Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/220c7069-21ce-3af4-83f3-99f6341e1397.roa
File: 220c7069-21ce-3af4-83f3-99f6341e1397.roa (raw, json)
Hash identifier: BtRmHLvnfSxcF/GaWyWF3zInEaLVM4ulUbmWsBW1zh4=
Subject key identifier: 2E:D0:D9:69:03:5D:26:32:D0:4B:83:05:5F:4E:A6:65:DB:27:30:66
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6B74A43D88C9D5DE43BF7780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/220c7069-21ce-3af4-83f3-99f6341e1397.roa
Signing time: Wed 29 Dec 2021 05:00:00 +0000
ROA not before: Wed 29 Dec 2021 05:00:00 +0000
ROA not after: Wed 02 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6b:74:a4:3d:88:c9:d5:de:43:bf:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 05:00:00 2021 GMT
Not After : Feb 2 05:00:00 2022 GMT
Subject: CN=a04ed98f-3d9f-4ada-9479-50f399c39081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:56:06:9e:b8:ce:41:c9:3d:8e:36:55:22:
46:3b:be:20:2b:99:69:6b:39:71:a9:e1:84:5a:22:
5e:8f:c6:c1:d1:92:54:7c:95:95:b9:5c:83:16:16:
9c:ff:99:b1:94:66:39:89:29:5f:6b:84:40:76:dc:
f5:e6:0a:d9:6b:1e:8f:88:6e:2d:9d:c3:6d:40:a5:
cb:ea:18:0f:31:36:4c:bc:d8:a2:c3:d0:15:7b:50:
73:c8:f7:9d:df:b9:5f:ce:32:b9:da:ff:50:da:9f:
5c:9b:47:9a:a6:51:1c:7c:58:13:96:29:3a:cb:3d:
34:37:f2:94:59:98:e5:d6:57:10:0c:21:1f:fe:82:
76:03:2b:87:53:49:eb:d3:e4:02:47:b8:eb:84:65:
10:0d:7a:fd:19:71:3a:74:54:2c:1b:bf:dc:55:50:
c9:1c:ec:5b:a3:26:43:5b:29:09:a5:95:12:3d:fd:
aa:f6:29:69:be:e5:00:c5:8f:5c:4b:a0:39:8e:b4:
ec:d7:ad:5c:3c:53:57:82:5a:33:6a:81:ac:28:36:
b4:d3:fe:f3:f8:3f:be:4f:6f:aa:67:22:1a:d5:d5:
72:84:42:66:8a:19:96:67:d7:95:66:99:d4:8c:97:
2f:b8:34:f2:5b:d5:a1:94:0e:4c:a4:16:9d:70:fa:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D0:D9:69:03:5D:26:32:D0:4B:83:05:5F:4E:A6:65:DB:27:30:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/220c7069-21ce-3af4-83f3-99f6341e1397.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.22.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:63:b1:b7:ef:6a:d8:ec:bb:f5:b6:1f:73:ca:9a:ff:1f:0a:
a9:a2:60:25:44:47:41:de:cd:7a:52:02:01:80:78:9f:88:dc:
20:5b:79:35:2d:52:31:8f:93:d2:f8:8b:54:c1:c0:27:a6:d9:
13:2c:3a:c2:05:77:f7:84:34:49:50:c7:fd:65:9a:74:32:12:
53:98:8b:85:85:89:e2:63:dd:08:e3:2b:b9:95:51:95:fe:e7:
15:a3:be:0d:73:9e:30:dd:a7:7b:21:8d:7b:da:72:03:46:65:
ea:58:57:a3:d3:66:36:83:05:18:76:6b:d9:52:4f:f3:b6:fc:
30:64:0f:c0:42:eb:69:81:91:ea:d0:72:1d:50:f9:20:f4:d6:
f7:56:e2:b7:8a:b0:f8:19:42:c3:d0:8c:5b:5a:eb:cd:b8:ce:
0a:5c:23:78:a9:83:5c:1f:0e:b7:b0:35:66:3e:2e:0a:17:1c:
79:fc:8b:24:0f:07:fe:20:11:c0:65:0f:40:f1:68:76:c6:73:
8f:10:8e:94:4c:1e:0f:d7:70:79:99:dd:53:02:29:89:5d:59:
83:54:8d:73:a3:1b:da:1b:a5:99:f6:28:3f:cc:f3:49:f3:be:
5d:41:f9:d9:4b:07:13:c0:ea:d2:52:b3:b1:b1:35:60:f4:56:
1c:6f:32:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:43 2025 by rpki-client