a:77:20:ef:59:4e:a6:d4:61:66:6b:df:51:ad:
ad:5c:09:5b:e1:96:d1:fd:cf:10:5a:16:3b:bb:28:ae:13:bf:
c5:a6:62:9a:bd:e8:b8:b2:6d:ca:48:65:c1:60:53:c6:49:e2:
3e:ab:cc:0a:b3:16:24:19:04:5a:8e:d3:26:06:e0:4f:cf:d3:
62:91:fe:7c:a2:d9:7a:98:9e:ed:70:6c:ff:8f:d8:cc:1b:8e:
7f:1c:7c:4a:e3:e9:87:f6:64:e4:ee:8c:09:cc:6d:96:f4:3a:
f9:99:d0:3d:5c:5c:11:4b:a7:e6:78:3c:7c:7e:8e:64:11:68:
8b:5f:40:b2:c1:7f:47:db:94:4f:ba:29:1d:fe:df:db:5f:77:
aa:31:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:48 2025 by rpki-client