Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/08af94b9-6a68-350f-a813-91ac64bd279c.roa
File: 08af94b9-6a68-350f-a813-91ac64bd279c.roa (raw, json)
Hash identifier: a7ICEbijEkE1W2k1j7b9IiiO5d4j1wUZSpyn9tgxUY4=
Subject key identifier: F4:4E:BE:16:76:6A:27:73:BB:19:9F:69:55:2D:50:AB:FD:27:5D:35
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EB8A0971827EAE0DC6D71C300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/08af94b9-6a68-350f-a813-91ac64bd279c.roa
Signing time: Wed 27 Jul 2022 12:00:00 +0000
ROA not before: Wed 27 Jul 2022 12:00:00 +0000
ROA not after: Thu 01 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.108.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b8:a0:97:18:27:ea:e0:dc:6d:71:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 27 12:00:00 2022 GMT
Not After : Sep 1 04:00:00 2022 GMT
Subject: CN=8ef1cced-8634-4f7a-abce-51e0de67e72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5f:35:cc:ff:59:c4:af:80:ab:27:99:7d:4e:
bb:49:61:d8:dd:57:e7:46:f7:e9:77:21:20:53:3d:
70:d7:cd:58:29:4a:48:17:dc:7b:ce:a2:a6:32:f1:
ef:22:37:20:f5:04:ee:2b:2e:fc:49:ca:ae:cd:b4:
44:25:da:73:1c:cd:2a:68:84:6c:ed:2f:e0:6b:04:
a7:ba:84:d7:09:10:b8:21:38:07:0d:c8:5b:24:89:
51:31:1c:91:16:b4:be:ae:96:81:16:95:9a:3e:72:
ea:ab:06:cf:81:9c:e9:e0:8e:21:69:41:2a:28:94:
06:0d:b2:75:27:52:c5:4c:1f:69:d1:43:3d:46:54:
0a:9b:3c:56:87:eb:00:7a:07:f9:f2:ab:d4:02:44:
d9:06:33:9f:97:5c:55:e3:00:7f:c7:30:39:c5:7c:
f4:f5:65:e4:3a:b5:41:08:42:f6:65:b4:62:67:4c:
53:0a:7d:5b:7e:bd:d1:71:98:43:7f:36:79:7e:6f:
b0:60:8e:d0:b8:d0:24:bc:94:82:41:d1:46:80:90:
a6:a8:be:ae:7f:ca:73:13:ac:0b:0d:f4:e3:d9:9a:
53:f0:a9:c8:ba:c1:38:10:98:cc:79:e9:c7:f2:fb:
48:2d:f7:d8:d9:3f:3d:b3:60:90:df:23:4f:89:16:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4E:BE:16:76:6A:27:73:BB:19:9F:69:55:2D:50:AB:FD:27:5D:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/08af94b9-6a68-350f-a813-91ac64bd279c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.108.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:3e:c9:7c:9d:5b:02:e1:da:ca:30:7f:94:56:95:e2:46:2e:
c6:fa:ed:a7:5b:af:9b:20:9e:ae:74:55:26:13:c5:13:68:0d:
87:52:04:22:9d:7d:88:2f:e5:92:82:31:35:95:a5:ad:5d:6d:
e2:a8:ce:78:b5:e2:48:b3:de:9c:d3:40:96:af:44:85:b1:ea:
1f:e2:24:a5:4f:87:a1:d6:c5:93:4d:91:fd:df:31:3a:b7:90:
79:7a:31:e2:f6:1c:dc:e0:38:43:01:76:1f:1d:3b:ac:10:d3:
e8:e7:49:aa:0c:2b:98:b2:82:92:a2:3d:69:76:15:4f:f9:a9:
b5:88:64:d6:66:8d:00:c4:f7:23:62:48:8f:67:ca:27:20:49:
83:7f:87:f4:de:75:c7:4b:86:56:5e:4a:42:19:75:47:cf:de:
0c:6e:23:ad:4f:bb:d7:ae:da:be:cf:ee:e8:94:86:50:77:aa:
b4:3a:f7:9f:fc:12:9e:8c:84:02:31:07:49:02:bf:dc:09:ec:
cd:c3:81:e0:42:91:8c:99:ff:31:83:7f:ae:0d:1e:27:9e:6b:
c1:d4:32:b4:a9:b2:21:14:39:91:b3:ac:d0:6e:7c:ae:6f:a7:
64:4e:fa:be:d5:0e:88:d5:7a:b3:05:24:68:74:a4:6d:64:a4:
91:0e:01:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:53:26 2025 by rpki-client