Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ab0f52e-d52d-3a10-8237-43db7d68f8bd.roa
File: 0ab0f52e-d52d-3a10-8237-43db7d68f8bd.roa (raw, json)
Hash identifier: 2bhj0kV84DiyFMibnPj0CagTvyGL5PHFsdNZYpcx3jc=
Subject key identifier: 4A:2F:86:70:BC:6A:6D:05:51:E8:51:BE:0A:EC:02:A3:34:A3:34:D1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E1A39AA62BDB7639F9E4DB300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ab0f52e-d52d-3a10-8237-43db7d68f8bd.roa
Signing time: Wed 01 Jun 2022 12:00:00 +0000
ROA not before: Wed 01 Jun 2022 12:00:00 +0000
ROA not after: Thu 07 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.53.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1a:39:aa:62:bd:b7:63:9f:9e:4d:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 1 12:00:00 2022 GMT
Not After : Jul 7 04:00:00 2022 GMT
Subject: CN=b77a4e5e-6bee-4dd2-b4e1-b773dde0f3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:4d:bb:e4:23:fb:ea:03:e0:82:6e:4c:b9:
d1:ef:4a:2e:8d:8f:01:5a:22:02:92:e6:db:e7:e6:
0a:b0:e2:7f:e3:91:e6:ae:57:66:e6:ef:35:94:d8:
bb:6d:e8:c8:02:6f:73:fe:17:4d:32:b8:67:7f:36:
bb:4a:85:d1:09:55:85:62:7c:ee:44:6d:e3:cd:65:
52:ea:1c:40:c4:ae:47:61:87:12:c6:f2:c6:fd:6a:
ff:9c:8b:e0:7e:ad:c7:cb:9e:94:86:a4:cd:2d:db:
49:e8:b5:1c:92:b3:c1:69:ae:4d:cc:69:5d:dd:84:
19:73:8e:11:f6:d0:21:1f:5a:87:a5:19:ba:f1:ca:
ab:37:bb:ff:e5:8f:81:45:3c:53:41:c9:07:96:ab:
c3:8f:2c:32:54:2a:d8:b3:4b:f2:63:d1:1e:3f:76:
3b:68:1f:83:fc:33:49:e2:ee:81:52:98:8e:21:2c:
8a:12:ac:dd:44:d4:95:5b:aa:55:5b:99:99:72:eb:
3a:c7:de:50:41:a8:dc:10:7b:ae:46:bb:36:dd:d5:
0f:38:11:c0:ed:45:c9:e7:d4:49:60:f1:6b:c2:6b:
c1:a8:70:b1:ef:6c:66:2d:5c:4a:8f:fc:da:f0:e1:
c6:93:ff:7c:c2:19:df:af:19:c9:69:2d:34:46:8e:
27:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2F:86:70:BC:6A:6D:05:51:E8:51:BE:0A:EC:02:A3:34:A3:34:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ab0f52e-d52d-3a10-8237-43db7d68f8bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.53.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:be:24:2c:82:a9:28:b2:4e:64:31:8a:04:4f:bc:d4:c2:e2:
2b:aa:d4:0d:a5:62:38:27:3a:7b:46:a8:eb:8c:c7:a7:06:4e:
67:eb:4d:04:43:3a:36:79:f4:a7:bc:8e:7d:29:36:0b:40:f3:
b5:fb:89:5c:f2:55:36:d6:57:55:b8:1f:bf:45:51:7a:11:3c:
9b:7e:9d:c7:f2:2d:e0:2a:85:db:96:16:7d:c7:d4:1f:d2:ad:
d9:5f:f7:ff:6c:e6:fe:7e:45:6f:c2:55:82:a2:78:50:b5:63:
bf:f6:08:54:95:f6:b0:29:c4:d8:c5:09:d1:21:42:f7:14:2c:
d3:e3:22:6d:f6:aa:45:b1:11:93:9b:76:f7:68:46:dd:38:ee:
72:4d:e5:e7:20:b6:6e:56:df:64:e1:61:96:0c:46:2b:f9:0e:
5c:e2:ec:69:5a:ef:5d:e8:56:f0:1f:6f:d4:a5:2d:48:bc:a9:
a9:cf:19:fc:be:e7:b6:14:2e:52:06:67:dd:e3:96:82:05:0e:
f4:99:0d:75:57:0e:75:3b:2b:53:40:a6:d5:6b:f4:98:47:e6:
9d:f7:58:a7:6a:e9:2f:58:d0:a6:7f:b2:38:a8:00:ba:d3:a1:
94:a7:3b:b1:9c:f9:aa:84:f2:17:6a:d0:73:89:a2:33:54:be:
46:d3:4f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:15 2025 by rpki-client