Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e3593bd-859c-3ae6-b2b9-a3fc2787b8f6.roa
File: 0e3593bd-859c-3ae6-b2b9-a3fc2787b8f6.roa (raw, json)
Hash identifier: JPAO+8bCgfD2FHkIzlLQoOosdDBklVnCBsDFK/FNzj0=
Subject key identifier: 03:78:B7:66:D6:E6:24:96:B3:DA:33:E7:D3:DA:A1:36:1A:1B:2A:A7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE3FE9482B9205F03F3CF8C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e3593bd-859c-3ae6-b2b9-a3fc2787b8f6.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.204.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e3:fe:94:82:b9:20:5f:03:f3:cf:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=ceaf798c-cade-439d-a143-73a1f490e4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:87:8e:7e:83:a7:bb:df:73:53:60:55:49:
06:44:3f:52:20:4e:c8:51:c5:80:07:1e:6e:e2:1a:
68:3e:85:ad:f6:db:9f:ae:06:d0:8f:f8:97:9e:a4:
67:ce:a6:d5:b8:5c:96:a9:b7:97:a2:af:2d:fb:91:
72:4a:e2:93:46:60:31:9a:01:67:a0:f1:a9:eb:11:
af:74:62:4b:d5:51:5e:aa:ee:97:c5:48:1b:9d:0d:
de:55:1c:a9:fa:32:61:3d:ed:aa:f5:2a:ab:b8:ee:
97:f1:bf:67:a5:93:07:55:1c:cf:01:2a:06:dd:5a:
de:9b:c1:8a:ce:36:c8:f2:f3:2e:64:4d:09:0b:32:
98:9f:75:2d:86:0f:99:05:8b:3c:31:73:7c:6e:44:
52:fe:77:c0:f2:89:a1:08:3e:17:ef:9c:b2:d8:fc:
5a:82:14:e4:3e:91:f9:31:73:2b:b4:b6:06:cc:e8:
70:fc:dc:61:36:fd:7f:a9:11:cb:86:99:3c:8d:bb:
4f:34:f8:fb:9b:60:10:49:3b:e2:7c:7f:3d:07:42:
7f:03:21:86:d6:bf:e7:09:b9:64:86:3b:f9:e0:b5:
ec:71:92:2a:dc:eb:b3:e4:48:09:ff:f6:6a:6a:21:
b3:c7:42:db:00:f4:bf:56:22:f1:57:28:91:e4:3e:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:78:B7:66:D6:E6:24:96:B3:DA:33:E7:D3:DA:A1:36:1A:1B:2A:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e3593bd-859c-3ae6-b2b9-a3fc2787b8f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.204.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:c8:5d:d7:85:2f:f7:a8:ea:b8:0a:c1:b3:41:32:d0:9c:ef:
b7:b9:92:34:fb:a8:aa:ca:1f:6e:55:fb:6f:04:db:d0:d5:cd:
8f:d2:d4:7a:e1:8c:bb:24:78:51:8e:3d:93:a3:3e:35:97:f6:
1d:7d:c7:84:cc:4b:26:f9:c2:d0:94:f3:62:93:8a:ca:d9:cf:
65:fe:ff:57:57:93:f6:06:f5:d7:a4:94:ee:d7:d6:aa:f5:11:
38:fb:43:6b:2e:98:30:20:67:11:6b:fa:80:f0:35:81:e1:56:
03:dc:49:33:31:80:a5:12:1c:9b:f6:3d:a9:72:59:bc:a5:3b:
15:6b:d9:ea:c0:68:e0:30:6f:6e:98:6f:56:55:8d:e1:ca:80:
ff:c6:f7:43:9a:7a:b7:05:0a:0b:20:a2:b4:bf:2a:e4:27:4f:
bb:bb:50:96:39:1d:2c:f8:b5:a5:73:39:50:60:4c:d4:d7:f3:
08:cb:e9:23:14:5c:f7:67:f8:6f:5d:8e:7c:4f:51:23:56:9e:
16:61:41:35:33:36:98:46:a2:6a:fc:28:4a:83:04:89:c9:c1:
6c:67:9d:f3:7e:8a:6c:15:b9:e1:d4:08:03:88:bf:fa:f9:e7:
4d:d8:9b:e9:f1:0f:d8:98:09:7f:ac:68:fd:c6:3e:49:39:dd:
4d:6e:d9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:00 2025 by rpki-client