Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f24fa50-9779-336a-b691-e85a6e30f948.roa
File: 2f24fa50-9779-336a-b691-e85a6e30f948.roa (raw, json)
Hash identifier: iXFreaSM7nPVXNBR+wJZsTg9e0kTI/DX6lTgIIkHaMc=
Subject key identifier: CC:D2:C9:62:B9:2E:D6:D7:49:AC:C7:FC:51:8F:F5:BC:6A:7B:30:C7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C79DA26FC34C9E1401B9E3980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f24fa50-9779-336a-b691-e85a6e30f948.roa
Signing time: Tue 04 Jan 2022 05:00:00 +0000
ROA not before: Tue 04 Jan 2022 05:00:00 +0000
ROA not after: Tue 08 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.154.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:79:da:26:fc:34:c9:e1:40:1b:9e:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 4 05:00:00 2022 GMT
Not After : Feb 8 05:00:00 2022 GMT
Subject: CN=29426167-8667-4e4d-8480-f353ea3f9f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e7:de:2a:b4:90:6e:71:ac:ab:c3:21:83:40:
1a:d7:51:be:64:2e:be:d7:6b:3e:ed:cb:fe:f9:ba:
46:ff:e1:dc:8f:79:82:4f:cf:10:64:7c:db:c5:6a:
f8:60:c8:e5:82:fd:f5:25:05:a4:3f:04:dc:c3:42:
79:57:72:a8:f5:c2:2a:1e:b6:e2:03:8f:0a:46:53:
d0:1d:5a:ff:84:4b:d4:cf:3e:8a:25:db:9b:91:c1:
0e:d3:97:33:3b:1a:22:14:82:e9:69:dc:51:93:0b:
2c:70:ca:83:ce:02:da:87:fd:81:ae:99:ac:ab:bc:
63:38:9c:ef:47:5c:b6:2a:aa:4e:30:1d:c1:b0:3a:
60:07:79:b2:c9:1a:bb:30:dc:a6:67:52:2c:b4:6e:
19:20:c3:ab:fd:d5:d4:bc:1e:58:3d:b5:f5:92:0f:
09:a4:0a:b8:06:7f:a6:c7:c6:e2:1d:95:dd:e4:89:
b7:17:27:79:40:5a:10:d5:ed:5a:34:48:ae:0c:91:
f0:cd:54:7a:65:c5:b0:59:4c:bb:83:59:44:26:b6:
fd:d2:f3:bf:57:b1:ab:6b:a9:21:63:49:2a:b7:53:
db:21:9a:cf:ff:9c:86:2f:5e:07:01:63:59:f5:03:
4a:ae:c5:5c:f2:97:45:05:9f:3b:36:6e:16:2c:be:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D2:C9:62:B9:2E:D6:D7:49:AC:C7:FC:51:8F:F5:BC:6A:7B:30:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f24fa50-9779-336a-b691-e85a6e30f948.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.154.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:1c:7b:aa:44:52:2f:dd:21:ba:e0:79:04:61:9e:4d:a1:ac:
91:11:ff:09:39:97:21:8d:a9:48:1e:48:a0:f8:4a:43:6e:21:
74:ff:6b:2d:df:32:78:b6:34:da:62:1c:92:35:a0:ae:58:c4:
02:a5:10:04:64:86:b5:31:bc:64:bf:91:70:d5:85:56:ba:45:
b1:0a:a5:ac:8e:e6:17:57:93:3b:d7:5f:a2:83:f5:dc:ea:80:
15:8f:38:c8:da:69:6b:8d:43:a1:a5:ea:3f:3a:1c:1f:6c:75:
7e:29:a6:12:70:f8:9b:15:5e:fb:4a:7c:88:3b:1f:c8:10:89:
6e:b7:3e:52:8e:8d:3c:ba:d2:44:61:9e:0e:bc:fd:55:92:d3:
66:03:ed:05:b8:4d:d7:ca:6c:6c:c1:33:72:b2:09:0b:3f:69:
47:30:37:86:a4:3b:0e:9b:ff:76:1e:91:e1:41:36:0a:97:36:
33:6f:5f:f4:80:dc:7d:28:0d:f8:57:66:e1:d1:ae:9c:5d:02:
24:1d:52:40:e3:e7:2f:53:59:24:b5:a7:13:2c:99:4e:d1:de:
2d:5b:98:f7:39:2c:09:ad:af:97:62:d0:d7:5e:f9:ac:3e:a7:
61:68:32:91:b6:ec:df:4e:ca:ad:da:62:70:dc:ba:41:1d:df:
6d:fb:d4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:19 2025 by rpki-client