Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25885cd7-6e5c-3941-9b14-ccf2598dfd42.roa
File: 25885cd7-6e5c-3941-9b14-ccf2598dfd42.roa (raw, json)
Hash identifier: SKDPK4KsVMvMSR5FOy5LzSNOLr2gBFwuXZXaGRqjQrQ=
Subject key identifier: 35:9A:CC:6A:4D:CA:9E:AB:E8:DA:A5:B0:F8:75:A0:AE:80:4F:0E:8A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2F6E0C15610A9C067E0B0FB8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25885cd7-6e5c-3941-9b14-ccf2598dfd42.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.101.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:6e:0c:15:61:0a:9c:06:7e:0b:0f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=995bf745-0a60-4c50-b7e8-531b27a3540e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:74:7f:7e:c4:cd:0e:32:53:da:03:7f:a1:
9b:fc:2c:10:32:47:87:ea:22:57:cb:13:b0:cc:7b:
5a:48:00:a0:97:26:72:9d:20:98:6d:18:91:44:68:
8d:87:96:06:5e:3f:df:42:75:9f:b2:de:20:f8:b1:
4a:1c:78:2e:74:7a:5b:05:a0:4d:5c:6f:76:60:e1:
2c:cd:81:d4:51:f7:14:f6:a9:ec:64:3b:1c:3c:93:
04:a9:b0:67:72:b9:52:ce:b7:ed:d5:23:2d:bd:82:
52:de:1a:f4:d0:98:02:24:f9:eb:e9:73:2c:13:18:
56:7b:1d:9a:20:ba:c7:f6:59:1c:23:ea:e9:3d:72:
57:dc:b2:80:1a:c4:36:41:43:44:ef:50:76:e3:ab:
85:d3:2b:90:35:a1:06:df:9d:be:43:3a:6a:8f:25:
49:17:6b:1b:c6:bb:15:8f:89:54:5b:98:8b:61:6a:
5e:02:90:fb:b5:1d:61:bc:11:5a:5a:31:e7:c2:18:
f3:9a:42:ee:d0:5a:15:f8:8a:a7:51:56:2a:77:25:
9c:73:05:3c:11:d8:8e:87:a7:b9:20:65:69:58:e9:
aa:96:64:6e:58:71:19:3e:ff:d7:ff:7c:87:72:a7:
63:7b:99:18:61:8a:a9:dd:64:33:32:a6:fa:37:1d:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9A:CC:6A:4D:CA:9E:AB:E8:DA:A5:B0:F8:75:A0:AE:80:4F:0E:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25885cd7-6e5c-3941-9b14-ccf2598dfd42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.101.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:a5:d4:4a:9b:da:d6:89:5f:60:86:63:69:9e:5f:0c:ca:23:
9b:e8:c6:c0:8d:a6:eb:e4:f2:4f:88:44:61:2a:da:2f:64:08:
e4:fa:50:df:1f:b0:5c:c2:1b:b8:45:2a:c4:24:5a:71:42:af:
75:62:26:46:06:a4:38:d2:4a:8f:cf:94:fa:61:58:18:47:d1:
9c:1d:3a:ea:40:96:5c:14:25:70:f3:97:a7:06:25:76:80:cc:
ac:4a:8e:3f:20:0c:75:e0:6f:62:61:9d:e2:08:b9:51:7e:00:
59:08:a1:1b:95:b6:5c:1c:39:e4:e2:67:b2:43:a1:b9:0d:c6:
78:26:99:59:5c:c0:47:dc:c5:8a:cf:26:5e:09:d0:b5:29:b4:
81:ee:de:e9:7f:56:46:b2:6b:9f:ee:74:b0:ee:e0:3c:28:cb:
c6:a3:45:15:22:42:40:9c:a4:2b:56:cc:5c:11:4a:59:88:fe:
20:b7:97:76:07:ab:9e:c2:7f:33:6e:59:97:da:d2:ec:85:67:
18:0a:d6:7a:18:c5:65:81:3b:5e:28:8a:42:b4:0e:da:57:9a:
20:50:9d:b0:fb:96:1d:f8:cc:cc:6c:79:81:82:80:06:76:c8:
4e:3c:99:05:15:92:2c:91:26:0b:ae:4f:c8:f1:48:f2:af:c7:
5a:f7:0e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:13 2025 by rpki-client