Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/51dadcf1-4728-3d42-8f1b-9c50ff433022.roa
File: 51dadcf1-4728-3d42-8f1b-9c50ff433022.roa (raw, json)
Hash identifier: TKSWNmntqo2E3iLWRT6pYGX+vLm7piFqK1/oNUczF0A=
Subject key identifier: CE:44:57:C9:F9:E6:28:BC:47:BB:85:E0:E2:BF:4F:0A:E4:D8:84:C1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EDDD9CCC8CFD2AB0DFBF3E280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/51dadcf1-4728-3d42-8f1b-9c50ff433022.roa
Signing time: Wed 10 Aug 2022 12:00:00 +0000
ROA not before: Wed 10 Aug 2022 12:00:00 +0000
ROA not after: Thu 15 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.29.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:dd:d9:cc:c8:cf:d2:ab:0d:fb:f3:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 10 12:00:00 2022 GMT
Not After : Sep 15 04:00:00 2022 GMT
Subject: CN=aab11e30-c4af-4f23-9d0e-b1d9b31ecd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:0f:17:e1:3e:4c:8f:bc:78:94:cf:82:a1:
33:59:2a:0a:53:6b:33:39:91:96:e3:bd:bc:f8:f4:
17:da:79:f9:71:da:43:ec:f3:4d:73:02:ec:39:15:
ce:2c:47:b2:2d:f2:c8:a9:98:a0:0d:38:9b:91:06:
55:e2:1c:eb:e7:7c:92:19:dd:52:94:de:f1:ca:9e:
c9:cd:57:1b:11:59:27:40:1e:b5:45:1c:d0:e1:68:
7e:1a:54:1a:04:0b:f1:8f:71:4f:f7:fa:2d:37:0a:
b8:7b:21:f2:6f:b6:6c:76:c6:bb:e1:81:1f:69:ac:
aa:cc:61:68:81:a2:05:5a:54:63:b1:27:d5:f3:77:
bb:f4:17:6f:d5:ee:bf:bb:2d:0b:1b:b7:04:92:2a:
17:b0:f8:b5:b5:86:77:95:a0:fd:b7:c1:0b:74:0b:
2f:1a:2b:e1:b7:3f:be:eb:7d:06:06:da:c7:7b:06:
8f:13:18:44:12:62:26:a5:09:4d:ec:cc:c8:5e:91:
db:c9:3e:6c:37:38:22:f6:c9:92:fd:2c:29:01:97:
a9:35:8f:e6:fe:20:52:64:ed:4d:58:35:36:9c:b6:
41:41:9f:61:69:a8:ac:12:9d:ad:10:b4:52:2a:af:
47:f2:ce:ab:cd:5e:e4:ac:85:cd:dc:a6:74:5a:27:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:44:57:C9:F9:E6:28:BC:47:BB:85:E0:E2:BF:4F:0A:E4:D8:84:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/51dadcf1-4728-3d42-8f1b-9c50ff433022.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.29.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:a5:22:cb:37:9a:af:f2:40:23:fe:d6:c6:be:af:91:5d:e6:
c9:e1:c4:ce:3b:87:b0:07:f5:6e:bd:2d:8d:a0:37:8b:07:dc:
0a:e3:a1:f2:81:b3:de:de:2f:44:a9:0a:f3:84:3e:51:d4:04:
9b:08:1c:85:75:ab:8c:b9:09:15:c4:eb:51:59:0e:53:01:fe:
32:3e:9a:0d:fa:0b:66:1a:3a:18:52:53:4d:d5:61:eb:41:fa:
cd:81:0c:03:a6:3b:2a:4a:74:f0:a7:e4:2d:94:51:91:e6:40:
f6:1d:c3:dd:9b:e2:cd:22:a2:98:f4:db:8d:bd:36:3c:08:81:
e6:d9:17:43:a6:e2:ed:9d:d9:b1:2c:da:43:69:ae:72:5b:c0:
37:4f:7f:15:a8:cf:a1:77:4b:4e:ae:75:9a:5c:b7:22:32:ec:
a5:f4:71:85:7b:c3:5b:d3:c6:17:4b:f5:20:c3:69:1f:fd:57:
ad:67:f0:86:a1:be:a3:2c:93:40:86:ba:9f:78:49:c0:a5:a0:
90:a3:0b:e2:1b:d0:d0:8b:bd:ba:8c:73:3a:d3:e3:6a:3e:da:
39:9a:43:59:63:f9:a7:9b:06:fb:72:71:a0:3d:0d:29:25:2f:
63:bd:98:5f:1b:cf:ba:ff:71:5d:48:ed:04:aa:40:b5:77:8d:
7b:00:25:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:28 2025 by rpki-client