Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20aa1c86-abba-3f20-bd40-98623472062f.roa
File: 20aa1c86-abba-3f20-bd40-98623472062f.roa (raw, json)
Hash identifier: +BNbCluAcOpDuOP4F5rk32SGDMadP6aMFXTHL0noUTA=
Subject key identifier: C2:E3:CB:73:8E:CE:FF:CC:DA:92:CA:CE:7D:22:11:5D:F1:E9:27:08
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F7B2D3A5CA341184039A1DA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20aa1c86-abba-3f20-bd40-98623472062f.roa
Signing time: Wed 05 Oct 2022 12:00:00 +0000
ROA not before: Wed 05 Oct 2022 12:00:00 +0000
ROA not after: Thu 10 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7b:2d:3a:5c:a3:41:18:40:39:a1:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 5 12:00:00 2022 GMT
Not After : Nov 10 05:00:00 2022 GMT
Subject: CN=a94bacd5-92e2-40f4-81e2-a75f5830a7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:47:a4:84:fe:aa:5d:8d:53:f3:16:29:5e:ce:
57:a7:d2:2b:b6:0c:a7:44:d9:64:a9:83:2f:87:d8:
81:79:5c:9f:29:c7:23:ea:07:67:0a:0f:b4:3f:3f:
04:ac:c4:6c:15:6a:4a:ff:e2:04:9f:bb:7d:6d:07:
a2:9a:34:ee:3e:ed:0f:35:e7:3d:c7:bb:e9:6c:e7:
aa:e2:36:41:33:bc:15:92:99:1e:67:25:98:2f:13:
2f:88:cb:63:01:e7:c5:a2:48:d4:3c:a0:37:46:3e:
5e:9c:a6:cf:df:1a:73:dd:28:7c:77:78:52:7d:09:
de:46:28:70:90:bd:dd:1a:89:0b:1e:41:27:3e:69:
07:86:d5:9b:59:67:0b:5c:fb:a1:d8:d4:26:c3:f7:
2e:64:f9:5d:42:4d:63:a1:ff:61:cb:b1:04:68:66:
dc:08:45:f2:4f:7b:af:a1:05:1b:4c:d9:a9:60:5e:
d1:c8:1f:41:9d:51:f2:c5:14:8a:96:86:39:61:2a:
f5:e2:ff:95:ff:17:df:d2:24:5f:4d:82:31:f1:5d:
c5:8f:b7:c4:05:cc:a7:42:a3:86:ce:a4:d1:e6:77:
09:38:18:34:1b:91:eb:03:1b:eb:cb:e9:56:02:8d:
f7:a0:51:6d:be:7d:23:39:74:3a:2c:72:ef:bc:26:
24:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E3:CB:73:8E:CE:FF:CC:DA:92:CA:CE:7D:22:11:5D:F1:E9:27:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20aa1c86-abba-3f20-bd40-98623472062f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:e3:cd:cf:21:e0:0f:37:5b:62:04:74:33:71:b0:e7:7b:13:
d7:96:b3:02:63:9e:7a:33:cc:71:89:8d:40:74:7f:03:5d:7a:
66:10:c2:3a:eb:59:92:92:9f:58:cb:5f:8c:f7:08:09:41:19:
9e:49:ce:ef:5f:02:50:88:09:c7:e4:bb:23:37:f3:cd:7d:8b:
7b:9f:32:e9:8d:05:0d:44:c0:9e:f7:78:90:2e:b0:81:cc:b8:
6f:9c:86:b5:59:3b:e1:0e:c7:59:bf:ca:c7:36:17:cc:e2:87:
98:b1:e2:19:c2:39:65:d2:12:45:28:5b:f9:b6:03:5d:29:c1:
f8:d9:b9:e6:cc:64:da:e3:27:c7:dc:d9:49:0c:b1:14:78:ca:
1a:af:ce:c4:f9:bf:06:29:3d:7e:25:da:a5:dd:13:b9:35:27:
06:13:ea:d1:e0:d6:39:a8:4e:64:63:8b:61:15:00:67:ed:7f:
da:4e:82:12:5d:d3:5f:e1:ee:c9:6e:0c:8c:60:65:e7:73:06:
ca:db:57:f8:a0:04:49:af:cc:56:a6:49:b2:74:5d:3d:7a:7d:
5a:21:ee:2d:76:7e:42:d5:4d:c6:3e:fd:60:10:a3:10:dd:bb:
65:bb:03:51:9c:65:4e:ef:3a:e0:d1:44:38:d6:83:a3:fb:de:
5e:ce:8a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:20 2025 by rpki-client