Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fbfc1a8-7fa5-3981-a686-931ec091c3b1.roa
File: 2fbfc1a8-7fa5-3981-a686-931ec091c3b1.roa (raw, json)
Hash identifier: UqeH5lyPr3GcR2ygUYliARGZFYmvw+tu2zqp6AW4KQk=
Subject key identifier: EC:9B:B2:3F:C7:AD:17:85:88:C9:20:34:8D:AF:15:E3:2E:05:AC:49
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5674B7083A4CF56E88ECF288
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fbfc1a8-7fa5-3981-a686-931ec091c3b1.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Thu 28 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.18.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:56:74:b7:08:3a:4c:f5:6e:88:ec:f2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Apr 28 04:00:00 2022 GMT
Subject: CN=74268df2-4ff0-45ae-a772-87b062c2a6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dd:a9:ee:38:e7:62:25:94:d2:c2:bc:a4:c6:
98:a4:8e:65:a2:6d:a3:4f:6b:fb:e8:97:c4:50:a0:
14:c9:38:ad:11:2b:9c:17:bd:aa:ad:32:d7:92:00:
af:9e:25:2c:29:de:83:ca:fb:27:aa:0b:63:d4:4b:
e5:c3:73:d8:e0:51:bc:2d:0b:b6:0d:7f:3d:3f:eb:
6b:9e:19:57:64:46:bd:4a:3b:3d:2d:e7:c8:28:a3:
5e:a8:1d:8e:41:23:40:5e:a2:b8:93:17:e4:f4:00:
5a:da:e4:a9:2e:df:44:6a:00:4d:ba:3d:b1:9a:2e:
0d:3e:f5:b2:57:07:9b:29:ee:2c:ca:aa:ea:c3:84:
bf:91:35:ae:09:d0:30:89:51:44:0a:81:24:64:f6:
7c:73:bf:0b:7e:af:ce:bc:07:71:2d:4a:a7:5c:ac:
3e:b4:bc:d2:3f:85:56:cd:84:8e:4a:4b:5d:f3:ad:
51:70:b9:44:4e:39:7a:66:60:63:cd:ed:ea:f3:b5:
6c:c1:77:8a:58:94:99:93:bc:60:f8:ab:95:61:bb:
7f:ff:29:3d:28:f0:f2:63:81:cf:9b:3a:0c:fc:86:
f7:81:cd:c9:56:72:eb:a9:f8:b6:45:f9:35:ef:0b:
da:f9:96:84:ac:f7:29:33:b1:f7:dc:e2:1c:8c:0f:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9B:B2:3F:C7:AD:17:85:88:C9:20:34:8D:AF:15:E3:2E:05:AC:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fbfc1a8-7fa5-3981-a686-931ec091c3b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.18.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:4c:59:d5:cf:29:a4:5e:f7:8a:aa:ee:29:01:3c:d9:54:25:
be:c9:e4:a2:a2:7d:b2:b3:b0:47:4b:7a:5e:99:ff:9e:8b:ee:
08:15:35:73:7d:57:c4:be:4f:f8:9d:ea:4d:c3:30:64:94:ac:
af:91:c2:28:33:4d:15:d0:0f:22:39:58:82:1e:89:23:90:8a:
b7:c8:fd:0d:c2:49:4c:08:ab:57:54:40:06:59:da:fe:60:ea:
e8:48:1f:41:6f:79:7e:33:fe:a5:01:0f:e1:66:0f:e7:5c:ba:
9c:e0:b3:44:f6:ca:97:7a:54:81:91:7b:0c:ba:a5:1e:63:4c:
f5:c0:f0:23:e7:fe:9c:5e:01:ae:67:85:a7:09:74:5f:b2:68:
4f:5d:b6:5a:15:93:4f:6f:82:b4:4d:6b:b4:14:70:95:34:9d:
57:f1:55:49:e2:7b:d3:1f:16:28:5a:9d:50:28:0d:52:77:73:
a1:7f:59:b4:87:28:a1:33:67:8f:52:2e:14:9b:b6:68:a7:59:
a5:82:3c:df:00:a2:7a:0a:fe:a2:62:bf:1c:04:9b:11:84:0a:
d7:c2:74:f7:3c:01:f1:da:06:15:21:e1:af:8c:b4:8c:8e:c4:
6d:36:93:cb:44:6b:ef:7f:8b:ae:b7:e4:5e:46:c4:d4:ca:93:
61:0d:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:37 2025 by rpki-client