Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fcba9dc-3483-3be1-955b-4cce95d4812a.roa
File: 3fcba9dc-3483-3be1-955b-4cce95d4812a.roa (raw, json)
Hash identifier: VfUP600Rtyo8L6dEKJ253yA3LWypTLIif+f/8MpnK+k=
Subject key identifier: 57:F7:3D:4F:DB:64:A3:86:1E:D8:C6:E0:22:C6:37:12:FB:1C:89:19
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DA4640EDDAACAAC31E4835380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fcba9dc-3483-3be1-955b-4cce95d4812a.roa
Signing time: Wed 20 Apr 2022 12:00:00 +0000
ROA not before: Wed 20 Apr 2022 12:00:00 +0000
ROA not after: Thu 26 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a4:64:0e:dd:aa:ca:ac:31:e4:83:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 20 12:00:00 2022 GMT
Not After : May 26 04:00:00 2022 GMT
Subject: CN=cd506252-195a-479e-9d59-bc79b9bd2fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:a6:43:8c:3c:b4:1e:ad:19:c6:47:d3:55:
86:05:ed:2f:60:04:77:f8:0e:34:ba:f2:46:1a:74:
26:59:4a:31:5c:46:f7:e1:18:59:50:f1:e4:2b:ba:
75:ba:72:e9:cf:ee:6f:89:2f:cb:ab:a5:2c:c1:55:
a6:61:68:29:7c:df:57:66:9c:22:b6:2a:77:ea:91:
79:95:1c:94:65:ec:6a:31:5c:5b:3b:ec:fd:bc:18:
c5:75:b2:98:cd:cd:22:8b:da:36:d1:c7:ab:4a:6b:
72:aa:bc:8c:01:14:6e:f7:de:5e:16:14:36:f0:fa:
ab:08:1b:86:26:7f:8c:e5:d0:8d:f6:04:20:43:49:
a2:b1:ba:5d:90:e1:ec:20:88:90:21:ea:db:ae:a0:
f0:ac:4b:35:f0:d8:c6:53:38:cb:af:71:96:90:19:
ab:77:2f:05:7d:d4:d5:28:79:c3:42:95:3a:45:c8:
16:4b:7e:43:43:91:cf:c6:88:aa:53:4b:fe:92:a5:
78:af:b3:47:c3:a3:82:cd:49:d3:8d:b9:8e:2e:ac:
58:95:33:d6:0a:26:91:a0:0b:90:2e:5b:29:96:15:
f7:5a:d9:de:8b:d5:40:b3:16:69:a1:2d:c7:0b:94:
a7:be:93:fa:71:43:1f:b8:1d:af:ec:15:3a:f6:02:
31:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F7:3D:4F:DB:64:A3:86:1E:D8:C6:E0:22:C6:37:12:FB:1C:89:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fcba9dc-3483-3be1-955b-4cce95d4812a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:5b:b9:78:5b:a0:3b:09:06:c7:cd:4c:45:47:52:d9:41:78:
d1:ec:c0:59:b8:2e:ba:53:f9:ad:da:17:d3:85:8a:ae:78:39:
72:bb:44:1a:d9:91:77:4e:24:2e:11:8e:05:0f:35:56:83:5a:
d5:18:d4:5c:ac:80:89:22:0a:f0:8d:ef:70:3d:bd:85:cf:20:
b1:68:0e:bb:cf:0a:b6:e7:97:4e:eb:63:ad:7c:50:9a:5d:9a:
ee:80:c3:b2:a5:b1:7d:2f:7d:a3:42:b2:96:d6:60:1c:f4:02:
45:31:95:6b:08:91:c1:8c:0c:2e:2f:9b:9a:5e:20:a3:97:c9:
90:96:82:c4:72:e6:38:3b:a8:f2:3d:7b:ea:b6:c4:d0:63:aa:
db:56:85:ef:f4:a4:a3:9d:87:ed:52:36:d1:e4:83:9a:70:c2:
1d:0f:ff:bc:01:a4:d4:4b:76:83:a2:99:91:25:90:1a:e4:42:
3e:b3:3d:92:78:50:52:93:2b:2c:77:83:3e:4a:c1:db:3a:15:
bb:d3:74:c9:62:ab:08:26:06:db:96:8a:0c:f1:ca:ea:c3:5a:
e3:30:bb:23:b2:41:ec:26:2a:42:2c:91:45:49:26:de:00:e2:
57:f4:95:f0:de:fc:92:87:02:b8:25:3b:3c:6a:b2:f9:2b:9c:
9d:74:7d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:12 2025 by rpki-client