Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0262c35e-f3b0-3ba1-9f35-f2ae352c5535.roa
File: 0262c35e-f3b0-3ba1-9f35-f2ae352c5535.roa (raw, json)
Hash identifier: XxWZD9M8w9GUSDN/kkJ2wjXGyTYAHYhHQ8zVE8F8b1I=
Subject key identifier: 59:9D:8C:A7:79:B4:7F:1E:D1:00:3A:07:F0:CD:27:40:BF:7B:72:4B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D48B36E3D94A6077C29AFAA00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0262c35e-f3b0-3ba1-9f35-f2ae352c5535.roa
Signing time: Sat 19 Mar 2022 04:00:00 +0000
ROA not before: Sat 19 Mar 2022 04:00:00 +0000
ROA not after: Sat 23 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.52.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:48:b3:6e:3d:94:a6:07:7c:29:af:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 19 04:00:00 2022 GMT
Not After : Apr 23 04:00:00 2022 GMT
Subject: CN=dc7b8dbd-0d7b-4dc8-879d-107c26f224b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:d9:59:41:75:44:1d:e1:d4:2b:12:28:7d:
07:7e:38:d4:ef:7b:2f:44:3d:59:66:f7:ca:86:27:
72:21:a2:5b:ae:7f:7b:4b:40:45:a7:9a:77:cf:bf:
7e:21:15:76:ad:28:fb:95:7d:2d:cd:e3:0f:d5:47:
e8:9b:7a:9e:62:ec:cc:a5:55:9c:3d:d5:e3:e1:fa:
6b:8b:fd:9c:18:47:b3:8c:c9:5b:8b:87:d2:46:f1:
9c:2b:cb:ea:3f:cb:0c:8c:1a:9d:77:1f:37:74:d8:
97:b2:4a:f2:8b:f4:66:71:d4:8f:48:f8:94:34:5a:
e8:13:4c:a0:63:a8:ae:b2:4e:ea:16:9b:d2:8f:6c:
52:76:9e:0b:c5:df:fc:c1:01:7f:f9:0c:16:04:78:
9e:75:40:6c:a0:e2:8e:2f:e4:5c:69:8c:13:89:29:
70:07:0b:e9:ca:95:f1:a2:8f:f9:d4:5e:eb:82:8e:
27:ab:95:a4:93:e5:7b:21:93:55:50:cf:4b:3d:a3:
11:5e:d4:2a:fe:af:1c:33:61:10:d8:6f:00:32:27:
3e:0c:4a:13:48:9b:39:a2:f5:38:02:49:92:0a:a9:
99:02:db:03:f2:7c:6f:8a:a6:92:06:52:04:a3:e0:
f0:5b:86:3c:96:3d:68:78:fc:63:19:a1:73:98:59:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9D:8C:A7:79:B4:7F:1E:D1:00:3A:07:F0:CD:27:40:BF:7B:72:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0262c35e-f3b0-3ba1-9f35-f2ae352c5535.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.52.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:27:a3:9d:b9:e4:f0:6e:c8:1c:4a:eb:16:fe:fe:0d:26:92:
09:7a:e0:17:cd:32:1d:19:3f:58:a5:ce:68:57:51:0e:c5:b5:
1a:b1:6a:38:68:b9:db:db:d1:a5:64:5c:ba:3a:c3:4e:2c:ba:
d1:d0:4b:89:ed:84:98:d1:1c:d0:0c:78:34:b9:69:6c:0c:65:
ef:ed:1e:98:1d:d7:b8:d8:66:64:6e:fa:7d:99:bb:e0:79:c8:
ee:3d:e2:ee:e1:0f:be:5f:18:bb:40:37:6c:7f:d1:24:37:a9:
84:73:f4:7c:2f:71:45:92:8c:99:f3:96:78:86:35:fb:64:e1:
2b:0c:91:af:1a:36:41:27:4c:38:40:71:00:ec:d1:bc:dc:61:
f1:af:02:04:4a:5d:e7:3b:c4:35:bc:f3:80:ca:ca:27:9d:6a:
a9:16:8e:07:a1:cc:8d:68:95:b3:85:eb:2a:29:90:77:b1:62:
19:fc:ff:ee:60:ed:7f:4a:d8:c8:a8:d3:e1:4c:c9:d2:1f:1a:
de:93:b9:1a:dd:fc:31:63:f4:a5:d6:dd:bb:b4:c0:df:14:73:
94:5f:4b:bc:8e:82:42:86:06:04:5f:88:4b:be:e1:c4:41:c2:
47:c3:06:0c:1f:fe:86:b4:bc:c8:07:ff:a8:66:69:b4:04:07:
bc:58:1a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:26 2025 by rpki-client