Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4527cd19-a944-36f5-9acc-f5c9c1f67790.roa
File: 4527cd19-a944-36f5-9acc-f5c9c1f67790.roa (raw, json)
Hash identifier: UJg2HJSB7WsKMykSqZ/T7pw3JZKc41VKgyBpR9L3kgc=
Subject key identifier: D9:DC:01:07:61:5A:8F:35:A8:49:55:66:EC:11:7C:7E:55:2E:86:15
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5622E835DADA0718B6733000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4527cd19-a944-36f5-9acc-f5c9c1f67790.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 27 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.91.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:56:22:e8:35:da:da:07:18:b6:73:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Apr 27 04:00:00 2022 GMT
Subject: CN=47d99c17-12dc-4b5f-b574-d02d1d0acefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:46:d6:12:05:13:a6:8e:ec:ee:2f:6d:3f:
93:6f:3a:12:cf:3b:41:62:25:f2:85:c4:c1:0a:15:
7f:75:f8:40:de:15:41:6b:ee:83:81:cc:e3:8a:3b:
12:c7:bb:e6:72:5f:9d:f5:4d:12:95:1c:c7:50:4f:
cb:17:42:ff:7d:4a:5b:10:07:60:b2:c6:76:0c:e8:
90:d6:01:ba:43:07:ef:9a:aa:08:fc:e3:a1:f2:9f:
96:69:35:28:85:21:ab:ad:1a:f2:d7:7c:99:fb:ae:
e6:bb:d5:9c:45:cb:31:d0:ef:22:1d:3a:d6:55:4a:
32:d7:02:f5:44:f6:6e:7f:a1:f1:c6:a7:6a:5a:0c:
1f:fa:71:9e:f9:68:df:a3:e3:c1:64:98:b3:6e:25:
f1:48:b7:98:ea:4b:ef:0c:01:f9:f8:e4:cc:f0:46:
3c:08:6c:01:4c:ea:59:5f:23:fb:aa:51:a0:f2:22:
19:02:57:56:8e:2f:c1:bd:9d:93:1b:01:76:d0:81:
6d:e1:37:d1:08:52:08:51:89:df:ad:f5:d3:30:f5:
66:c1:db:5a:66:aa:eb:00:cf:2e:fb:a3:95:07:00:
a4:44:ec:65:05:e9:84:6f:46:7b:96:44:ec:f8:c9:
3d:9b:8b:e1:8d:97:8e:ef:9b:85:b6:50:d6:80:ad:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DC:01:07:61:5A:8F:35:A8:49:55:66:EC:11:7C:7E:55:2E:86:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4527cd19-a944-36f5-9acc-f5c9c1f67790.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.91.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:0a:65:d9:1f:3f:8c:1f:2b:24:fe:67:6c:de:42:d3:61:73:
fd:15:1a:5d:61:fe:46:d2:fa:5f:af:0d:a2:1b:a4:64:94:44:
42:32:ff:7e:8a:3f:52:e5:15:c4:d4:64:0e:f7:d4:ad:4d:c9:
dc:d0:b2:0b:7e:e3:c2:ab:bf:67:67:84:4f:9d:2f:fe:88:f3:
05:19:84:ae:5c:60:f8:44:8e:d2:87:4e:bc:c3:b0:54:60:60:
14:93:df:27:85:4b:db:c5:a3:c8:35:85:1a:72:0c:4a:1f:53:
0d:bc:27:ad:00:c2:0d:96:66:f7:7b:46:87:74:17:9f:d0:ec:
6a:1e:e4:7a:19:45:a6:e6:11:f6:60:ef:84:ca:f5:34:a5:9c:
38:17:12:ce:f4:de:ec:e4:28:ee:ee:62:98:ba:b2:2c:5c:24:
c2:5d:42:a4:0a:ef:5d:11:a1:af:4c:19:44:51:d4:28:f1:b8:
6b:f6:92:02:5d:b8:e0:83:3f:bb:25:04:f4:11:b1:95:1c:63:
f2:6d:dc:12:f3:74:39:60:d9:38:c8:ff:ce:fe:0d:9e:ff:da:
2a:72:be:8e:aa:4f:c7:5b:f7:6e:cb:32:96:bb:6a:1a:bc:a7:
58:23:ff:0a:8f:cb:00:8b:60:aa:69:1c:a4:7c:7e:0b:6e:8c:
bc:5f:27:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:10 2025 by rpki-client