Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/341a429e-a243-35de-a161-636862191a7c.roa
File: 341a429e-a243-35de-a161-636862191a7c.roa (raw, json)
Hash identifier: XpZdkeSb+YX2/S6w4RtYrMpNTQEPoSsiNRXfGwdKG/g=
Subject key identifier: 2E:22:A3:86:0A:8D:42:05:06:83:4B:CB:78:95:A0:84:4A:1E:A7:DD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E8F2131B01CD244E1C17B0680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/341a429e-a243-35de-a161-636862191a7c.roa
Signing time: Wed 13 Jul 2022 12:00:00 +0000
ROA not before: Wed 13 Jul 2022 12:00:00 +0000
ROA not after: Thu 18 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:8f:21:31:b0:1c:d2:44:e1:c1:7b:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 13 12:00:00 2022 GMT
Not After : Aug 18 04:00:00 2022 GMT
Subject: CN=68bc8bc5-1768-4c04-a1fb-2e6414891775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:f5:81:a9:bc:9a:25:c7:c3:0d:04:64:9f:
66:47:68:d1:82:43:99:00:ea:e7:2a:29:1a:4a:3e:
ae:45:9b:08:a2:43:51:fb:25:1c:ca:ac:85:ff:db:
06:f3:8c:1b:b7:ff:6e:ba:02:77:d1:e0:1f:98:5d:
be:e9:41:ab:16:7b:8a:78:ae:0a:67:32:63:dc:d1:
b1:43:d3:8d:43:0a:f0:81:1f:05:b3:e9:a7:09:c5:
c6:74:1d:a8:6a:b3:95:b4:c9:b2:33:9e:49:3f:f7:
d6:a4:79:a7:16:0d:40:50:8e:53:c5:5b:d6:77:88:
44:49:99:5c:ab:8e:dd:60:9d:94:2d:16:86:03:d5:
38:73:1f:87:71:7d:e3:97:04:7b:2c:ee:81:0e:0c:
5c:42:ec:6f:41:ce:da:7b:72:b7:24:44:ce:db:ca:
fc:7c:9e:81:b0:5e:08:91:68:8f:fc:8b:09:ac:d1:
17:df:7b:18:66:10:38:22:6c:cb:7e:f2:61:48:e0:
fb:1a:a0:2f:f4:4b:f4:56:99:56:33:2c:8f:88:62:
2f:8b:b4:15:cc:66:60:67:60:93:e2:67:7e:d9:ce:
cc:55:5f:a2:da:88:2f:20:8e:f3:9d:54:89:97:67:
de:56:d5:46:22:62:45:23:ed:ca:c9:ad:ab:10:ba:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:22:A3:86:0A:8D:42:05:06:83:4B:CB:78:95:A0:84:4A:1E:A7:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/341a429e-a243-35de-a161-636862191a7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.22.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:2d:cd:b8:4b:87:69:fb:ce:63:96:41:3e:13:66:a8:aa:a6:
18:57:a0:fb:2f:14:6e:5d:0e:bc:ee:37:31:68:1c:18:15:83:
27:5a:02:9c:59:7c:74:86:75:87:55:ae:f9:86:27:d7:3a:c7:
7e:1f:ca:fa:34:a4:c0:32:82:e7:b7:f8:72:fd:12:12:21:74:
87:a8:af:56:22:23:fa:1d:ea:0d:d9:a5:e9:7b:39:f2:23:69:
37:95:4b:ef:8f:20:f5:b9:44:3d:aa:da:b6:60:50:2c:3f:75:
ab:c9:1d:d8:e2:36:86:61:31:34:4d:e5:e6:7c:b1:9c:3a:01:
a0:0d:09:fc:69:10:d6:fb:09:45:37:16:1b:cb:e9:c1:bb:74:
d5:91:ec:f5:1e:d0:28:d8:35:c2:bf:93:d8:13:a9:b2:0a:50:
28:04:f2:7e:b2:02:25:07:f1:90:0a:86:7d:08:5e:15:f6:28:
a1:a2:1f:e8:7f:af:d0:76:9f:bd:6f:6a:d6:39:4a:3f:d6:8a:
ca:76:b5:ad:34:a2:89:b3:1a:25:db:52:c0:00:4f:e0:65:77:
e4:6f:5f:51:ce:93:15:99:73:94:d0:44:ce:33:87:b8:57:b7:
04:44:72:fe:1f:4f:d8:db:78:0e:1f:ae:98:66:0b:dc:d1:79:
a3:90:94:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:10 2025 by rpki-client