Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/240bd396-1737-3f0d-9bec-4cb89464eb47.roa
File: 240bd396-1737-3f0d-9bec-4cb89464eb47.roa (raw, json)
Hash identifier: tA6NSL0w2y1yhhDz9iCIo7aIuq56rm0tRLOJdUNMgUc=
Subject key identifier: D1:D5:A8:FB:E6:EF:C7:3B:97:E9:50:3C:4A:5B:14:22:9B:2D:97:C7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE13444F217E12FAFA21707C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/240bd396-1737-3f0d-9bec-4cb89464eb47.roa
Signing time: Thu 10 Feb 2022 05:00:00 +0000
ROA not before: Thu 10 Feb 2022 05:00:00 +0000
ROA not after: Thu 17 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.121.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e1:34:44:f2:17:e1:2f:af:a2:17:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 10 05:00:00 2022 GMT
Not After : Mar 17 04:00:00 2022 GMT
Subject: CN=da5638d9-6bbf-48e8-b985-6c40b469116b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:07:7e:38:9e:14:eb:2a:27:e5:68:69:49:
d8:00:26:92:72:27:ec:1d:98:6e:7a:a8:80:70:e2:
27:03:af:98:96:3e:a4:5c:6d:b0:86:fc:e2:88:91:
37:96:da:9c:70:44:87:ab:61:21:8c:74:f7:a8:4a:
6d:ca:d6:31:d6:b2:50:44:52:24:95:f8:34:dd:d1:
36:ff:1f:5a:1a:6a:47:d1:07:70:7e:40:75:89:d8:
90:f2:98:0c:d8:8d:e3:0c:99:5e:aa:aa:16:03:a7:
6e:b4:08:26:99:e3:03:30:57:ec:65:d4:e2:c3:b0:
a7:6d:7a:a2:9d:2c:bb:be:5b:a6:9d:6a:d3:19:56:
0b:b0:b8:83:20:43:c8:27:8a:16:9e:1d:13:69:62:
14:44:61:5e:7a:7b:30:5d:ac:9f:d7:52:a9:04:1b:
2b:2f:af:e1:57:26:9e:42:46:75:7c:74:94:95:51:
b6:20:f0:be:29:8d:c8:ea:44:c9:12:03:81:d7:d2:
c7:3d:b3:9f:8b:9a:ed:5c:0c:be:2a:51:8b:3c:33:
95:f5:ee:5b:bb:98:0c:5f:9f:d4:6d:e4:0f:49:de:
5e:ca:46:fd:34:e4:14:9f:13:6d:5c:d5:6a:fc:6d:
e9:77:a7:b3:fe:41:1e:a6:3b:2f:89:ce:be:89:b8:
c1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D5:A8:FB:E6:EF:C7:3B:97:E9:50:3C:4A:5B:14:22:9B:2D:97:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/240bd396-1737-3f0d-9bec-4cb89464eb47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.121.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:5b:6f:24:e8:9f:ce:ec:db:ba:95:69:6e:8e:f2:f2:c8:93:
8a:86:d8:37:1e:d4:f0:64:ce:d4:a9:0a:ff:e9:3c:7f:6a:ae:
a5:9e:13:05:de:05:1b:6a:ff:21:9a:72:cd:11:72:0e:28:18:
52:82:c0:7b:e7:ee:ff:c7:31:cf:8a:5e:50:c5:e2:63:34:35:
df:fc:ec:80:d1:10:f4:30:46:19:3b:ac:b8:f9:37:c0:9e:f3:
60:d1:66:89:8c:6d:4e:78:99:d0:56:31:ad:c4:7e:22:47:bb:
c7:71:15:73:19:ff:ea:7e:61:9a:49:6e:f6:3a:f4:3c:7f:73:
84:79:3d:48:a8:d9:ae:51:40:f3:37:26:44:f8:2c:3b:6b:15:
5c:89:96:fd:79:40:1a:b9:c8:a5:e6:65:02:b6:8b:a6:b8:12:
e0:33:03:81:a5:97:37:24:dc:12:ee:c9:d2:b1:19:72:45:b3:
b2:26:d2:a3:58:d3:d2:4a:6f:9d:af:4b:f4:75:01:4a:83:21:
cd:a1:d1:bd:8e:4b:85:48:18:c1:42:ca:f6:d0:67:78:ca:c3:
8a:d9:4e:3e:7c:86:ab:6b:d8:89:a0:1b:83:a5:1a:d3:5c:b5:
1f:cf:a4:f3:4e:44:26:fb:40:7a:33:be:ec:c3:09:ee:8c:01:
60:19:dc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:54 2025 by rpki-client