Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a7feb17-c34a-3134-ab6d-88cb6a08b90d.roa
File: 0a7feb17-c34a-3134-ab6d-88cb6a08b90d.roa (raw, json)
Hash identifier: rwJb04UJ47hf1l8ueTy/4SExjwrFryxuuhkt0u7ESP4=
Subject key identifier: 9B:0B:0A:52:54:E6:E5:87:F2:CF:AC:99:C0:3E:35:75:F7:9A:AD:07
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DCBFFD9166D01DC0C15BFFB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a7feb17-c34a-3134-ab6d-88cb6a08b90d.roa
Signing time: Wed 04 May 2022 12:00:00 +0000
ROA not before: Wed 04 May 2022 12:00:00 +0000
ROA not after: Thu 09 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cb:ff:d9:16:6d:01:dc:0c:15:bf:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 4 12:00:00 2022 GMT
Not After : Jun 9 04:00:00 2022 GMT
Subject: CN=ccef716d-4241-4b99-a64e-af32bed83c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:c1:4a:16:4b:a1:da:76:5b:cc:7c:58:d5:
bb:e8:b9:cb:c7:59:a9:56:ac:b3:50:87:8e:d2:95:
0c:a8:85:a4:3e:49:df:b4:4c:59:b9:ce:46:74:69:
74:69:ff:62:9e:3f:eb:5a:fc:c8:e2:1c:b2:80:d9:
22:79:d5:1c:12:76:a1:82:04:7e:cb:7b:19:b9:39:
77:44:85:bb:22:e2:92:ec:bf:35:2c:06:53:c2:56:
18:84:16:7d:cc:49:8d:78:90:5c:fc:7b:75:d0:69:
ac:5e:20:82:ac:b9:73:ca:ad:23:b3:dd:02:63:30:
92:40:32:4d:72:73:48:e1:50:c6:2e:82:e4:cb:b7:
2f:a2:20:4b:47:1c:98:40:5d:e0:69:66:5a:92:9d:
1c:ec:50:e2:66:18:f5:c3:08:40:b2:c8:c9:75:1c:
af:c3:bf:7c:87:d2:f1:c4:a3:e0:00:46:d4:b7:c4:
fd:53:d2:a4:a5:2e:46:3f:2d:50:90:6c:f4:bc:cc:
78:e0:e6:4e:db:d6:12:6f:2f:51:93:22:7c:7e:bb:
8d:4c:87:01:af:58:88:87:f8:99:13:e0:4d:7f:41:
9e:43:89:6a:be:ed:2b:bc:a3:58:7b:ab:a1:3d:57:
0b:d6:da:80:b1:a1:25:e6:8b:97:08:2a:15:2d:1d:
19:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0B:0A:52:54:E6:E5:87:F2:CF:AC:99:C0:3E:35:75:F7:9A:AD:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a7feb17-c34a-3134-ab6d-88cb6a08b90d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:22:66:6b:43:64:a9:f9:80:c7:38:34:aa:d0:61:b9:4f:a9:
d9:33:f2:66:71:f2:14:cc:21:04:62:82:70:68:d7:9d:4c:b3:
be:e5:ed:4e:6c:9a:60:9b:09:0a:f4:87:51:9a:bd:ac:e9:c3:
a8:d3:04:9f:e7:49:51:13:01:79:27:c0:b5:65:97:42:45:40:
d9:8f:68:ec:30:15:45:df:69:70:f9:58:65:e4:ef:6a:e8:86:
62:60:c7:df:32:1a:6b:7a:cc:6c:a1:45:7b:12:0d:d6:01:b6:
70:6c:76:a8:7c:b4:86:6e:07:b4:05:df:7c:db:88:73:cc:9d:
9a:94:25:c4:de:c3:e6:9a:e9:58:86:d4:4d:d4:ea:a8:54:fb:
6c:1a:8e:d6:8e:9f:2a:5f:b9:41:81:4a:29:fc:2d:b5:4c:ad:
88:25:27:56:87:81:ef:ad:ac:fa:f8:9a:8a:2c:9b:bb:64:8c:
71:c8:5f:a4:44:03:37:56:5f:ce:9e:60:1c:bd:fb:55:25:37:
29:94:96:6c:13:06:c5:e0:00:cd:25:1f:be:99:fe:fb:ad:74:
85:d3:1c:74:59:97:a6:20:5b:c1:11:9d:68:eb:fb:e8:d8:ac:
6f:1b:5e:27:c5:f4:62:21:40:a3:61:5d:b3:30:a2:3b:a5:3a:
60:38:c4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:13:49 2025 by rpki-client