Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f8f74152-4126-34a2-93e1-b174a385a0f0.roa
File: f8f74152-4126-34a2-93e1-b174a385a0f0.roa (raw, json)
Hash identifier: 7poJH9yOxUL/6qcTzG5OSUBv3FYjNvmcixLwWflPKcU=
Subject key identifier: 69:EB:EA:EC:7E:38:24:A1:14:66:AF:F1:6D:19:BF:CF:AD:44:81:97
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584019941A1E8C3A49060BFA0C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f8f74152-4126-34a2-93e1-b174a385a0f0.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:94:1a:1e:8c:3a:49:06:0b:fa:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=8eb1c2b5-bd7d-43aa-b9b2-fd9b3c874eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:46:ab:45:00:f5:f3:e6:ea:93:ec:46:e6:
49:67:87:86:a5:fd:f2:ee:57:54:90:f6:a7:87:05:
41:ae:c3:4d:cf:71:fa:fe:5a:d8:5e:e7:dc:c3:51:
1c:f6:c6:46:6c:01:08:ff:f2:5b:96:45:50:29:6b:
e1:f9:c5:b3:5b:61:e6:2d:b3:e2:26:fc:42:f3:54:
1e:2c:f7:b7:76:db:75:8f:fb:98:06:26:91:e1:97:
a3:ca:9c:f9:fb:14:0c:3a:a9:18:9d:7b:d5:04:ba:
13:97:37:4a:5e:6c:0d:45:70:ee:d7:79:55:9f:a8:
e5:9d:08:b7:9f:74:95:69:97:76:eb:e3:c6:98:79:
a4:99:ab:16:a6:78:bb:96:6c:42:9e:34:ad:2c:c9:
d8:07:82:70:5a:a7:f4:48:6a:07:ef:cf:e0:e2:e6:
86:ae:a3:7a:6d:37:6d:ea:69:7f:86:43:06:4d:79:
39:2b:89:18:7d:32:4e:7a:b4:01:d7:bc:4b:61:d2:
9b:18:31:a6:ce:b7:6d:77:c1:fc:34:9b:10:20:db:
57:73:4c:12:b8:5a:75:66:a3:52:50:39:70:1f:07:
e9:9a:76:51:80:c1:85:6a:5d:54:ef:db:c8:20:eb:
dd:4b:28:d5:b8:eb:30:35:a6:19:eb:28:4b:5c:ad:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EB:EA:EC:7E:38:24:A1:14:66:AF:F1:6D:19:BF:CF:AD:44:81:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f8f74152-4126-34a2-93e1-b174a385a0f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:dd:da:ce:91:11:64:65:6b:cd:2d:6c:1e:3a:95:62:33:21:
38:18:af:59:6f:5b:83:a8:14:f1:e7:8e:ee:43:3c:c5:15:af:
b2:ad:97:6b:f3:1c:0a:09:43:19:33:1f:51:1c:e2:28:c9:e3:
66:57:45:4e:6b:4f:f8:b1:c7:9d:00:3a:75:72:8b:b0:f1:f5:
86:bd:45:7c:c8:38:b1:65:1f:5b:a8:5c:3b:ce:f1:d9:da:e7:
d3:9e:e2:cc:aa:6e:49:cd:4b:f7:43:49:52:9c:2d:e0:df:30:
ca:89:b5:60:75:80:df:9a:a2:c5:60:12:f8:f8:dc:85:d4:43:
4f:ba:9f:38:fd:c9:22:f9:f9:af:65:76:8e:48:19:d0:56:92:
7b:57:95:05:42:35:66:0f:3e:4a:d1:ea:7e:9a:1d:92:d6:e5:
e5:2c:c5:b7:77:6a:11:03:86:4a:0c:5d:42:c1:57:97:6f:83:
ce:a2:16:f8:78:d6:db:d0:0b:12:d4:e5:e0:de:04:71:2f:62:
45:1d:db:78:b9:7d:af:00:b8:dd:d1:ae:72:2e:43:77:0c:86:
73:f1:24:d8:82:ea:bd:4c:0f:d3:1f:45:0d:b4:65:fb:8f:a9:
49:17:ad:72:51:0c:b6:d0:ff:de:21:53:18:1f:59:ab:ae:f2:
42:12:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:29 2025 by rpki-client