Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ea5fc52-b81b-3d88-b75d-faa45a1cfaa8.roa
File: 2ea5fc52-b81b-3d88-b75d-faa45a1cfaa8.roa (raw, json)
Hash identifier: 8W+YQtklgiaiJbpwebJ++Pja5JEM2Fl3EegnGJyMbw8=
Subject key identifier: 20:CC:48:87:03:80:1C:54:DD:0A:4C:E2:9C:19:90:B6:12:D3:E7:6A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DA4BD875E1203186D6ED10080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ea5fc52-b81b-3d88-b75d-faa45a1cfaa8.roa
Signing time: Wed 20 Apr 2022 12:00:00 +0000
ROA not before: Wed 20 Apr 2022 12:00:00 +0000
ROA not after: Thu 26 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.99.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a4:bd:87:5e:12:03:18:6d:6e:d1:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 20 12:00:00 2022 GMT
Not After : May 26 04:00:00 2022 GMT
Subject: CN=5e3be9cf-a368-4946-8e82-53c363125751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:20:7b:b9:78:d4:8f:de:a3:7d:00:9e:7d:
03:19:19:f4:98:8a:fa:ab:77:40:b1:be:d9:94:92:
81:1c:3b:c1:5d:f5:f2:03:63:73:46:ff:b1:85:ab:
1f:d2:cf:77:3e:a6:fb:f3:7f:26:65:b2:bb:e0:5c:
6b:32:66:d9:cc:d7:73:c3:6e:cd:7c:9f:ef:88:e4:
26:75:a6:02:9e:9b:47:8a:6a:61:63:78:1a:66:6a:
cf:a2:c4:d8:75:ce:37:e5:0a:a8:8b:07:96:9d:43:
16:0d:6d:72:b8:a7:5d:36:a9:38:9d:cd:53:bc:66:
d5:8e:d5:c6:d4:6f:10:e0:fa:77:4b:f2:93:44:31:
33:cd:59:b4:af:94:32:ad:0c:c5:b7:35:8c:0c:8f:
ca:e7:8c:2c:dd:a4:6e:f3:71:bb:02:2d:02:ab:1b:
a3:7f:e1:5c:cf:e5:ba:31:18:24:82:72:3c:52:e8:
66:79:a0:e2:0f:36:ae:55:80:4d:7e:49:02:e1:fb:
d8:01:2c:08:5a:4d:be:62:f4:91:9e:bb:2e:a0:90:
6a:a2:17:be:fa:3a:66:33:b9:a2:c4:a1:fc:1d:3c:
2b:54:80:3b:94:42:2b:1e:e1:63:a9:5b:4e:ee:6c:
6a:7a:2b:97:26:7b:dd:33:ee:a1:3a:b8:14:d0:ba:
24:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CC:48:87:03:80:1C:54:DD:0A:4C:E2:9C:19:90:B6:12:D3:E7:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ea5fc52-b81b-3d88-b75d-faa45a1cfaa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.99.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:bc:6e:e5:80:7b:34:4b:ba:f9:42:8e:fc:6e:68:e3:40:bd:
d1:da:d5:c7:38:87:ee:f2:90:71:5e:db:27:73:eb:d0:b9:b1:
71:4f:af:5b:35:a5:c9:63:81:c0:5b:b2:61:5d:25:dd:a9:7a:
66:51:7b:9f:ec:3b:f9:b7:85:d9:8f:64:c0:af:21:af:d0:5e:
bf:29:55:29:09:1b:5e:03:fa:9d:72:4d:d5:08:4f:19:0e:6e:
37:1a:fe:af:52:e6:18:54:8f:2a:fc:08:c4:4d:44:7b:3a:24:
f1:e5:da:5f:c7:ca:08:e5:03:91:b2:b3:00:67:c6:1c:32:22:
a4:15:d8:1f:11:5a:26:57:30:cb:f1:a3:ff:42:ff:b4:46:49:
a9:88:c7:4d:0e:c4:a2:bf:cd:be:1c:b1:98:b9:06:4c:b8:5c:
fd:43:32:49:79:1a:f1:8c:9f:cf:63:ba:c2:b1:e4:aa:e8:53:
75:2b:19:75:5b:60:cc:ee:49:12:cf:8c:0c:6b:fd:d1:51:9e:
0e:90:65:31:4e:7b:58:cc:6c:23:d5:c8:31:b3:06:ba:e5:9e:
51:80:f8:c3:fb:a0:d6:04:b8:bf:9d:ea:8a:1b:20:3b:17:c5:
8d:bb:6b:e9:69:67:74:4a:85:f8:8c:37:b2:7f:18:43:93:bb:
50:86:53:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:14 2025 by rpki-client