Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b40fec7-6965-3a2d-a218-e5a9eb547022.roa
File: 3b40fec7-6965-3a2d-a218-e5a9eb547022.roa (raw, json)
Hash identifier: mbSm89H/krA0OmgzxUvWRAoixxKWZcr4GgY+2PS5GUI=
Subject key identifier: D0:E0:5F:39:34:86:8E:5D:96:C9:69:27:C7:05:7D:C0:49:C0:41:CD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DCC94785D94C384C64E821300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b40fec7-6965-3a2d-a218-e5a9eb547022.roa
Signing time: Wed 04 May 2022 12:00:00 +0000
ROA not before: Wed 04 May 2022 12:00:00 +0000
ROA not after: Thu 09 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.122.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cc:94:78:5d:94:c3:84:c6:4e:82:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 4 12:00:00 2022 GMT
Not After : Jun 9 04:00:00 2022 GMT
Subject: CN=4bf2a01b-9135-471a-bfcc-a9c907e229d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:fd:85:e1:d2:f9:5e:a1:ad:d1:1c:fc:37:
38:46:bc:04:77:be:df:5c:5a:9e:70:43:6f:71:02:
51:e2:da:16:90:23:c2:fd:d3:a0:89:9d:dc:19:62:
21:22:e0:11:fc:fd:ae:ac:8d:af:91:a1:c3:f3:c7:
08:31:ec:3c:47:14:3a:a3:16:a7:71:be:56:10:fb:
00:a1:cf:fc:5f:f8:71:28:6a:97:b1:dd:cb:21:52:
f9:46:9d:2e:e8:ee:95:c9:3d:f9:dc:a2:e0:e6:51:
11:e7:53:c3:bf:89:fc:97:3c:cf:0a:ea:14:89:65:
c1:14:4b:9f:09:df:54:a2:61:ff:cc:b3:6a:92:95:
ec:87:69:cd:9b:d7:76:56:5e:58:52:e9:d2:92:a7:
d4:a1:78:cb:1d:2a:c3:4d:8d:d7:9d:9b:09:2e:09:
c8:cb:09:81:48:cb:82:76:66:78:50:69:3f:18:1f:
15:8e:5d:05:b1:34:23:3f:ee:d0:4c:80:99:f9:12:
5d:ef:74:5b:1c:ef:c2:36:ca:18:19:da:1d:d4:5b:
36:6a:86:8c:57:f9:b3:6a:c4:61:d6:af:dd:6c:40:
39:33:b5:d1:10:8e:3b:ef:dc:59:0f:f4:d1:4b:f7:
30:97:38:2f:8a:00:e4:c5:e7:ce:17:49:45:80:5c:
ac:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E0:5F:39:34:86:8E:5D:96:C9:69:27:C7:05:7D:C0:49:C0:41:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b40fec7-6965-3a2d-a218-e5a9eb547022.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.122.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:81:ce:c4:44:10:17:11:df:38:fb:c1:63:8b:84:2a:1d:45:
58:de:05:38:42:4c:e7:53:c8:3a:59:80:6a:5e:e7:ba:c0:c5:
31:2a:95:da:80:c9:ed:4e:57:1b:ac:a3:7d:8e:6c:6e:93:fc:
cb:e8:e6:e5:cf:f6:eb:95:e3:2d:a5:2c:7a:95:21:2e:4d:fc:
b2:1d:3d:d2:46:e4:d1:de:2e:7a:71:35:d4:eb:57:51:84:b5:
14:bb:c8:0c:db:9d:c7:3c:c4:8f:62:eb:87:44:89:2a:a0:45:
e6:cc:95:3e:36:35:8d:5d:ce:a9:3c:88:44:88:ab:aa:d9:89:
74:4d:3a:cf:7b:e7:e7:59:80:12:95:c5:2a:a7:99:13:a1:a9:
60:f0:80:3b:ff:29:e6:66:39:79:83:03:02:ec:29:0e:fe:24:
e0:3f:12:ea:d6:9d:57:67:19:f6:b6:5b:a5:23:7d:f1:09:6b:
d8:aa:be:57:e1:16:f6:9e:47:f4:5a:5b:56:55:0f:94:fa:eb:
8b:d5:11:ed:52:de:be:f9:0f:23:72:3a:a1:88:70:9d:68:14:
e6:f4:98:24:b8:43:e6:0d:3c:6e:e6:7e:40:17:da:10:62:d4:
08:15:44:20:18:0c:61:52:76:d6:d7:31:9c:b9:dd:e5:a6:b5:
d8:90:06:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:34 2025 by rpki-client