Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28411c9f-03e6-3554-85d8-3c18d12722be.roa
File: 28411c9f-03e6-3554-85d8-3c18d12722be.roa (raw, json)
Hash identifier: W3LaKlbrm1ToTPSEU1IXzQnQtPlTc0LDgeE8T8X7lbs=
Subject key identifier: F1:20:45:CF:FC:67:77:80:F0:F6:59:17:53:FB:7F:4D:DA:D2:24:20
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC87902DEFAA14625F0BC3140
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28411c9f-03e6-3554-85d8-3c18d12722be.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.101.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c8:79:02:de:fa:a1:46:25:f0:bc:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=f3d67e12-fb55-4235-970f-6e83278babbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:9c:45:33:f2:79:0a:fe:09:07:e9:8d:cd:
43:1e:01:fc:f8:9f:b2:f7:ca:7a:0e:56:e3:d5:64:
c1:07:c2:ff:6f:21:ea:85:62:58:65:0b:3f:18:67:
08:d7:47:b5:1b:50:9e:e3:59:a3:86:a2:e4:3b:27:
d8:66:37:77:a2:b1:6b:4d:4a:8f:20:63:2c:81:ad:
5b:e5:46:36:4f:f8:84:7c:d8:59:56:c0:ae:69:09:
0f:fe:f6:c3:d3:3d:4c:11:84:30:be:25:34:2f:9d:
6a:54:a4:e4:79:b1:eb:07:3e:8c:7e:3f:e7:b1:59:
f2:7b:e1:ad:5a:34:92:00:b0:ab:88:43:00:4d:fe:
f1:0d:63:33:68:b1:1d:e7:8c:27:c0:cd:d8:b8:e4:
35:b2:54:05:b7:a7:e5:a3:9b:2a:60:fc:21:75:81:
5c:64:1a:7f:82:90:56:32:49:2c:8d:ec:a4:df:85:
c3:97:52:4e:47:44:2a:64:cf:f9:05:37:3f:67:0b:
2a:4b:6b:82:1e:64:33:05:f8:92:ab:ba:af:67:d7:
26:91:4a:4e:c8:cf:07:b9:e7:fe:f1:e9:4e:61:a6:
b6:46:b4:d1:bd:e1:8d:86:c0:bc:0b:d9:7a:f2:d0:
58:72:b6:89:7a:e5:5e:cc:3e:a4:9f:4b:6c:6d:2a:
57:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:20:45:CF:FC:67:77:80:F0:F6:59:17:53:FB:7F:4D:DA:D2:24:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28411c9f-03e6-3554-85d8-3c18d12722be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.101.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:51:b1:68:8c:a6:79:c4:7f:a0:da:1b:43:1a:a1:47:a4:12:
74:00:9b:21:42:8a:36:82:20:e3:fc:00:88:89:45:e0:c3:52:
f9:a4:ee:33:93:b7:3d:22:ff:ad:ee:f5:32:7e:84:1c:86:e5:
e8:63:2e:f0:f8:b0:e8:2b:25:d5:45:f8:d6:ba:2e:e5:22:2d:
9d:52:42:6d:69:92:af:cb:e9:c1:63:44:c9:7e:fa:00:78:1f:
15:a6:89:fc:c3:20:e9:59:01:70:b6:4d:8a:06:58:6a:0c:c1:
3c:26:5c:f6:41:5a:ba:96:3d:0f:9b:a2:ed:be:26:91:d7:69:
66:46:fc:f8:82:4c:ac:c1:d2:8f:01:a9:5a:db:57:f0:61:17:
35:c6:62:6f:b0:59:b9:50:53:c3:2c:ab:e7:ce:2e:69:4f:ab:
c9:30:37:cb:0a:f7:94:91:c2:dd:c1:9b:ee:c9:0a:86:97:57:
91:83:9c:9a:77:8a:2e:ed:a9:80:ef:14:f2:6d:37:57:f3:42:
52:d3:68:cd:9d:16:97:26:2c:c0:56:d8:bb:c7:11:dc:73:73:
63:b7:a0:81:85:dc:29:f6:ff:0f:1d:05:fa:10:5e:80:84:fe:
5e:ab:59:fd:51:6b:54:22:86:14:90:2f:ee:0f:36:cf:9d:c0:
e6:34:69:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:57 2025 by rpki-client