Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2cdd0cfb-5841-392a-a8ca-f048b5c21f36.roa
File: 2cdd0cfb-5841-392a-a8ca-f048b5c21f36.roa (raw, json)
Hash identifier: YWYnS3OHGYpSldc3DzZKYlq9qkMvEpjZFy8F//rjWmA=
Subject key identifier: 8F:B8:CB:95:49:96:FA:F5:A7:CB:01:63:52:1D:96:C0:68:FD:44:FD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E7687204CFF7CF91199E503C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2cdd0cfb-5841-392a-a8ca-f048b5c21f36.roa
Signing time: Mon 04 Jul 2022 12:00:00 +0000
ROA not before: Mon 04 Jul 2022 12:00:00 +0000
ROA not after: Tue 09 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:76:87:20:4c:ff:7c:f9:11:99:e5:03:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 4 12:00:00 2022 GMT
Not After : Aug 9 04:00:00 2022 GMT
Subject: CN=c3e211b4-55eb-4987-ac64-0dd6e0c10ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:66:3c:36:1e:b1:aa:df:15:26:01:a6:35:18:
49:a3:3b:7f:c0:78:93:92:b7:d7:8e:d2:ef:fa:c4:
24:7d:33:fe:cf:af:0c:52:57:4f:47:3d:82:3b:30:
1a:ea:ac:ed:99:41:68:e4:4e:12:af:c2:fa:fd:0a:
39:57:d0:f7:f4:53:98:58:f3:33:65:4d:52:15:ba:
08:7f:b4:c7:af:f5:f1:04:c2:f7:b3:f0:b0:8b:b7:
e6:4c:06:d1:e4:51:b7:41:65:1f:b5:fb:a4:30:80:
65:86:a2:5e:13:17:8d:51:fd:ee:b3:a1:c1:10:13:
e7:73:9b:a2:21:ff:f5:e2:a2:c7:b6:de:e2:d6:2b:
6b:8a:9f:8e:b5:7a:fd:4e:67:b8:ab:c2:91:a4:95:
d7:f4:94:32:5e:cb:e7:97:14:54:d3:83:98:65:09:
ab:aa:7d:a0:cd:2e:74:e1:07:d9:dc:59:59:1c:79:
7a:68:fe:ea:13:5a:5a:f7:47:04:10:c6:df:79:c7:
d5:a0:7c:80:7f:4a:7c:d1:86:1f:3a:6a:79:72:f7:
bd:51:e7:38:00:58:88:9d:71:61:f3:ae:62:a3:93:
95:da:4f:00:77:93:07:d3:24:f5:17:d3:1b:19:e0:
46:0d:ea:8a:5b:8c:07:2f:ab:1a:2f:ee:33:64:ff:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B8:CB:95:49:96:FA:F5:A7:CB:01:63:52:1D:96:C0:68:FD:44:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2cdd0cfb-5841-392a-a8ca-f048b5c21f36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:54:14:77:cf:e1:2a:60:f9:11:bd:ba:8d:13:97:e1:1d:36:
f9:be:29:e2:f9:23:b0:0e:39:c3:94:a9:5e:7a:6e:3d:54:0b:
0b:cb:80:26:de:b4:d3:a1:aa:f7:a9:4c:57:d2:84:43:46:9a:
de:e1:ff:3c:d2:7f:75:c1:6b:5e:fe:22:37:6b:15:08:ab:25:
09:f3:a2:b4:15:60:2c:cd:9c:e4:0d:ed:64:25:92:72:ea:c1:
c5:6e:12:64:c7:9f:d5:2a:85:87:91:9b:6d:42:f9:65:46:83:
85:ef:6f:91:42:bc:0f:e0:fc:33:40:94:ee:7a:2f:9d:a0:3d:
d6:a3:db:10:77:ab:2a:51:62:88:9a:fe:fe:13:1d:7e:3f:29:
7b:a5:44:1a:ab:84:de:37:2a:ec:c9:61:f8:26:6f:44:77:bf:
80:a7:5a:67:c9:ca:74:93:68:c6:69:de:dc:cc:a5:d0:83:bf:
ae:65:25:68:fe:ad:72:39:ca:52:4a:5d:92:6c:db:ea:c4:94:
bb:a8:8f:f5:89:ef:8b:18:f6:94:1b:15:9b:c5:7d:79:7c:9b:
5c:9c:ab:10:c0:4b:02:eb:4b:de:e8:55:e1:ac:94:d9:e4:33:
04:c4:18:95:65:78:67:86:c0:3e:b8:1c:ae:0a:a7:dc:fb:11:
08:9f:aa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:16 2025 by rpki-client