Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5135326a-b0d1-3202-9ac2-422a87079c6e.roa
File: 5135326a-b0d1-3202-9ac2-422a87079c6e.roa (raw, json)
Hash identifier: d6pbX5XaBbC3H8zPjpLVHR2l6WvFkGM5Ahmoa1bQlGM=
Subject key identifier: 6D:D6:5F:2B:B6:DA:9F:71:EC:98:80:86:00:98:1C:1F:B8:8F:AD:86
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3176EC359BC2A9E6D95A1500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5135326a-b0d1-3202-9ac2-422a87079c6e.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:31:76:ec:35:9b:c2:a9:e6:d9:5a:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=9a36d5fd-b231-4dde-a1bd-634b60b2ab10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ac:6b:26:7f:bf:4e:ad:23:3d:eb:6c:8c:05:
b4:4b:b2:a8:65:f4:4f:9c:40:9b:e4:42:96:6e:91:
a6:de:13:29:e7:e7:96:ed:57:55:54:3e:31:d5:46:
d8:d2:dc:ea:7d:fb:5a:59:c9:82:dc:7e:a4:a7:88:
f2:69:43:d6:8b:1d:a3:99:06:6c:23:3c:25:6e:29:
42:c9:22:6a:7b:75:37:59:1d:c3:de:b9:32:d8:3a:
98:d5:1c:d5:7e:1b:18:68:5c:e1:68:59:ce:05:66:
e8:e3:a1:2c:0c:7d:9d:7c:5d:ac:11:5c:1f:7b:df:
44:4c:ea:dc:14:2e:78:fc:03:c0:2d:5f:22:ee:12:
43:50:46:dd:65:2a:2b:3b:ae:fa:3d:c3:4e:79:7a:
2a:d1:0c:78:92:ba:ee:5d:36:fe:10:27:cb:b7:32:
94:e7:dc:9a:a6:e5:c5:2f:2e:63:82:fd:92:92:d4:
90:1d:7f:b8:17:27:87:49:87:42:a1:8f:0f:17:ba:
56:32:99:cb:70:99:17:74:00:1b:ec:5c:71:ba:96:
52:f4:4c:13:9d:7a:d2:bd:7a:16:2f:c5:be:84:39:
c6:d7:ad:f8:19:f6:6e:cf:11:60:86:f4:1a:f9:a7:
95:4f:69:cb:26:29:94:7e:b4:41:ea:34:fe:44:17:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D6:5F:2B:B6:DA:9F:71:EC:98:80:86:00:98:1C:1F:B8:8F:AD:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5135326a-b0d1-3202-9ac2-422a87079c6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:35:85:e3:d1:c1:fa:9f:a5:bb:3c:ee:fc:0a:41:98:e6:71:
44:c2:89:7e:34:47:0f:b7:43:bf:3a:43:b2:e0:2b:8b:f9:d9:
a1:1f:1c:fc:cc:17:07:ad:83:96:96:86:05:f0:fc:d2:dc:b8:
61:9f:67:60:04:d1:55:d7:a6:ff:d8:66:b2:92:91:ee:5a:6b:
9a:71:7d:2a:9d:54:cc:b0:43:e6:71:71:da:ea:b7:d2:51:6b:
66:f2:e4:52:59:c4:28:b5:cb:a8:e7:ec:81:02:bc:d9:54:23:
20:d6:7d:9a:22:8d:de:70:fb:dd:ad:1e:83:58:80:12:1e:90:
76:61:fb:a7:67:b8:07:e5:60:7b:ff:68:c6:d5:b3:ed:d3:e3:
ad:ad:9a:30:22:c1:a7:d6:a7:51:b9:a2:40:8c:b5:55:ff:18:
f1:0c:b3:ec:fd:71:70:2b:47:e5:e3:62:bf:17:90:15:a9:1d:
8c:67:63:e5:b7:2f:42:c7:66:52:04:9d:f7:1f:78:2d:23:bd:
34:c5:b8:0d:d0:74:d6:84:46:a4:e1:68:b9:96:3e:9d:06:e2:
7e:22:00:3b:0d:f3:94:e0:52:b8:f0:bc:fb:29:f9:9d:34:ba:
af:23:7d:3a:15:2d:c0:64:d7:cc:9a:7b:c6:5b:7a:59:c9:dd:
ba:35:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:19 2025 by rpki-client