Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/347a30b2-1da6-3d71-83b7-b7dee36de3b8.roa
File: 347a30b2-1da6-3d71-83b7-b7dee36de3b8.roa (raw, json)
Hash identifier: AaZr7VG+Orvy9LSG9StM6ZLpImVh8ItHHqdnUIxkOKo=
Subject key identifier: F9:4D:12:D7:9A:83:49:D8:A1:6F:9D:C6:1F:91:51:7F:11:D3:99:3E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405C9BD0FF8A72D6DC0B0F36C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/347a30b2-1da6-3d71-83b7-b7dee36de3b8.roa
Signing time: Sun 25 Dec 2022 12:00:00 +0000
ROA not before: Sun 25 Dec 2022 12:00:00 +0000
ROA not after: Mon 30 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.52.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5c:9b:d0:ff:8a:72:d6:dc:0b:0f:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 25 12:00:00 2022 GMT
Not After : Jan 30 05:00:00 2023 GMT
Subject: CN=85c51ad0-14cc-4778-99d5-a58e308361d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:b4:88:d8:f1:9f:48:04:dd:b1:98:69:8f:
a1:d1:cc:36:93:89:22:9a:51:92:a9:27:c0:48:99:
b7:c6:9d:87:49:97:52:1b:0c:b4:a4:6a:cb:83:da:
6c:3f:6e:93:18:3d:67:ab:1a:4c:e0:8a:3c:4e:f3:
42:8c:01:f9:c6:90:17:6a:dc:34:1a:d9:37:92:e3:
09:26:bd:a3:b2:ca:e6:b1:3b:d9:f2:a0:5b:02:ab:
24:1c:f6:f8:bf:1f:76:51:05:73:be:c7:61:bf:00:
61:a1:88:35:a2:b2:79:a3:41:d5:37:87:47:bd:e5:
01:e6:7c:69:9f:79:fb:b7:30:0a:78:e7:e9:88:bd:
e0:9e:f3:74:a0:f5:e9:bc:7f:d5:5f:c1:4f:23:d8:
bd:a0:36:a2:5c:00:74:60:b7:06:a6:4c:29:10:55:
4e:17:b5:43:08:23:eb:ab:3f:6d:8c:19:a9:1e:8a:
43:ae:f5:24:63:ed:7d:9e:8c:93:70:6a:c7:3f:f3:
88:f4:de:2c:44:40:83:51:af:2d:38:64:ca:fc:b5:
a0:e7:9f:44:00:70:86:47:11:dc:55:50:ef:9a:1c:
3b:0d:37:12:97:c6:8b:d9:d5:6f:23:2e:8f:e4:34:
87:0e:de:a9:7a:ea:1e:dd:d5:55:1d:78:8b:51:46:
07:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4D:12:D7:9A:83:49:D8:A1:6F:9D:C6:1F:91:51:7F:11:D3:99:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/347a30b2-1da6-3d71-83b7-b7dee36de3b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.52.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:bb:70:af:b7:97:35:0a:bd:bb:af:9c:1e:7e:67:49:78:c5:
5d:2c:f2:6b:c5:fe:ca:f7:25:bb:19:7c:e9:9e:f2:fa:d0:49:
05:5b:9e:d5:61:9c:2a:ca:91:94:ab:44:be:e6:27:69:90:c1:
78:68:f5:b2:25:69:bf:d2:21:e7:37:d3:c7:02:5c:06:c0:b8:
0a:4e:ed:b3:d7:34:a6:2e:45:f5:01:02:cf:cf:70:ee:dc:d2:
07:63:e7:e9:1d:75:de:4e:85:20:7e:50:52:db:7b:16:2c:5f:
b2:7d:35:9b:0f:76:64:5f:01:87:89:af:dc:91:51:5f:16:80:
13:fa:35:9e:3e:a9:61:9f:3e:c7:b3:e2:a4:66:f5:72:63:b7:
b5:23:b8:96:b9:b3:6d:7e:86:97:92:6d:a6:e3:01:4e:34:c6:
67:4b:36:92:f3:38:45:9d:e3:ec:a9:22:8e:9a:54:36:a4:1b:
75:b8:58:c0:be:83:2b:f4:00:23:15:8f:0e:29:5f:f4:d4:8c:
8a:39:28:9b:0b:bf:25:1d:e9:f5:54:b1:92:c0:64:05:50:d1:
2d:b4:32:95:ee:40:89:6c:97:14:30:3d:cd:eb:6e:66:1b:2b:
ab:4d:f1:03:97:bb:ae:99:08:b4:23:69:62:1f:8c:52:63:cf:
93:e6:e8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:10:31 2025 by rpki-client