Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b2f8864-865a-3ae3-8464-e8321d0bd30c.roa
File: 2b2f8864-865a-3ae3-8464-e8321d0bd30c.roa (raw, json)
Hash identifier: TbCvGQ636ONFF5RsI0iNcs72b9QhlFeJXSz7L9JbQ3o=
Subject key identifier: F5:B1:44:8B:05:4B:95:B5:6B:F9:95:92:5E:0D:5B:8B:FD:9F:DB:42
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FFD661BC139E3483C4A852800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b2f8864-865a-3ae3-8464-e8321d0bd30c.roa
Signing time: Mon 21 Nov 2022 12:00:00 +0000
ROA not before: Mon 21 Nov 2022 12:00:00 +0000
ROA not after: Tue 27 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.120.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fd:66:1b:c1:39:e3:48:3c:4a:85:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 21 12:00:00 2022 GMT
Not After : Dec 27 05:00:00 2022 GMT
Subject: CN=dd9f2884-5951-43d3-880e-b896e5908999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:9d:c2:5d:f6:72:97:3a:87:e7:24:24:6f:
1f:2e:e6:53:bf:8f:f8:e9:86:2a:d0:a0:7c:6c:32:
03:c9:f5:82:f2:95:5c:ee:43:68:7c:79:d0:63:92:
df:8a:d2:a3:ef:10:2c:a7:fd:8c:b3:78:16:bc:ad:
2b:dd:b4:9d:3c:af:79:23:b2:21:bd:b6:ca:76:69:
7c:f5:ea:01:2a:35:ef:d2:e0:86:77:b6:85:a7:3b:
5f:d0:bc:27:5a:4c:73:61:de:88:2e:ac:87:5e:b7:
56:bf:a4:cd:1c:74:fe:46:ce:b7:c4:2f:82:26:80:
37:7d:20:0b:07:42:41:f3:8e:c9:22:5e:3a:07:dc:
ea:66:dc:a9:44:56:ed:c4:c7:65:91:c4:0c:07:6e:
50:90:b3:3e:f3:7d:d3:7f:fd:b9:06:dd:a6:55:c5:
b9:9a:e7:4f:e7:a7:15:7f:49:5b:7b:a5:ba:1a:be:
23:19:b2:9e:a9:90:40:c8:4e:6f:16:2b:1d:fb:7f:
2a:ca:e4:ec:92:4f:1f:14:fc:ed:bf:f0:3c:eb:98:
1b:93:ca:4f:d6:6c:40:78:8e:62:bb:a2:2e:fc:fb:
92:52:83:67:9b:31:5f:98:33:41:ed:b6:38:d6:ed:
f6:b2:49:5a:8d:64:55:e0:9f:c2:70:f9:95:95:a8:
ac:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B1:44:8B:05:4B:95:B5:6B:F9:95:92:5E:0D:5B:8B:FD:9F:DB:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b2f8864-865a-3ae3-8464-e8321d0bd30c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.120.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:52:a6:8d:91:b4:f1:31:a9:b9:f1:2a:f3:6c:56:1b:ba:fb:
29:22:a5:d9:5c:f5:ff:3b:ee:2f:ce:88:6e:17:b8:91:12:ea:
c9:50:3f:32:a3:17:7e:36:06:49:85:0f:52:06:e2:91:e0:26:
4a:25:21:bd:0b:a7:88:0d:52:ee:cb:6c:90:c8:6c:f9:90:5a:
2d:7a:76:c4:81:eb:b0:b5:0a:61:df:12:0e:2f:68:88:e6:17:
7d:c9:7a:a2:f3:63:b2:b6:7c:01:a3:0e:10:89:f9:2a:b8:c7:
73:46:65:9a:e0:67:0b:83:de:d4:09:01:f6:09:9b:2c:96:08:
e5:2b:c2:32:32:c2:b4:c8:a7:64:9b:83:54:4e:cf:4b:f0:32:
b1:3c:33:2f:58:d1:b2:f4:76:6f:86:08:c4:3e:9a:a8:f4:6d:
61:10:13:f4:2d:cb:11:64:57:77:08:1a:b6:f0:fa:d4:4d:7d:
a5:a7:8a:f7:f8:d5:fa:ea:ca:1c:93:f0:09:69:ed:7c:bf:f5:
11:0f:4b:d6:c0:ac:b2:51:22:54:a6:87:af:55:96:9a:c5:c2:
7e:c9:7f:8f:01:12:45:b5:58:ce:ea:19:de:ad:8f:a4:8d:46:
21:11:ce:ba:ce:ed:5d:a4:ef:39:f8:e9:ea:0c:3b:84:f8:2e:
6d:ee:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:51:36 2025 by rpki-client