Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/13f3957e-c5ee-38da-8e21-4fbf31e268cf.roa
File: 13f3957e-c5ee-38da-8e21-4fbf31e268cf.roa (raw, json)
Hash identifier: mdLv9Pmx77n0h+Dv/Dr3DwHNNDwawzfRB+HqJQQ+fP4=
Subject key identifier: 77:90:D6:93:EA:B2:1E:E9:D1:8D:A2:D8:78:DB:CD:6F:4D:CA:59:E1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F04B3BDFFCB8664DBB08FC880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/13f3957e-c5ee-38da-8e21-4fbf31e268cf.roa
Signing time: Wed 24 Aug 2022 12:00:00 +0000
ROA not before: Wed 24 Aug 2022 12:00:00 +0000
ROA not after: Thu 29 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:04:b3:bd:ff:cb:86:64:db:b0:8f:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 24 12:00:00 2022 GMT
Not After : Sep 29 04:00:00 2022 GMT
Subject: CN=81e4c321-639c-40c5-a5d9-c581cd7987a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:fc:5c:ba:27:08:02:a4:7a:c8:da:f6:34:
d3:33:5e:a5:f4:ed:e4:6d:e5:bd:63:c9:c2:19:28:
15:98:46:1e:42:9e:cf:1d:4c:dc:a0:75:a4:33:b8:
e9:8f:86:90:69:0c:bf:f7:71:be:f9:92:49:99:8a:
a2:68:6a:4e:48:5c:ff:de:8d:fb:49:5d:f6:90:2c:
ee:50:02:e0:a9:97:7c:e9:39:66:38:9d:7d:89:c1:
0e:d4:f8:58:44:1f:47:a6:11:c6:4a:56:d9:13:07:
17:38:a5:d1:30:f1:ec:d7:e4:26:a6:3d:5e:80:00:
bc:eb:f0:3f:9a:81:69:83:1d:1e:73:3d:83:13:99:
39:23:7a:60:07:e8:ad:ee:c0:d9:30:a1:35:a4:ed:
c4:30:8d:38:5a:1c:37:c6:67:6d:7a:ac:5c:1b:00:
a2:9b:ea:03:ef:39:ea:50:12:50:4d:50:de:75:3c:
ef:96:38:e1:ff:9a:c0:f2:2a:22:e8:27:27:5d:8e:
34:5d:86:a9:a3:ef:63:94:d1:e3:45:05:75:c4:7e:
df:26:68:55:2f:7a:05:df:c2:d8:99:e8:21:0a:1d:
a2:fd:61:1f:36:d9:8b:4e:85:45:69:43:68:8e:d4:
0c:11:ce:84:02:ff:06:bd:20:84:ad:68:a3:c4:30:
cc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:90:D6:93:EA:B2:1E:E9:D1:8D:A2:D8:78:DB:CD:6F:4D:CA:59:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/13f3957e-c5ee-38da-8e21-4fbf31e268cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:65:32:31:98:50:0f:49:00:4d:8a:93:2f:a7:9d:f1:d7:ef:
af:55:15:d9:92:16:43:bb:62:f6:e4:5b:69:2b:9b:98:2e:58:
ff:d9:6d:a7:c1:94:5b:d8:fc:78:42:5a:ac:d9:12:20:14:ca:
2f:e7:8e:2a:38:14:d3:68:c8:fc:32:37:1c:66:6e:b0:24:1f:
1e:07:2b:ee:74:86:f5:da:62:1a:7f:44:08:22:c0:ea:ad:c9:
3f:f7:66:a4:4b:0b:fa:c7:93:40:34:9b:a1:a0:cf:79:06:46:
95:16:d0:98:0c:cf:70:47:9c:bd:17:9e:2c:f1:ca:96:77:c8:
ec:de:28:60:fc:96:b3:62:c3:d0:9c:2a:00:4d:c8:fc:52:d8:
ef:dd:ce:c5:b0:61:17:0e:45:a6:8f:22:31:1c:f5:2c:38:3d:
07:ae:a9:f8:14:f4:e3:70:be:bf:b5:ac:e9:aa:29:b4:a6:e6:
21:d2:6a:55:35:30:4a:79:f1:ad:1e:68:53:04:32:81:7f:76:
d1:51:3e:9b:dc:ba:b1:9a:ec:3f:04:0f:74:5e:3d:06:21:69:
32:c8:23:f4:a8:a9:8b:46:8b:7e:50:84:c8:9a:01:da:ed:53:
84:2b:94:4c:fa:6b:8e:6a:f4:f5:45:5b:68:84:81:bb:56:bf:
67:fc:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:58 2025 by rpki-client