Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6652fee-afd6-3faf-abf8-7db90c4231a1.roa
File: f6652fee-afd6-3faf-abf8-7db90c4231a1.roa (raw, json)
Hash identifier: M7niTjNP+e8IoJzSKzdkTO0Clv6tNI5M8xNMglXSD+M=
Subject key identifier: FF:5B:24:1C:60:BC:DE:C9:4A:FB:D4:A0:AE:E8:79:A2:54:1E:53:F2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408C5C015857DE1B31EA51C300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6652fee-afd6-3faf-abf8-7db90c4231a1.roa
Signing time: Wed 11 Jan 2023 12:00:00 +0000
ROA not before: Wed 11 Jan 2023 12:00:00 +0000
ROA not after: Thu 16 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8c:5c:01:58:57:de:1b:31:ea:51:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 11 12:00:00 2023 GMT
Not After : Feb 16 05:00:00 2023 GMT
Subject: CN=7941600d-a452-4f82-889e-982c4700d362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:81:8a:c0:0f:e6:25:15:d1:33:02:89:dd:
35:7d:10:b2:28:29:07:32:09:39:47:d1:3c:6c:11:
8b:2a:8c:da:65:50:d3:55:c9:d9:8f:f0:8f:f6:77:
30:ab:4a:3a:b1:82:9c:33:d6:c1:63:73:47:24:32:
b5:f5:36:6e:b5:9b:e5:26:5b:77:a9:4f:60:a6:92:
2a:bf:db:7c:d2:86:39:bb:83:40:c5:d8:d4:ef:03:
ac:e9:a2:ce:d4:17:66:de:80:52:b3:bc:e6:a5:13:
de:0a:e0:74:87:5a:e7:2a:af:54:e9:3d:4a:6f:05:
83:98:78:23:d7:3a:86:85:6e:49:8b:69:b4:ff:62:
e9:41:c0:2b:f8:6d:5e:e8:88:da:40:73:f7:91:d1:
4b:0d:7d:ba:4f:a2:9c:7f:ed:cb:60:24:ec:00:e9:
df:48:ac:98:da:f6:5d:04:01:ba:c4:01:45:8f:d4:
7e:1d:8b:ab:e7:d7:29:a0:1c:2d:12:63:12:8d:67:
0a:73:e0:00:9f:5c:46:9b:ad:2d:cf:1a:b9:63:7e:
01:e7:cd:0b:20:d9:51:69:f9:fb:56:81:23:2b:5c:
79:e2:78:62:28:5a:08:a6:56:af:81:1d:90:97:76:
12:e6:3c:ec:fe:5b:1b:57:e9:b3:24:48:c9:d7:f7:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5B:24:1C:60:BC:DE:C9:4A:FB:D4:A0:AE:E8:79:A2:54:1E:53:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6652fee-afd6-3faf-abf8-7db90c4231a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:03:92:bf:5a:48:a3:f4:98:4b:f5:0f:ac:da:37:22:03:68:
41:8d:e9:c1:b4:9e:79:c3:16:93:25:45:d6:7f:9f:33:e4:77:
bd:88:3f:75:ba:95:a6:10:da:ce:83:bc:78:c9:fd:38:2b:d7:
f6:bd:48:69:e1:cd:b1:8f:cc:64:50:4a:97:81:2e:ea:6a:04:
25:30:2b:e3:9b:67:44:93:00:12:02:d8:be:d1:83:11:30:bc:
1a:46:c7:f9:f8:3e:87:6c:64:71:0a:18:22:34:fb:fa:42:e3:
80:ca:f9:8b:75:01:f2:e5:41:bc:c2:a8:9b:a2:c3:8b:ca:93:
d1:9f:01:83:e5:85:d5:c5:54:c5:87:db:d2:4c:d3:f5:c6:09:
ab:a0:8d:b1:f2:f6:97:28:58:d4:d9:86:da:77:8a:2a:ee:ff:
51:f8:e3:df:9d:cf:27:d7:46:c4:f7:95:a3:9c:a9:e9:81:87:
7e:1d:66:e5:13:b5:67:99:35:cc:14:8b:a4:53:a3:dc:66:fd:
6e:ed:8a:cb:a9:1e:2a:d7:3f:bc:8b:52:1c:1a:16:c4:2f:b1:
43:a1:26:be:8f:6e:b3:d7:40:6b:0d:15:0f:11:b6:7a:2c:be:
4b:53:dc:9c:10:f8:81:67:3b:b5:67:16:27:cb:92:9f:14:5b:
e0:66:8e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:04 2025 by rpki-client