Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0dfc1a28-dc0a-3b31-9f8c-858f2929ebf4.roa
File: 0dfc1a28-dc0a-3b31-9f8c-858f2929ebf4.roa (raw, json)
Hash identifier: TZL9UvK9lx4u8IHjRWhK+qQVWavnNQSs5on1DvN1meE=
Subject key identifier: AC:D7:FE:20:63:85:B1:B8:68:98:03:97:CF:75:32:D2:F5:45:08:78
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F7B34B63116B933D737D62280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0dfc1a28-dc0a-3b31-9f8c-858f2929ebf4.roa
Signing time: Wed 05 Oct 2022 12:00:00 +0000
ROA not before: Wed 05 Oct 2022 12:00:00 +0000
ROA not after: Thu 10 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7b:34:b6:31:16:b9:33:d7:37:d6:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 5 12:00:00 2022 GMT
Not After : Nov 10 05:00:00 2022 GMT
Subject: CN=41ca5a5f-7e1e-4ef7-a0e5-a7cdd56a9f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f0:d4:58:8a:4a:0b:3e:bc:fd:1d:42:ad:6a:
04:5a:fb:a3:8e:64:7a:af:ca:fb:35:c7:bd:ef:13:
9b:fe:64:2f:96:1f:59:5c:1f:c5:93:0a:24:3b:7f:
dc:fa:02:84:43:05:22:71:e8:b2:27:81:b1:8f:dd:
51:a6:8a:54:a1:6e:cc:da:3f:05:39:f4:df:a1:c8:
8d:17:16:87:26:38:e8:9a:e1:f2:31:e7:f5:67:a1:
3b:50:4f:9d:22:b6:ca:ad:03:b8:c5:94:51:a0:85:
59:ec:10:4c:20:15:cd:2e:7c:c7:c5:09:98:ac:e1:
3a:c0:ae:cd:6d:50:8f:a2:29:c5:bd:b5:3f:5c:75:
a7:f2:ed:02:5a:aa:ab:e8:dc:44:3d:d5:50:9a:7d:
e6:aa:25:54:5e:18:1b:47:33:3b:7f:44:34:58:a7:
55:dd:8b:81:d4:af:79:53:ac:62:6b:f4:c0:d8:eb:
ab:23:a0:92:d0:36:b7:3b:6b:8b:5b:ea:0a:c1:68:
53:1b:08:83:db:a7:02:8a:d9:0e:62:86:5e:6b:4f:
85:f2:26:e3:1b:16:2c:35:63:74:76:99:88:e0:08:
1f:78:04:e4:d0:b7:ca:bf:b1:b0:5d:ce:17:ec:de:
94:31:26:de:f4:1c:93:da:74:4e:c8:53:6e:f3:3b:
d4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D7:FE:20:63:85:B1:B8:68:98:03:97:CF:75:32:D2:F5:45:08:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0dfc1a28-dc0a-3b31-9f8c-858f2929ebf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:0e:6f:3a:5d:fb:6e:fe:46:7b:e3:c2:cb:83:55:3a:93:e5:
f8:e4:8b:52:3f:1c:40:8e:a6:4d:d6:bd:13:93:cf:d3:71:e8:
02:19:1b:d9:62:cf:7c:ef:7b:fb:f0:58:78:eb:0d:7c:9c:d3:
26:2a:23:9e:4e:d2:0e:76:d0:9e:2f:d5:f0:07:15:c9:69:57:
8d:1c:f7:e9:b8:cd:95:0c:ee:36:63:8e:5c:20:97:67:0f:84:
88:18:e1:75:ef:6d:e0:37:89:52:99:25:a2:6e:ae:c2:ed:a8:
bf:13:b2:8c:8b:f1:a6:ed:56:90:86:17:b7:7e:e5:2c:15:60:
00:b8:aa:00:af:24:84:8c:e8:41:30:21:34:0d:48:b5:df:49:
ec:27:22:9c:e5:4c:c0:fb:3f:a3:65:8b:f5:30:d4:04:08:e7:
4e:95:cb:af:40:f3:07:e7:de:c8:13:e8:bf:b1:b8:d4:63:bd:
bc:47:f9:e2:96:a2:18:da:0f:43:5c:ca:1c:30:52:b7:a2:42:
b8:56:a7:b6:27:a8:56:6e:d6:1b:c2:80:9f:c9:04:cb:53:c9:
fe:bc:79:f3:a3:25:b0:38:54:30:78:0f:06:63:f0:83:ba:01:
36:76:a1:2b:9f:34:46:a7:d4:8d:e9:e1:2c:b1:75:67:ca:77:
15:f0:71:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:16 2025 by rpki-client