Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/511e3a80-c797-3cec-bbe7-e72ee7b401c8.roa
File: 511e3a80-c797-3cec-bbe7-e72ee7b401c8.roa (raw, json)
Hash identifier: 4H9PrYsCbyOw2CH69UoXprlt5sbOYPWzWsheqHVBkOk=
Subject key identifier: 7A:5D:C3:78:89:15:CD:FA:62:20:3B:A9:9C:43:ED:1D:FE:27:EF:AD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2F0D4B08B1A7F912B8737180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/511e3a80-c797-3cec-bbe7-e72ee7b401c8.roa
Signing time: Wed 09 Mar 2022 05:00:00 +0000
ROA not before: Wed 09 Mar 2022 05:00:00 +0000
ROA not after: Wed 13 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:0d:4b:08:b1:a7:f9:12:b8:73:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 9 05:00:00 2022 GMT
Not After : Apr 13 04:00:00 2022 GMT
Subject: CN=68e4c592-48c5-4584-a882-51ebee96de90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:b3:16:00:75:43:0f:8d:b4:e1:64:42:c9:
21:32:42:14:32:b5:bd:e9:5f:ea:01:ac:b1:af:47:
b3:de:c1:5f:20:41:48:1a:75:5b:b8:64:1f:3d:37:
3c:98:2c:1f:af:59:b2:23:57:95:9a:9d:8d:24:4f:
7e:4f:d5:8c:d5:55:95:a2:ac:9e:d3:f5:e0:a2:53:
a2:0e:df:8e:6c:f7:8e:75:a7:ec:73:dd:42:40:de:
9f:52:a2:ae:0c:2d:58:f1:29:d7:06:46:f3:21:26:
e7:06:a1:83:4b:3f:04:20:e3:ba:b1:51:42:1d:26:
7e:34:a3:80:c5:79:a8:47:5c:a5:d8:7d:14:6b:d6:
b4:24:8d:d3:4b:8f:5c:54:00:e2:45:69:9c:f4:99:
6b:ea:ed:ca:57:de:37:3d:cf:72:6d:e8:c5:d3:0d:
6f:35:21:9e:e4:62:02:ac:63:21:35:a4:3f:e9:dd:
68:e7:98:66:a7:fc:71:4b:0a:6e:1c:0f:a1:01:0d:
a0:32:2e:13:ae:e0:f8:db:48:b8:64:9d:58:49:9c:
0b:3d:88:4c:3d:6b:df:5f:5f:84:f1:e4:f9:b5:1d:
47:08:c7:ff:e4:2a:c8:6a:24:56:60:3c:92:df:c4:
a7:04:05:2a:38:a0:26:9a:55:80:89:5c:a8:8a:78:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5D:C3:78:89:15:CD:FA:62:20:3B:A9:9C:43:ED:1D:FE:27:EF:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/511e3a80-c797-3cec-bbe7-e72ee7b401c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:c8:ea:ca:4f:a8:7f:15:b2:b4:55:9e:82:4a:90:9d:60:a6:
fb:e7:28:e6:cc:f7:5f:fd:8b:d2:3e:67:0e:f8:32:f3:cf:f9:
8b:64:d8:f0:79:da:4d:ff:b1:0a:24:45:56:37:f4:a0:0e:f4:
91:e1:bb:43:37:5d:9c:2e:8a:0f:fc:6f:16:22:fc:a6:42:67:
be:b6:05:87:16:be:e5:c2:c1:61:f5:19:f2:8f:cf:22:77:51:
6e:ae:d2:b2:49:9f:69:05:42:b1:e0:55:21:86:48:fa:89:27:
12:c4:69:dc:f7:8e:98:af:ea:60:a4:a6:cb:8f:1e:e8:83:c2:
ff:76:04:6e:e2:9f:38:83:90:a5:eb:24:a4:1a:ec:3e:b3:72:
bd:43:a4:7e:01:4a:d6:1e:d7:0c:41:75:dc:29:27:54:5a:2e:
93:b9:12:7a:40:85:26:eb:09:63:ca:4e:06:9f:84:f5:7d:d9:
85:8f:d4:ea:c2:23:5e:db:b1:ea:51:53:a2:14:4d:33:3c:82:
21:76:25:d6:fe:54:52:34:b0:65:ec:a8:22:0e:69:4d:c3:37:
8a:80:d1:41:74:f3:63:47:e3:c1:9c:82:2a:b9:62:2f:9d:1e:
47:64:f4:b0:40:8a:25:84:2d:81:66:d9:e6:82:31:ba:a7:ee:
5f:de:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:22 2025 by rpki-client