Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21c6b2f4-f4ad-32e1-8a4e-7ca11efe93d0.roa
File: 21c6b2f4-f4ad-32e1-8a4e-7ca11efe93d0.roa (raw, json)
Hash identifier: LpZwCjINssud3cY3l8j5kSB9V8ISZhXafyxQjNwhcwg=
Subject key identifier: 94:C7:4E:6F:4E:27:39:27:A7:00:5B:07:3B:FC:D4:4B:50:AA:69:22
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F54354CDEF5FDD2C6811C29E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21c6b2f4-f4ad-32e1-8a4e-7ca11efe93d0.roa
Signing time: Wed 21 Sep 2022 12:00:00 +0000
ROA not before: Wed 21 Sep 2022 12:00:00 +0000
ROA not after: Thu 27 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.79.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:54:35:4c:de:f5:fd:d2:c6:81:1c:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 21 12:00:00 2022 GMT
Not After : Oct 27 04:00:00 2022 GMT
Subject: CN=0d1e4d54-6dec-45b6-8df9-4100eee278a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:ce:8a:76:6f:47:19:12:44:d3:0e:54:23:
ed:3f:22:c2:58:b6:b2:0b:4f:5b:b2:36:1e:9f:4f:
5c:56:c0:dc:3b:90:b3:6e:dd:6b:2d:36:de:ad:3d:
27:4e:fc:8d:37:46:09:84:3e:7e:83:1f:92:aa:5f:
36:b8:f3:db:db:2d:92:7a:3f:0d:01:3e:71:44:7b:
98:67:5e:a2:9e:9a:69:ff:8b:8e:a2:ce:e4:c8:b8:
71:b1:27:3f:39:97:85:c9:58:2f:3a:d5:b0:d1:c6:
f2:3e:38:3e:f1:be:b2:4a:43:ff:58:f1:48:7f:ea:
3b:a7:55:f1:ae:bd:a2:21:fa:9a:0d:1f:ec:43:37:
a1:3e:86:cd:40:51:c1:8d:a0:90:34:b5:64:e9:0b:
84:a8:34:35:7a:44:76:e8:a5:23:4d:23:31:1b:d7:
7f:a3:da:09:72:ef:3f:45:b4:13:cf:a3:29:99:e7:
82:4a:f3:2c:fd:9e:05:14:eb:86:c5:80:d4:ee:14:
dc:a7:1b:ea:c7:b0:e1:27:a7:d2:e3:ed:06:f6:27:
3f:3e:bf:93:46:e1:5a:fd:da:a4:4f:e2:be:39:34:
23:f8:6d:fc:b3:6b:1d:84:1d:ed:1e:75:4d:6d:fa:
31:06:a8:0a:ba:89:33:80:6b:41:2c:69:6d:81:e3:
ca:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C7:4E:6F:4E:27:39:27:A7:00:5B:07:3B:FC:D4:4B:50:AA:69:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21c6b2f4-f4ad-32e1-8a4e-7ca11efe93d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.79.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:09:16:4c:7c:c5:88:b0:f2:e0:39:07:8b:a4:bb:33:82:78:
63:1b:dc:11:2f:08:72:49:bb:fc:57:cc:8c:d8:09:7b:71:cf:
f0:33:43:94:64:9f:6e:4d:ad:21:93:d3:8c:22:f7:35:7d:ea:
6e:0b:2e:34:44:2f:07:38:44:e8:a2:1f:12:00:25:76:a2:53:
30:c1:8c:5d:99:79:02:fb:2c:26:33:9a:24:f2:d4:e5:06:f5:
3d:4d:d2:fb:23:aa:f7:82:c3:d5:f3:8c:dc:00:67:38:38:5a:
9f:a0:9d:c1:e3:a0:4b:ac:51:c1:6f:df:eb:77:cd:7e:66:e5:
cb:98:79:ce:8d:7d:4d:ad:a8:b9:cf:eb:36:45:23:5a:3e:3e:
bf:1f:e7:83:b6:2e:8b:b3:d1:c4:d8:a8:9a:9b:77:c7:32:ca:
a7:db:86:f0:de:98:1f:99:b1:b5:c6:6f:d3:96:4d:88:bb:4f:
7b:71:d7:66:49:ab:3d:20:2a:82:4d:de:b2:25:cf:53:65:0d:
6d:66:32:a6:20:db:61:fe:71:be:5c:44:df:9d:b4:ad:da:6c:
be:5b:17:01:19:88:44:69:8d:58:b4:16:d9:e5:0e:49:fe:8a:
a4:b5:fa:43:2c:02:67:c4:a9:15:f2:cf:e3:1f:78:04:53:96:
ab:36:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:25 2025 by rpki-client