Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/394add67-df7f-361a-b657-8cb589dc7070.roa
File: 394add67-df7f-361a-b657-8cb589dc7070.roa (raw, json)
Hash identifier: D7jeG7tt3P1pcDQyQUqWJ6qU820e0QkJmyVjIz2evaw=
Subject key identifier: 5D:4D:AE:5E:2D:AA:AA:AE:C5:ED:68:9C:C7:6B:45:34:41:2B:BD:E7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E1C4A33C621A0FF9782D39B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/394add67-df7f-361a-b657-8cb589dc7070.roa
Signing time: Wed 01 Jun 2022 12:00:00 +0000
ROA not before: Wed 01 Jun 2022 12:00:00 +0000
ROA not after: Thu 07 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.89.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1c:4a:33:c6:21:a0:ff:97:82:d3:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 1 12:00:00 2022 GMT
Not After : Jul 7 04:00:00 2022 GMT
Subject: CN=3e8bbce0-69ba-4074-a334-a27862f538f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:76:cf:4f:6a:a3:fd:5f:90:ad:98:90:fd:73:
59:05:d8:43:1b:b9:aa:53:44:d3:38:31:82:11:21:
df:c1:e6:f6:8a:3c:4a:3e:87:49:30:3b:b9:68:62:
e7:06:e2:9d:fb:6d:8f:6a:a1:5d:2d:74:21:ad:ec:
15:49:a4:45:65:a3:a7:1e:7f:8a:ee:0d:ff:d0:48:
45:eb:28:ad:59:63:e3:98:21:98:f9:f0:0d:a9:56:
b3:9a:21:8b:ff:2b:98:c0:36:80:33:2d:a6:75:5f:
fd:18:10:7b:83:0c:d9:57:fa:6c:c4:cc:6f:07:af:
e2:c3:d3:26:53:3c:63:ae:82:d9:64:dc:c7:48:75:
e9:e8:f3:3b:16:7f:fd:a1:b6:3e:6c:49:e5:f6:1b:
98:b7:42:1f:66:89:f8:38:99:e4:30:c7:69:9d:7e:
de:bc:07:78:e1:71:51:7e:fa:2f:cd:09:05:b6:08:
e0:e2:76:7a:bd:5b:3d:bc:86:af:84:b7:77:81:5f:
1a:ad:83:fa:06:0a:55:e1:c2:61:ec:91:e6:01:a7:
2a:5a:3a:76:da:2a:a1:f7:d5:02:cd:16:e0:41:30:
1f:97:fa:00:5a:30:05:77:a0:fd:72:49:63:6f:a3:
d2:aa:c0:62:e1:06:4b:22:54:9b:7c:e2:af:ab:90:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4D:AE:5E:2D:AA:AA:AE:C5:ED:68:9C:C7:6B:45:34:41:2B:BD:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/394add67-df7f-361a-b657-8cb589dc7070.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:78:26:57:6d:e8:28:73:4c:0e:4f:bf:88:79:91:09:8e:f8:
c9:ed:43:3d:74:93:d8:5c:38:11:85:16:fb:de:44:1a:7c:c5:
14:9d:a1:39:c6:a9:f1:0d:1c:c4:7d:13:80:df:5e:82:6c:54:
49:ef:f9:1f:7d:ed:d4:e6:d0:e6:10:f2:e7:52:b2:d1:de:d2:
37:48:46:da:5c:ec:cf:31:46:53:20:c4:f7:ca:67:8b:b8:75:
a3:82:0e:a1:f6:34:33:71:38:23:a9:38:97:4e:39:4d:8a:e0:
95:4a:69:80:2a:cc:e6:bc:42:58:8b:cf:8a:1d:04:ef:42:73:
57:4f:b9:3f:fb:65:2e:76:50:46:50:36:1d:c8:f3:45:8d:41:
79:ed:3b:ea:a0:c6:37:1f:97:8a:a7:a6:ea:53:fd:0a:06:53:
dd:98:a5:62:13:f3:59:6b:fb:b1:51:f5:2f:85:2b:10:54:9d:
11:ce:c5:bf:64:be:2c:70:c1:2a:08:9d:c6:55:ef:80:1e:ba:
e7:9e:25:84:c9:3c:a7:ea:50:38:7b:a8:33:09:4e:0f:31:02:
94:f3:4b:eb:56:11:79:71:79:51:11:47:f9:c4:82:c6:22:d1:
eb:19:e8:be:91:5a:de:ea:2a:94:80:3f:dc:ad:02:47:b2:3b:
7b:00:75:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:33 2025 by rpki-client