Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e5cbcdb-0ea7-3324-bdc6-c23bc278fe00.roa
File: 0e5cbcdb-0ea7-3324-bdc6-c23bc278fe00.roa (raw, json)
Hash identifier: Yf2tROxa+H+KBQ8itU8cfAQmEsX9Nl7728l0i6PBCHU=
Subject key identifier: CA:47:80:8B:DD:23:E7:19:AC:55:15:61:46:F9:EF:3E:A0:CF:49:3A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D6480B74B98F380DA27F4F760
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e5cbcdb-0ea7-3324-bdc6-c23bc278fe00.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 03 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:64:80:b7:4b:98:f3:80:da:27:f4:f7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : May 3 04:00:00 2022 GMT
Subject: CN=8e436c30-fe3b-4996-9a33-2adaec2be681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:21:17:2c:5d:c9:7a:86:b1:7a:6c:f9:9e:7a:
e5:de:aa:82:86:fe:43:b0:cd:61:7e:6b:f5:1d:b5:
a7:91:15:09:98:46:8b:a3:32:42:32:55:d0:cd:a9:
5a:55:b4:eb:ec:76:56:7c:c5:c9:c2:13:f4:bf:02:
4d:db:da:59:e3:11:bc:83:fd:0b:dd:1e:e1:e8:0f:
62:50:1d:ca:4f:55:d5:80:a5:75:13:02:3d:e5:25:
3d:9d:69:29:c1:04:a7:42:15:bf:66:ac:ac:e9:2d:
1f:d4:20:d4:d1:79:cf:09:5d:b5:fc:07:67:fb:02:
56:5a:b0:10:c6:56:84:ca:f7:eb:33:ed:52:c2:a6:
ea:ba:02:88:f9:1d:86:22:d9:94:0e:42:bc:8f:f3:
d4:cf:97:38:d4:d2:91:29:79:e5:17:4b:56:ca:84:
de:83:52:e9:72:dd:7e:9c:46:84:4a:11:63:15:32:
ae:9a:34:7b:70:68:02:bf:aa:ac:35:3f:fa:0b:e4:
4f:e0:95:bd:ae:d5:9f:54:c6:5d:58:fd:28:10:34:
7d:52:31:e9:e2:ff:dc:40:fe:98:29:03:99:84:41:
93:15:84:60:dd:2d:b9:e2:dd:6b:1d:b8:6f:c5:6d:
da:9b:16:f2:d3:e1:3d:c7:c1:41:a9:b7:03:2b:bc:
66:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:47:80:8B:DD:23:E7:19:AC:55:15:61:46:F9:EF:3E:A0:CF:49:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e5cbcdb-0ea7-3324-bdc6-c23bc278fe00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:0a:a0:18:e5:56:88:9e:d5:a6:ee:b7:a5:71:2e:ac:32:9e:
e9:16:11:a8:28:c1:16:6f:3f:6a:77:1f:5d:8c:7c:a2:8a:b8:
3a:d8:d5:e3:f6:72:e2:29:cc:2e:26:7c:e0:8f:d8:71:5e:49:
fa:2b:b2:4b:c1:f2:63:02:a9:96:6e:46:33:00:36:57:4c:4f:
c3:d2:54:6c:26:21:11:2d:42:7b:61:90:45:7b:d7:88:fc:af:
40:72:18:e4:fd:80:70:70:51:40:fa:e1:db:18:04:4f:6e:37:
6e:9d:39:00:80:64:00:28:1f:59:51:06:19:2a:a0:ee:a7:7a:
69:73:fb:cc:12:4f:e9:9a:34:87:37:9f:b1:73:40:38:ef:59:
56:39:61:d3:65:a6:fd:4e:03:c5:27:75:51:9c:08:5e:31:90:
45:ad:ad:85:7f:b3:79:b9:11:97:dc:cb:9c:86:95:2d:63:d1:
9d:1c:7b:2a:bb:8e:03:5d:ff:d8:01:0e:d6:7b:1a:58:20:93:
95:3f:28:ad:26:84:9c:27:94:df:b1:cb:48:2b:3d:4e:5c:de:
eb:f2:82:ec:04:f8:37:5a:28:ba:be:6a:7e:d1:f3:7b:91:5d:
3f:4d:6e:44:59:60:28:cc:aa:c8:a9:8c:4a:6a:82:95:de:8d:
e3:dc:e3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:59 2025 by rpki-client