Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2e4d0dd7-e153-3654-b4c9-5bcac9b06d57.roa
File: 2e4d0dd7-e153-3654-b4c9-5bcac9b06d57.roa (raw, json)
Hash identifier: nIpzFsL8KskUSTZOyvBzwGbJMOTrmLBPfFY/nZe0xG8=
Subject key identifier: FE:4A:EF:2A:74:8F:70:B5:23:04:58:54:AB:35:0A:3A:9A:2C:0A:99
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D16468663F7F61633B530E980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2e4d0dd7-e153-3654-b4c9-5bcac9b06d57.roa
Signing time: Tue 01 Mar 2022 05:00:00 +0000
ROA not before: Tue 01 Mar 2022 05:00:00 +0000
ROA not after: Tue 05 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:16:46:86:63:f7:f6:16:33:b5:30:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 1 05:00:00 2022 GMT
Not After : Apr 5 04:00:00 2022 GMT
Subject: CN=8dcb8c1c-3ba9-4a59-9857-a11852375a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:df:2c:c9:46:82:1a:1c:63:6e:d7:7e:f9:
08:41:5b:96:57:31:1e:5b:cb:61:99:e7:e1:23:39:
3f:2c:ae:3f:6f:1e:c3:d6:c4:70:d7:74:4e:ae:52:
0c:57:24:40:a1:19:7a:1e:b6:ef:3e:2e:01:fc:59:
70:d4:d7:a6:85:88:81:73:09:be:cf:93:bd:68:cc:
cf:89:a8:46:93:a9:5b:6c:28:79:43:ca:7c:d1:8c:
cd:ae:4f:31:04:0f:6b:8c:62:75:a5:ec:86:c2:c4:
7f:8b:40:70:04:5f:39:7f:cc:6b:9c:b2:bd:60:f2:
fb:2f:c2:06:99:8e:6c:31:69:0e:0f:49:ec:23:58:
9b:7d:f7:3e:2a:2c:53:c3:65:c5:a8:4c:19:03:ea:
40:fa:fa:b3:b2:66:ac:51:cf:c7:cc:9a:a1:3e:32:
44:3c:31:b1:32:49:37:b7:a4:64:23:38:79:0c:2a:
a3:9f:cc:8c:e3:6d:e3:c6:68:5e:82:19:10:66:b0:
1a:86:69:0d:7c:80:29:6b:7c:d7:7a:48:9a:36:04:
1c:2f:f8:a4:70:c6:79:d5:a4:5a:61:65:65:3a:d2:
cf:dc:4a:2b:25:96:fd:53:19:f6:7d:49:43:48:a7:
58:05:22:68:63:dd:bb:50:01:16:87:16:88:90:53:
84:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4A:EF:2A:74:8F:70:B5:23:04:58:54:AB:35:0A:3A:9A:2C:0A:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2e4d0dd7-e153-3654-b4c9-5bcac9b06d57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:0f:d6:21:c2:4e:e0:c7:9a:3e:de:c8:0e:c7:c7:11:18:ff:
8f:30:e5:73:7b:b5:65:36:21:30:2d:e1:2c:e5:7e:b6:74:d4:
c4:90:aa:44:a1:88:b5:c3:81:a4:e4:f7:ff:a2:88:15:67:0c:
08:ea:e1:da:88:86:fa:f2:01:ba:97:e5:13:0d:55:d8:df:37:
72:ae:18:f7:d8:aa:36:14:ca:80:45:3d:a7:c5:7b:ef:2f:76:
52:41:60:5b:3d:d3:72:d6:e0:7a:9f:b8:5e:83:d8:64:04:11:
4d:4c:45:84:24:be:79:93:25:80:63:14:a4:a8:37:4e:73:e8:
a6:2a:e7:bb:71:6c:91:96:98:97:fc:b6:c1:d7:93:4d:38:41:
e0:fa:62:52:a1:e4:6e:d8:15:90:30:f8:0a:61:84:8d:2c:fa:
2d:f4:f2:35:a4:e3:da:57:22:2d:5b:9f:dd:52:3d:78:67:1d:
d3:37:0a:54:9f:d9:ac:0f:fe:30:e8:8a:de:54:f5:66:74:36:
f2:65:49:91:08:91:04:57:ba:2c:b2:92:49:42:ad:bd:7d:d5:
9d:06:bb:3c:76:80:20:e5:d0:a5:ee:28:3b:42:62:d1:91:17:
a3:bd:82:f9:b0:c4:61:7f:34:9a:55:1a:87:86:28:ec:d3:20:
e0:9a:2a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:04:57 2025 by rpki-client