Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24014128-b5e2-3a60-bb37-697e7cadfcab.roa
File: 24014128-b5e2-3a60-bb37-697e7cadfcab.roa (raw, json)
Hash identifier: KkSTu5FIs5HoD+lIr45xj+C1aSnYULHIYWZIZn/HD9s=
Subject key identifier: EB:52:A0:AC:63:E9:10:33:6B:58:E5:7C:21:71:B0:4D:7E:83:5B:67
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D64810738AE87FB13D11BD980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24014128-b5e2-3a60-bb37-697e7cadfcab.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 03 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.88.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:64:81:07:38:ae:87:fb:13:d1:1b:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : May 3 04:00:00 2022 GMT
Subject: CN=b4b5a5e4-04be-42d1-b0a6-c5ac348f54d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a9:c3:02:0f:44:fd:c2:a4:6f:1d:3f:d5:b7:
05:05:50:b8:17:c2:5c:59:00:c8:c2:f9:b4:1c:f1:
37:15:93:05:95:a6:68:06:30:7c:3b:1c:bd:17:59:
0a:bb:f7:53:1a:07:34:f3:a8:cc:06:a2:06:c1:d2:
3a:ca:f0:06:7f:19:98:bc:0d:d7:93:11:00:f1:e2:
ed:f4:a5:5c:2a:79:46:ef:7e:e7:9f:fc:f3:06:d7:
29:ca:a0:bf:95:9b:63:7f:88:d4:36:76:4b:69:5d:
32:c4:81:f4:f8:e1:e3:4a:fd:df:e8:d0:91:01:af:
0c:98:3a:07:df:f6:66:68:72:d6:fd:45:a3:4b:0e:
fc:88:b0:da:88:57:f9:31:c0:09:b5:c3:95:a1:ee:
6b:c8:27:df:f2:77:39:10:c5:e5:a9:ef:13:3b:00:
dc:e5:af:75:aa:2a:e3:a1:03:34:53:47:84:7c:a9:
3e:b2:11:1b:70:b2:b4:a5:ef:fb:98:95:43:1c:50:
e3:05:d6:85:2e:b2:78:21:5b:dd:5a:22:6b:ae:b7:
f7:e1:b7:36:eb:36:20:62:45:c8:1a:09:e9:ad:29:
e5:65:e7:b8:75:44:90:86:c1:16:4d:e2:49:f4:b5:
ec:df:77:be:2b:f5:a8:9f:67:fe:40:05:57:6a:ad:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:52:A0:AC:63:E9:10:33:6B:58:E5:7C:21:71:B0:4D:7E:83:5B:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24014128-b5e2-3a60-bb37-697e7cadfcab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:d4:8d:0c:a5:d6:f5:81:84:93:62:dd:25:4d:51:20:c2:a4:
3a:c6:41:b0:7a:45:a8:e8:c2:f9:ee:fa:bf:20:43:ca:a7:a2:
b9:94:44:26:54:d2:2b:eb:eb:99:31:00:0d:8e:e2:ca:cb:84:
00:7c:ce:de:f9:c0:84:1c:51:c1:e9:1f:0a:28:2e:05:ad:e8:
a4:75:64:87:fa:02:f9:4a:67:14:d5:2b:4e:0a:72:47:2c:bd:
3f:2c:6d:55:f7:05:ff:07:fa:63:ee:f9:28:8c:ca:b0:ce:c0:
47:1a:ea:95:d5:9e:68:07:76:e9:6a:be:95:16:7a:ad:51:39:
32:a7:6d:c7:cd:8a:44:31:76:9d:4b:2e:aa:45:8d:5f:8e:79:
80:d4:88:3e:af:c5:dd:5e:3d:d1:dc:eb:9f:08:48:c1:2f:a7:
89:9a:79:9c:78:ae:56:a8:b9:ec:eb:c2:b4:d8:fc:a6:c0:d5:
bf:62:86:96:36:a1:4a:ab:1a:c8:62:40:64:d7:dc:79:e0:ef:
76:5c:18:ad:bb:76:92:5c:37:af:9c:a6:97:13:63:50:73:3f:
35:57:0a:d2:f8:51:ea:bd:4c:de:ab:a1:5c:f2:f5:11:b5:81:
a4:f2:db:a1:89:52:04:5f:a0:e9:b2:33:a0:75:e8:e3:6d:53:
3c:0c:80:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:22:39 2025 by rpki-client