Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/18ba81f2-58e9-3297-b3ca-0177e1d546b3.roa
File: 18ba81f2-58e9-3297-b3ca-0177e1d546b3.roa (raw, json)
Hash identifier: 35ajogtbAmQfxpcAeiVKpdoor8PDL/pzZGDKOC4RKKo=
Subject key identifier: 01:E8:EA:AD:2C:DF:55:48:20:48:05:3C:75:50:7A:01:8C:2A:3C:5A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3176F2BAB8DAB7E83F30A300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/18ba81f2-58e9-3297-b3ca-0177e1d546b3.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:31:76:f2:ba:b8:da:b7:e8:3f:30:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=3c5d08ac-e4c2-419b-97c7-a802be865361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:db:c0:91:a4:ca:91:3a:3f:b4:54:2c:92:
8e:4b:22:c1:8e:58:8b:f2:65:c8:77:90:3c:5f:6c:
35:7f:73:c0:7f:7b:fc:8c:61:2b:92:c9:fd:8b:51:
79:04:6c:87:d8:a3:21:fb:28:e7:18:69:d6:b3:d0:
d2:b2:5e:eb:46:8d:0f:e7:55:cb:18:be:79:06:13:
a0:6a:bc:d6:6d:94:fc:89:36:3c:bb:a8:3e:fc:17:
53:82:12:ff:48:58:3b:07:04:88:88:8e:d1:44:c0:
e0:f6:37:22:4b:ef:42:44:1f:66:bb:d3:52:40:88:
79:d0:0f:31:d5:44:e0:8c:e3:ee:82:22:18:4c:a7:
53:bb:ea:70:44:14:fd:7d:e7:f7:21:fe:14:eb:28:
2a:c2:bf:36:6c:c1:0c:f3:0b:65:d5:12:2b:4b:6b:
e3:eb:fc:69:66:66:fd:16:38:4b:86:9d:b9:a1:7b:
15:5a:16:5d:24:a8:25:dd:ac:91:f5:eb:e4:6b:0b:
4b:fc:03:85:db:8b:7f:ba:5e:cb:b1:b1:51:e5:5a:
0e:38:03:e3:0b:4d:cb:ad:f5:ed:84:8c:26:bc:e1:
26:a2:db:e3:05:4a:ba:89:cc:1d:d9:97:80:48:f6:
21:9e:24:84:8b:5f:8a:bd:6b:b4:55:d8:6f:09:13:
9d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E8:EA:AD:2C:DF:55:48:20:48:05:3C:75:50:7A:01:8C:2A:3C:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/18ba81f2-58e9-3297-b3ca-0177e1d546b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:d8:9d:2d:8c:5b:be:c6:42:0d:24:f9:20:ab:ab:92:fb:4d:
8f:b0:92:08:b3:a9:ad:00:29:69:97:ab:27:fb:67:a5:4c:7a:
3b:b9:9e:0d:65:85:56:05:f5:6d:44:10:30:c2:2c:f0:a7:08:
6b:cc:34:fa:86:a2:01:76:e4:65:aa:5c:48:02:4c:15:06:5d:
b0:1f:63:ef:f4:b0:2f:77:d0:f3:e9:92:9a:07:40:d9:f9:98:
fb:f1:dd:4d:6e:22:bb:6d:5e:03:aa:9f:07:cc:cc:03:31:30:
57:f5:2a:fc:23:99:33:a5:15:f0:3e:79:f4:ff:cc:c3:55:56:
4e:8b:89:bf:6b:74:8e:65:29:00:59:86:eb:47:2b:25:8c:b2:
89:4e:8f:ab:50:a6:fa:5d:39:68:a4:66:54:9b:9c:08:6f:51:
36:ce:ce:f5:f0:05:7d:6c:8e:db:41:65:a8:6e:5e:05:ff:fb:
9a:a8:16:e4:17:79:6c:0c:7a:aa:79:85:7c:3e:40:eb:20:9f:
11:ac:24:e4:99:a1:a6:e7:f1:44:5d:b4:c3:51:3a:60:d7:4c:
8f:67:a7:10:d9:d9:40:9e:e1:95:20:e9:bf:52:3b:74:6f:e8:
dc:e0:10:1c:f1:05:af:e0:4f:01:44:c8:ab:53:eb:90:87:2c:
da:05:33:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:56 2025 by rpki-client