Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21ff199b-f613-3398-8a3b-0f65f46e0884.roa
File: 21ff199b-f613-3398-8a3b-0f65f46e0884.roa (raw, json)
Hash identifier: 8vKy5MAbYB9esbB3QAQtHO0lLmFDfUtkExpSZo7L4gw=
Subject key identifier: 8F:8B:9C:1A:69:05:5C:C4:D7:18:85:57:BB:1F:CC:FE:68:E0:01:30
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D594E23DAACD200956CA704E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21ff199b-f613-3398-8a3b-0f65f46e0884.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.170.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:4e:23:da:ac:d2:00:95:6c:a7:04:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=cb91b4a6-0f7d-4759-a224-6c03af30b0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b3:20:06:d1:e4:b5:bd:74:47:24:b5:96:81:
9a:a0:6d:76:69:64:db:9a:d2:3b:3e:e2:4e:a8:96:
af:44:34:81:6a:ba:8b:ae:b0:a8:06:b7:1e:6a:b4:
d5:52:59:00:ed:c4:9b:4f:8a:0f:95:64:af:5f:53:
a8:32:ca:3c:09:16:08:36:ca:54:74:c4:83:91:ae:
9e:b9:83:8a:63:40:9f:1c:42:dd:ce:9b:4a:e8:14:
ed:6a:64:be:3c:65:bf:0c:9a:fb:e4:21:fa:43:19:
f0:9c:a5:2b:70:db:9a:e1:aa:a4:12:bc:65:de:98:
8b:4b:96:33:c6:19:dd:06:28:4d:35:a4:44:29:91:
b2:30:62:ce:6f:c1:7b:8c:0b:94:e6:d7:d9:71:07:
8e:4b:f5:bf:79:12:4e:79:d4:b4:43:ca:91:c2:b3:
2a:fa:94:4a:7a:d0:bd:68:93:67:23:cb:11:aa:32:
fc:0c:25:05:b8:1a:fa:d1:fd:83:80:af:d9:8c:95:
34:86:4d:d1:dc:15:02:24:32:52:6a:67:07:ca:ec:
d8:ad:f3:22:74:c5:a3:93:15:d4:da:30:3b:d6:58:
e0:3f:bc:9a:f4:23:45:fc:b4:2c:c5:34:11:87:cc:
e7:81:cf:15:92:eb:20:50:a9:56:8d:84:e5:19:38:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8B:9C:1A:69:05:5C:C4:D7:18:85:57:BB:1F:CC:FE:68:E0:01:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21ff199b-f613-3398-8a3b-0f65f46e0884.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.170.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:a1:fb:3c:16:e6:61:e6:67:c3:9a:17:0c:5a:3d:01:47:b9:
65:3d:31:fb:06:c4:be:33:1e:c4:f5:ca:14:8d:94:d0:e2:ca:
b8:0f:6e:af:ac:3a:5b:c9:3f:c1:11:65:90:b5:1f:3b:49:cb:
0e:e8:c5:93:ea:b6:5c:ea:c0:58:4c:67:20:cf:c2:21:07:30:
94:42:8a:a5:94:f6:ba:b6:bf:39:e5:91:d9:3a:9f:fa:17:3a:
1f:ee:00:40:9c:b1:90:78:46:a6:d6:a5:99:bc:10:13:94:f2:
e9:d8:4e:7b:74:6f:30:2a:4d:10:b0:d7:88:12:bf:98:60:1a:
95:de:74:52:d3:64:e0:0d:11:fd:11:37:1a:5c:65:fb:14:2d:
df:c7:04:a6:d6:97:ee:71:a3:04:7b:8b:6b:f0:d3:af:46:b6:
00:48:34:b9:1a:a1:4b:cc:56:89:e8:ee:3f:f8:78:3d:12:4e:
57:59:37:14:a1:a6:33:fa:fc:4b:ae:91:80:a1:db:fc:74:73:
bf:6a:97:48:64:b2:25:e6:18:8a:a7:73:77:47:02:57:d8:c5:
b5:5f:e5:33:23:8f:e7:b3:44:bb:5c:86:d1:27:85:78:66:87:
74:28:e8:8d:e5:4d:27:a0:ed:81:b2:d7:20:21:41:d7:bc:e6:
cf:3d:bb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:31 2025 by rpki-client