Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24e280af-1ee4-3309-b3be-115bf6095146.roa
File: 24e280af-1ee4-3309-b3be-115bf6095146.roa (raw, json)
Hash identifier: +0TNfxLkofP6PvZO+O7gN4+QFZXrqONFWDiTncxmjgg=
Subject key identifier: DC:1C:70:4D:90:E5:96:7E:11:5C:32:7E:45:C7:1E:E6:21:76:27:6B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DD46E91FE3A68668E9A60AE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24e280af-1ee4-3309-b3be-115bf6095146.roa
Signing time: Sat 07 May 2022 12:00:00 +0000
ROA not before: Sat 07 May 2022 12:00:00 +0000
ROA not after: Sun 12 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d4:6e:91:fe:3a:68:66:8e:9a:60:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 7 12:00:00 2022 GMT
Not After : Jun 12 04:00:00 2022 GMT
Subject: CN=b8b989e9-0ec5-4063-a8c3-c0c226fb1cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:3e:65:35:74:fb:3b:73:09:7a:a9:8c:20:
71:45:60:ba:d8:39:c4:53:26:71:c1:4c:9f:8d:39:
60:89:fb:09:8b:34:ca:85:2b:a1:6c:d8:96:76:89:
9f:04:dc:1b:e5:a8:3a:41:71:14:8a:6b:d9:b9:7b:
c3:40:8f:3d:d3:da:67:c3:9d:50:68:b8:05:c7:28:
86:3f:91:9d:21:96:43:d2:57:7e:39:db:a7:9f:c2:
56:dd:41:b9:5c:40:be:a9:a2:f9:b3:64:61:32:86:
54:e9:6b:85:4b:73:b5:0b:2d:4f:89:0b:8c:44:d1:
77:68:51:19:13:4a:cb:d9:c1:6a:5c:fa:c0:fe:fc:
a0:e4:f5:96:d8:e7:7f:8b:86:ac:c0:ef:c4:48:cd:
4a:1d:de:92:85:9c:88:4f:a0:aa:39:c1:07:3d:32:
aa:65:d0:46:ff:84:a4:df:0e:25:9f:c7:71:6b:e6:
21:4d:39:09:c1:4f:51:fd:5c:3c:d7:8c:f1:35:ca:
d7:48:d2:9f:8d:9c:01:59:2c:a1:78:a7:82:b3:0b:
fc:5f:fa:0f:a3:c1:2c:4f:f8:6e:8a:c7:38:a4:57:
f7:b1:b1:d3:02:ff:52:20:b6:fe:cb:98:3f:f2:1a:
95:ba:cc:39:21:f6:a6:9b:9b:fc:42:84:bc:7d:a6:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1C:70:4D:90:E5:96:7E:11:5C:32:7E:45:C7:1E:E6:21:76:27:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24e280af-1ee4-3309-b3be-115bf6095146.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:8d:f7:2d:eb:12:b7:8f:a0:6c:f5:bc:a8:b2:17:52:38:14:
7b:f8:cf:ec:74:25:be:b6:ff:49:4a:eb:d0:69:9b:4c:2e:07:
09:1c:e8:ed:6c:d5:54:25:71:a7:79:60:ea:f2:6b:f2:d7:0a:
cc:b2:ec:f7:10:0b:b2:0a:6e:9b:a7:ab:6a:fb:8b:ff:c4:94:
b4:7b:4d:ac:a6:3b:b6:42:91:f4:3b:02:d8:c0:53:c9:ff:55:
9f:22:39:eb:36:6b:36:df:c2:75:4f:b6:64:14:57:10:01:3d:
99:52:af:73:04:61:3f:b6:c8:b5:a0:53:49:be:f9:81:17:0a:
eb:5a:72:91:d0:6d:ee:89:73:e3:5c:90:8d:9e:51:fa:16:ec:
c4:84:3e:28:02:97:d5:06:31:fc:dc:3f:b3:e8:bd:f3:26:a5:
01:c9:2e:c5:7e:29:8a:a3:0c:c2:81:9f:d3:9b:2a:40:3a:66:
47:6d:d2:7c:d5:b1:84:bc:21:82:42:58:d2:82:2f:d4:58:ff:
77:ce:08:8f:5e:31:dc:33:d9:37:f3:d9:b9:8c:46:b4:6f:ca:
67:3e:a7:79:98:91:dc:9b:47:cb:d1:74:f0:7d:09:a0:4b:96:
2c:47:e4:5f:63:3f:c4:c7:da:32:5f:ac:69:5c:3d:a2:b8:04:
11:9d:16:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:21 2025 by rpki-client