Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f18663eb-2a3f-3e77-8f5f-9203f965790f.roa
File: f18663eb-2a3f-3e77-8f5f-9203f965790f.roa (raw, json)
Hash identifier: kDJDsihBe+wSsdXvPRE742uOUzoIBRTMtE/6e87YK3Y=
Subject key identifier: 17:CC:FE:8E:4B:73:30:43:69:09:C6:15:00:B2:9F:52:4D:74:65:CF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA1119EEB619C4022A1D789A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f18663eb-2a3f-3e77-8f5f-9203f965790f.roa
Signing time: Wed 19 Oct 2022 12:00:00 +0000
ROA not before: Wed 19 Oct 2022 12:00:00 +0000
ROA not after: Thu 24 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.156.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a1:11:9e:eb:61:9c:40:22:a1:d7:89:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 19 12:00:00 2022 GMT
Not After : Nov 24 05:00:00 2022 GMT
Subject: CN=2d23c029-b520-44b8-8a93-128c7ceb3a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:69:69:4b:f5:cc:0f:e4:fa:ed:bb:cc:65:
b6:42:6a:e4:02:24:d5:a2:d0:4d:a7:3a:19:d7:5b:
31:0e:10:ac:7e:be:76:d4:99:2d:e8:76:39:f6:8b:
5e:b3:e7:92:b2:95:88:23:cc:6b:0a:35:63:f6:a8:
61:83:da:e4:b7:2a:ae:f9:7b:d5:5d:5b:49:82:e8:
27:b2:1f:70:74:c2:04:d7:ef:67:b3:a6:db:b7:78:
43:0d:a4:72:bd:71:de:9f:b6:4c:04:a6:a1:c4:44:
2d:88:ff:13:9c:d7:a7:a5:d2:38:a2:70:cf:04:6f:
c4:e5:d0:4b:82:2d:62:fc:b5:a5:49:0d:6d:c9:4b:
54:5a:9d:76:2f:bc:63:5a:ee:c8:57:af:e6:11:0a:
dc:b5:b5:34:78:46:e5:9d:42:51:55:54:40:61:f8:
e3:77:8c:c0:f9:49:04:df:ed:2c:94:4f:51:92:0c:
7e:51:09:e6:6d:44:e5:0c:1a:a3:c9:e8:f2:cf:5a:
8e:cf:a5:04:d4:b3:6b:5e:3b:13:88:b1:7d:47:4f:
b6:dc:ef:c2:d3:1f:20:b3:62:11:ad:3d:3c:3a:f0:
75:70:20:f0:89:0d:74:75:d1:6c:ef:ad:0e:23:05:
c4:1d:1e:08:85:15:30:33:17:10:1c:13:74:69:42:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CC:FE:8E:4B:73:30:43:69:09:C6:15:00:B2:9F:52:4D:74:65:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f18663eb-2a3f-3e77-8f5f-9203f965790f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.156.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:e5:5a:7a:3f:6f:fe:d5:bf:28:18:54:12:91:96:c0:06:be:
a7:ca:82:10:bb:bf:e7:38:de:e7:7d:53:44:8b:de:f4:f0:91:
0e:9e:bd:29:fc:57:f5:17:56:03:fe:2b:1e:ca:dd:9e:63:8b:
1e:23:c5:5a:b4:b3:a4:92:07:6d:21:be:08:8a:d6:f4:6f:b1:
be:38:3c:46:ed:a8:b2:7e:ff:63:5e:88:3a:dc:69:4c:c3:f6:
9f:e9:03:e6:2b:0b:51:e7:ad:bd:14:9d:22:cf:df:a3:78:f3:
11:25:19:47:2b:df:ee:4d:3a:16:5f:30:1e:cb:2d:40:bd:0c:
69:e8:56:84:81:86:93:0f:17:73:31:53:df:99:47:78:13:6e:
b2:eb:92:6e:ce:d0:c4:35:24:cf:e5:0c:e7:f2:ed:91:8f:ab:
cc:3b:5a:05:dc:2b:90:a1:77:5d:c8:79:4e:e9:ea:88:61:10:
99:02:be:76:ad:a2:b2:12:b1:c6:61:ad:23:6b:ca:6e:19:62:
27:b7:a9:3a:86:7b:5d:1d:46:e4:db:a1:b5:d6:60:6e:24:77:
aa:71:b4:2c:a6:ca:14:9b:b7:ed:8e:f0:e0:1a:d2:b2:9c:8d:
32:fc:91:f5:f6:c5:cf:61:fa:a2:5a:b5:90:6c:b8:ab:49:ff:
83:9b:49:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:53 2025 by rpki-client