Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2104ea8c-2b9a-366f-a71b-1ece6ed0477e.roa
File: 2104ea8c-2b9a-366f-a71b-1ece6ed0477e.roa (raw, json)
Hash identifier: ikBm29benN26Dl2Eomff6qmIN9Puq0bOFM0q/TrcM58=
Subject key identifier: 0B:5A:AA:0D:87:9F:1A:D2:E2:4F:26:2E:C6:B6:8A:1A:14:4C:78:40
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F04B3C1DEBA181F1E652FCE40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2104ea8c-2b9a-366f-a71b-1ece6ed0477e.roa
Signing time: Wed 24 Aug 2022 12:00:00 +0000
ROA not before: Wed 24 Aug 2022 12:00:00 +0000
ROA not after: Thu 29 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:04:b3:c1:de:ba:18:1f:1e:65:2f:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 24 12:00:00 2022 GMT
Not After : Sep 29 04:00:00 2022 GMT
Subject: CN=7c6a1149-9a3e-4594-b7ff-3768523868f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:da:f1:a8:6a:f6:17:52:17:bc:65:d6:2f:9c:
9f:1f:2e:a7:03:1a:29:5d:f1:1c:5b:f2:69:4d:0e:
f8:08:ee:8e:36:1a:d8:15:4c:ba:ba:4a:b9:12:46:
b0:56:d6:1a:6a:19:e5:f6:98:fa:60:8f:26:5c:74:
ee:57:6e:6f:e1:d6:2c:bb:79:76:0b:f6:a5:fb:74:
58:40:c5:a4:90:5b:ff:6f:7a:8e:8c:30:22:e7:fa:
f0:54:cc:3b:9a:4b:02:73:35:5e:eb:4f:80:c5:03:
83:98:55:5b:b3:09:f7:59:04:11:d6:28:06:10:c2:
f7:19:51:c8:f3:29:38:e2:e4:7d:4c:6e:1f:9a:43:
e5:88:ad:22:78:9f:79:31:bd:e2:2a:b7:1b:be:23:
cc:11:b8:a1:b6:c2:cf:85:c0:87:6c:e7:b3:ad:81:
e3:ce:da:44:c0:e9:a2:d3:01:df:28:55:80:30:dd:
92:5b:c5:51:dc:50:34:91:25:cc:88:07:06:67:5a:
e7:da:90:c1:d8:68:c4:19:bc:7e:a1:d1:4d:bf:4a:
60:ba:5a:37:51:12:60:e3:f4:e9:a1:cc:a2:63:99:
b4:3b:74:ec:27:88:b2:10:c0:7c:d2:77:32:55:2c:
ec:6c:be:b2:4c:8e:5a:c0:06:41:7a:e3:a1:2f:5f:
68:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5A:AA:0D:87:9F:1A:D2:E2:4F:26:2E:C6:B6:8A:1A:14:4C:78:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2104ea8c-2b9a-366f-a71b-1ece6ed0477e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:8e:a3:39:d0:e7:5b:a1:63:cd:30:32:0c:17:c3:1a:ef:42:
9f:c0:a4:87:66:63:b3:ca:f4:00:1f:a2:da:1b:b0:5d:9c:82:
4f:06:0a:d3:5e:22:3b:0e:92:44:6a:a7:59:0f:f6:5c:d7:7a:
c5:02:dc:b9:8a:ac:5b:53:62:eb:4b:7d:2b:63:61:b2:34:91:
ba:42:9d:24:65:6e:d2:44:42:0d:27:a2:7a:05:3c:b5:db:2d:
91:19:6a:39:2b:ac:58:04:84:f7:aa:45:fd:d8:d1:88:f2:4e:
8b:8b:5a:8a:6e:16:d5:70:c9:32:26:bd:5e:b7:57:4a:e2:56:
36:6a:aa:4e:31:7e:cf:f6:69:d6:dd:99:7b:ad:e9:87:72:ec:
ec:ec:06:29:19:fb:41:fe:2e:07:79:40:55:ac:e0:10:ac:c6:
ce:93:56:58:b2:4e:df:be:dd:8f:b8:3c:2c:6b:1d:36:27:bb:
e8:e1:45:f8:9e:d9:d0:53:e0:4f:00:aa:dc:65:d9:74:75:27:
b2:c3:22:8e:0c:7a:65:47:f4:1a:72:86:92:0f:04:62:72:8c:
c6:13:07:ec:63:d9:10:b8:f4:89:57:03:e2:8e:0c:bf:73:7e:
c4:56:ca:2d:60:84:4b:b2:d3:8d:97:f3:cd:53:d9:39:f7:c3:
e9:c2:a7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:09:09 2025 by rpki-client