Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41022a22-bcb6-30fd-8b1a-7cdfb3fc7721.roa
File: 41022a22-bcb6-30fd-8b1a-7cdfb3fc7721.roa (raw, json)
Hash identifier: 8uHhFKyhQ3tJv1wgflHmroO85AgmZW1pL+lIfURN7jo=
Subject key identifier: D2:6F:61:1A:70:96:BC:E5:23:B2:12:1F:E6:42:8C:DB:BC:A5:A3:20
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D8B9E0AA41893E71DCD794000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41022a22-bcb6-30fd-8b1a-7cdfb3fc7721.roa
Signing time: Tue 12 Apr 2022 04:00:00 +0000
ROA not before: Tue 12 Apr 2022 04:00:00 +0000
ROA not after: Tue 17 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.120.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:8b:9e:0a:a4:18:93:e7:1d:cd:79:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 12 04:00:00 2022 GMT
Not After : May 17 04:00:00 2022 GMT
Subject: CN=4f16d3b9-6fab-41f4-baa1-b06aa4928b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:b9:6c:a3:6d:ed:a4:37:54:73:8b:96:65:
21:ab:06:4a:60:e9:58:e5:db:64:3e:3e:b6:3f:61:
86:a3:7f:fa:b7:bc:97:07:cf:0c:ec:40:79:b0:39:
2b:4f:b3:88:db:ff:85:10:6a:5d:52:90:8d:ba:b7:
14:da:3e:b3:45:b8:7a:f6:b3:b1:3d:e4:cb:e8:40:
82:c3:83:73:7e:98:36:3e:1c:1f:1e:ab:4f:74:eb:
1e:96:d9:0c:40:d7:be:93:5a:52:25:35:06:31:9f:
56:1b:d3:6c:5a:9d:1c:93:0a:04:ef:85:b5:f5:6c:
d1:3f:31:87:ba:36:0f:d9:b4:e5:2c:ab:ec:e1:73:
f8:44:95:f6:04:42:b6:41:c6:08:75:b9:9c:b0:65:
fc:cb:21:d5:30:9e:0d:db:c1:34:0f:06:81:cc:35:
23:4f:5e:2d:54:22:16:7e:4b:80:12:95:6e:9a:56:
61:09:83:3c:cd:b8:b6:7b:0d:c3:3b:8b:75:38:39:
ce:b2:bc:11:1c:1b:f6:89:87:7d:98:fc:09:c1:7b:
95:36:37:69:94:9a:0a:22:47:26:1f:34:8e:a1:5d:
59:72:6c:b8:30:f1:3e:5d:3d:72:a8:b7:fa:21:93:
38:d3:8b:1c:4f:7f:29:3a:e2:9b:0f:8f:ac:fe:05:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6F:61:1A:70:96:BC:E5:23:B2:12:1F:E6:42:8C:DB:BC:A5:A3:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41022a22-bcb6-30fd-8b1a-7cdfb3fc7721.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.120.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:98:7d:42:51:0f:70:7f:04:d5:03:93:a7:0a:89:f1:93:2e:
e6:f7:a0:a8:75:0a:6d:d5:0e:71:d0:ed:0b:18:2e:fb:68:9f:
9a:45:9b:bd:23:af:e8:87:6b:1b:9a:62:12:d1:51:b3:df:2f:
cd:b8:24:e4:cb:c4:97:11:21:aa:01:1c:ca:9c:6f:7a:c2:b9:
74:24:11:e2:4a:81:f0:78:95:18:cc:f0:5f:df:92:fc:68:73:
80:66:3f:8f:cf:cb:f1:3b:da:8f:02:33:6c:90:34:05:26:fa:
8c:b4:76:dd:d1:75:a3:24:d5:8b:bc:af:65:44:60:6a:6d:6f:
61:c3:a7:54:f4:53:c4:27:72:83:4b:79:c4:a7:24:c2:f8:e1:
12:df:0b:9e:c6:ee:5c:29:d9:3a:44:09:98:50:f9:e0:9e:34:
0a:2b:04:a3:f2:28:7e:ee:48:2d:71:e7:6d:c3:3c:95:0e:1f:
b8:47:f3:96:99:22:e3:90:39:9c:48:18:82:4a:57:39:66:d5:
5a:18:fe:8d:87:9b:a3:90:60:cc:61:13:09:d6:53:9d:e0:6b:
d1:17:fa:98:03:b2:6a:0a:a2:a1:ef:3f:5d:8a:ef:71:f3:3a:
07:1e:48:79:ce:b9:7b:ea:df:34:4e:0b:12:5e:33:74:b4:17:
05:f5:79:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:43 2025 by rpki-client