Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/424d7cf2-b773-3829-8ec5-2acdb9d601f0.roa
File: 424d7cf2-b773-3829-8ec5-2acdb9d601f0.roa (raw, json)
Hash identifier: WOzMyaUYD6aAFaYtKFnyOziydtPxyZ/ESIwjypO2e1I=
Subject key identifier: 60:C5:7F:F8:2C:31:C5:D6:B3:19:35:3E:FF:ED:99:C7:B4:BC:63:FB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F54089A2088B3A0A74AC37B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/424d7cf2-b773-3829-8ec5-2acdb9d601f0.roa
Signing time: Wed 21 Sep 2022 12:00:00 +0000
ROA not before: Wed 21 Sep 2022 12:00:00 +0000
ROA not after: Thu 27 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:54:08:9a:20:88:b3:a0:a7:4a:c3:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 21 12:00:00 2022 GMT
Not After : Oct 27 04:00:00 2022 GMT
Subject: CN=532dcc68-f7ec-432c-9268-a3772d30d479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:fe:3c:5f:79:ef:d2:c2:5c:e7:1e:6c:fc:
73:ce:32:48:eb:31:80:49:dd:bf:83:71:54:7a:fa:
a8:1c:cd:44:63:b7:6c:65:7b:c6:34:ef:d2:ec:54:
77:b6:89:56:af:2c:f1:58:5e:da:29:cf:f8:76:0f:
a6:21:71:24:52:fa:40:7e:a5:e9:5b:c0:85:65:01:
0d:a5:55:75:59:7a:23:0b:7e:ee:e2:6a:2c:eb:e8:
3f:fc:72:d2:77:3e:95:c1:52:b0:75:f7:96:6b:d1:
42:12:0b:ef:07:8f:67:af:d5:30:01:45:73:aa:42:
d7:1e:28:4b:9f:f6:f2:f4:ed:7f:af:5b:29:73:c6:
46:db:fd:ad:2c:ba:c0:65:e0:6c:bb:46:19:62:4f:
70:cb:df:13:f5:a2:4e:92:54:61:86:70:c1:d5:32:
fc:6c:6c:54:7f:db:2b:25:a3:02:25:79:74:6e:74:
7e:9d:98:6a:11:4f:07:4e:e2:90:83:9e:92:da:23:
ff:f4:e1:74:b5:82:f4:a6:15:64:6a:9f:a7:21:02:
ed:47:79:e8:66:70:90:9d:39:c2:d0:fe:a3:d1:06:
8b:0c:fa:34:8c:8b:18:0c:df:b6:ad:77:dc:1f:9b:
48:d5:47:2a:45:c6:17:11:73:98:5e:fe:66:1f:90:
0e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C5:7F:F8:2C:31:C5:D6:B3:19:35:3E:FF:ED:99:C7:B4:BC:63:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/424d7cf2-b773-3829-8ec5-2acdb9d601f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:99:4a:af:d3:1f:8d:1a:69:b2:26:54:84:38:97:b8:a3:f7:
5c:b3:33:88:ca:34:4e:f5:a9:62:56:7b:fc:05:ef:e6:7d:b9:
eb:fb:c8:8c:0d:c8:8a:01:38:43:66:bb:a7:2c:8a:f5:86:1f:
3b:7d:86:dc:8f:27:1a:34:87:99:22:f2:f1:b0:41:65:c3:26:
98:cd:2b:9c:22:19:dd:5c:f8:12:9b:2a:ca:8e:fa:1c:85:d3:
bc:4d:bb:32:77:9c:69:2c:cc:99:5f:64:8d:c5:40:ca:28:d1:
6f:9c:e8:94:58:3d:9a:aa:4f:f7:a8:81:bd:6d:82:2c:fa:89:
dd:d1:7b:54:fd:13:b4:e6:c8:88:13:fa:c8:63:e0:23:23:66:
bb:b1:83:e7:8e:75:17:97:af:87:e7:68:b0:34:24:e9:7f:69:
e0:7a:22:1e:f9:fe:ec:ad:db:43:9b:69:2f:d0:5a:31:d8:88:
5a:a0:95:bc:10:97:6f:cf:29:00:4c:5e:11:8a:a3:d9:78:ea:
f4:c3:6e:3a:30:57:e4:70:55:40:c9:9c:50:fd:56:9a:c7:f2:
9a:13:c0:fb:43:ff:8f:40:2b:74:91:a7:62:14:b4:98:dd:8e:
80:00:c5:6a:b7:c9:1d:f5:b7:5e:a9:c4:f9:fe:bb:8c:13:89:
43:29:4a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:13 2025 by rpki-client