Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/51d3ed30-e5dd-3041-9967-3832d384cdee.roa
File: 51d3ed30-e5dd-3041-9967-3832d384cdee.roa (raw, json)
Hash identifier: tnCZkCsUMMQGgCiCDDeAHPGgXi5WkGGdcrwdtcOGWTg=
Subject key identifier: 3D:3B:0D:C9:F8:85:97:97:20:8B:04:25:0E:F1:D0:60:42:D9:07:87
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D7D4757584865BCCB5928AF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/51d3ed30-e5dd-3041-9967-3832d384cdee.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Thu 12 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:47:57:58:48:65:bc:cb:59:28:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : May 12 04:00:00 2022 GMT
Subject: CN=fcab9346-e0a6-4960-ab01-7d5e0126dda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b8:fd:d1:07:b4:19:d0:66:b8:14:9d:49:17:
c7:8b:fb:20:ac:3d:75:74:3d:65:01:4f:cd:6a:6c:
b4:15:d2:ab:b6:1f:2f:a9:ef:82:e2:7c:1d:d3:ed:
98:fe:00:c0:21:51:6c:7a:59:e9:3d:e0:9d:30:7b:
f9:bc:a5:19:ae:f6:3d:f6:2f:5a:14:d8:c0:7b:dd:
67:b3:c1:48:de:da:a3:57:f7:90:b5:9d:25:25:40:
1d:7e:4b:d4:af:f2:a3:71:df:f4:03:9c:62:ad:cc:
b0:5e:f7:92:b6:3b:05:ec:b1:c9:1d:5b:0d:98:d7:
cd:bd:b6:98:c4:d9:39:30:36:f2:91:65:e8:19:82:
d9:e3:5d:e4:96:20:d9:f6:0e:4a:ee:42:57:5e:04:
00:ed:8d:69:98:34:6b:c5:1c:ef:9a:a8:ab:ad:cd:
d1:d5:2f:46:36:ea:8c:07:8d:0d:72:ca:0c:7e:2e:
21:79:8a:1e:7e:da:64:20:3e:08:23:be:46:ac:00:
a3:d3:e5:c3:9e:99:b1:0d:bf:92:6b:8b:75:67:d8:
9b:96:19:30:36:29:b9:86:8f:90:b5:08:ef:8b:42:
b3:42:f1:05:21:92:0b:23:04:8d:e4:51:f8:51:8a:
e2:99:21:4f:d1:2e:15:ba:04:9d:94:ca:01:83:17:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3B:0D:C9:F8:85:97:97:20:8B:04:25:0E:F1:D0:60:42:D9:07:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/51d3ed30-e5dd-3041-9967-3832d384cdee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:66:a6:b9:15:b5:13:26:25:d5:f2:a9:68:33:b3:5e:0c:72:
32:9b:b6:e5:e2:ac:38:a7:4a:48:2e:69:04:55:15:89:8d:c0:
e6:6b:06:52:a7:be:f4:f1:b0:d0:ae:bf:8b:1a:10:e7:61:57:
aa:70:e9:2b:25:bc:23:97:b4:02:c5:90:df:cd:05:5b:f9:bf:
f2:37:88:cf:bd:9f:4e:2c:08:f2:ed:72:8a:ee:1f:8d:6f:e8:
55:ac:45:9a:d5:ce:b2:75:89:8d:82:82:a9:19:2d:c1:10:8f:
1e:62:d3:91:29:b5:46:3a:60:95:76:fe:9f:5e:e4:90:75:7c:
8f:0e:75:27:58:1c:e5:24:75:7b:fe:69:ee:38:0e:86:99:f6:
3a:cc:0c:c3:92:cf:1a:ea:bf:d6:3c:e0:e0:ab:33:cc:6e:05:
8a:d4:af:72:38:2e:b4:2e:c3:0a:1c:fd:6f:50:60:52:ae:56:
2f:43:f4:58:cc:3c:51:ee:e5:dc:cd:d8:f2:46:f0:90:ba:fb:
b3:e7:34:69:c0:cc:5e:ef:f1:6e:4c:9f:53:09:41:97:8e:0e:
e9:24:65:da:43:b8:5c:d9:71:ce:42:8d:74:59:bc:66:66:ea:
04:1a:5f:23:19:39:ca:06:81:d8:b6:4c:b6:17:f5:6e:0c:d3:
86:96:67:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:30 2025 by rpki-client