Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c5f38b9-5ee5-3730-a676-5a091b74a506.roa
File: 3c5f38b9-5ee5-3730-a676-5a091b74a506.roa (raw, json)
Hash identifier: oiEeY2Ye3VB4rRyndLnTya2BrtHIXtXUCzYvx+cwWtM=
Subject key identifier: 09:7C:85:01:3F:0E:21:0D:F2:94:9B:97:D5:6B:D9:AE:B8:F1:19:B3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D588C74E107CD94EC16D033B0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c5f38b9-5ee5-3730-a676-5a091b74a506.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Thu 28 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.71.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:58:8c:74:e1:07:cd:94:ec:16:d0:33:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Apr 28 04:00:00 2022 GMT
Subject: CN=7e8d6b17-f306-4da0-aefb-1bba2b1f7bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:91:84:79:dc:4b:3c:d9:1f:44:98:1d:11:
dd:43:f3:98:7e:fd:d5:71:8d:d5:aa:90:b2:98:55:
c7:74:9c:a6:8c:f7:de:1c:6a:01:a7:11:22:53:9f:
bf:18:c1:2c:22:05:92:02:bb:e0:ab:6f:2d:ab:6b:
bd:04:f8:a9:36:4f:27:6d:b0:d0:80:79:d1:c5:a7:
d0:55:55:ee:34:e2:aa:20:c2:b0:96:0e:3b:f7:e9:
ac:57:45:7d:48:3c:da:a8:06:35:cd:c8:bc:59:e1:
5a:01:b2:88:31:0e:1a:0f:b2:27:81:e4:c3:31:6c:
d9:f0:0a:25:51:e6:c1:d5:07:f3:47:aa:09:50:4b:
54:a3:ad:77:69:07:fe:1f:6e:fc:5d:9f:61:8d:14:
cb:93:41:d2:29:f4:48:05:4a:03:f1:7b:6c:7d:3c:
90:06:fd:c2:85:fb:2c:e5:f8:c0:f7:72:9a:40:be:
f4:95:f4:07:ad:f8:3a:29:6e:8d:5d:f0:e2:ba:59:
15:95:47:84:6f:08:59:e9:9e:49:34:f3:68:22:b1:
7d:9b:23:d1:77:c7:8a:3a:b8:0d:fb:71:6f:f3:26:
47:60:54:ac:9f:20:02:c6:ec:82:99:70:94:b1:41:
4e:9e:10:b7:cb:93:92:28:43:9f:e2:00:3c:5f:93:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7C:85:01:3F:0E:21:0D:F2:94:9B:97:D5:6B:D9:AE:B8:F1:19:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c5f38b9-5ee5-3730-a676-5a091b74a506.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:b2:64:10:b8:f4:b9:2e:77:6d:35:21:e2:9b:f7:f5:93:e8:
f6:3e:26:e6:8a:ba:2b:f5:bc:57:26:d3:0e:61:31:12:e4:89:
a8:30:9d:79:bf:7e:e3:0c:0a:91:5b:ab:47:d1:4f:6f:41:07:
b2:9e:36:da:56:e3:90:ec:34:91:e5:09:e0:56:9b:55:ce:7c:
98:34:04:f4:9f:1b:82:9f:8a:3c:c8:c7:ec:fb:b0:16:71:cb:
98:bb:bb:bc:d1:df:5f:fb:50:31:dd:8a:c3:a5:50:8c:9e:66:
f9:a4:2a:5f:2d:6d:0b:5f:1d:ae:71:59:e2:46:7b:16:d5:be:
06:05:2f:8e:83:ba:d7:1f:0f:1b:b8:a4:c4:95:8f:25:c4:aa:
bd:10:2f:69:3d:15:53:8f:ca:3b:c4:b0:8c:36:33:66:ce:fb:
d3:8d:31:2d:68:8e:6e:47:2a:53:2e:b8:41:42:d2:6b:99:d7:
ff:53:2d:f1:d2:8a:79:cd:d0:1b:de:e7:ba:c4:33:73:24:24:
fd:82:96:55:f4:c1:bc:94:48:ff:44:44:3c:f0:6f:5f:5b:01:
be:d2:d6:4c:6d:7b:ea:ad:08:f4:cb:73:8c:14:80:40:2a:e2:
ec:c4:4a:92:d5:12:af:99:b9:77:81:23:f5:ab:e8:d0:fb:50:
46:3d:96:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:20 2025 by rpki-client