Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5205418c-bfe5-3bfd-9faa-daa27ce5a436.roa
File: 5205418c-bfe5-3bfd-9faa-daa27ce5a436.roa (raw, json)
Hash identifier: HQm/JdQ4yr5Tk+Rwso0gBO/LZ+8XmysflL1vOXabJQE=
Subject key identifier: A2:A6:84:C5:BD:64:2D:CA:D0:07:64:AF:D2:F1:AC:CC:E5:68:31:C4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D7D4743F78656772AB342D700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5205418c-bfe5-3bfd-9faa-daa27ce5a436.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Thu 12 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:47:43:f7:86:56:77:2a:b3:42:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : May 12 04:00:00 2022 GMT
Subject: CN=d364e6d6-0d1f-4a5b-8b8d-b35ef3ba63b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:80:db:83:1a:46:7c:0a:3c:73:7b:8d:04:
60:f1:66:cc:5e:90:9f:c1:07:b8:05:71:6e:1f:0d:
1c:8b:48:af:bf:2c:53:49:03:bb:a6:a5:66:6e:c5:
fe:49:c8:ae:df:d7:17:11:e3:d6:99:25:7d:d6:3e:
70:ed:47:92:be:ea:b1:2c:32:62:f7:22:df:3c:c1:
bd:62:ee:8e:a8:37:0b:e6:72:c4:cd:9d:9e:e0:e2:
97:19:63:94:77:ea:32:b4:32:ee:53:a1:be:2d:5a:
79:0b:3e:c8:5c:d8:bd:e8:51:11:4a:43:83:eb:34:
48:f8:8a:ca:6f:c6:17:7b:3c:0b:18:d7:64:0c:da:
fd:c3:b2:68:79:aa:98:7d:90:29:36:55:5d:cf:2d:
ed:1e:b2:e8:e5:f4:f1:ec:38:0b:f2:6b:4b:84:3a:
34:1d:10:79:20:9b:dc:0b:94:71:d5:86:f4:38:ca:
b1:bc:4d:1f:f5:9e:15:3a:43:3e:37:9c:28:63:cb:
b4:a5:8b:eb:c2:44:e7:dc:94:b7:40:68:0a:c2:e1:
78:46:0f:0c:c4:a6:9f:7c:8b:1b:7a:e8:22:95:22:
b6:71:9e:74:7c:b0:02:45:51:54:ac:b7:b9:74:31:
3a:5e:27:dc:30:61:cb:ce:db:58:3d:d6:b8:6b:a4:
6b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A6:84:C5:BD:64:2D:CA:D0:07:64:AF:D2:F1:AC:CC:E5:68:31:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5205418c-bfe5-3bfd-9faa-daa27ce5a436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:a3:9b:da:9f:23:d1:e8:d9:98:d9:16:53:8e:32:63:d7:ae:
7a:2c:11:6a:a3:fe:7b:70:02:6a:f3:69:76:7c:12:11:ee:14:
ec:aa:bd:7c:0d:0c:fe:80:68:f1:e4:4f:50:25:7c:3b:fe:cd:
59:42:8c:d3:d5:6d:a0:74:8b:1d:ee:9f:79:ae:13:85:8c:fa:
8b:53:36:66:85:88:f7:1b:f2:8d:54:f4:f1:9b:95:aa:f1:4f:
26:b0:3d:60:42:b0:44:bd:80:9f:a1:67:3d:0b:d2:91:81:eb:
99:61:39:01:3f:e6:d2:82:d9:51:d8:12:c2:24:95:93:f5:f1:
ac:11:62:28:8d:fe:18:e1:92:4d:8b:8d:e5:25:87:1c:f6:cb:
10:5f:71:f8:d2:c0:23:9e:28:04:de:db:86:29:99:9a:2f:ad:
c4:f2:66:07:52:5b:40:1b:7a:43:7b:70:4c:09:ca:f1:65:02:
bc:6e:94:65:bc:4b:f9:04:1e:dc:11:25:93:06:2a:d4:8a:14:
e5:43:c3:2c:53:65:cf:78:64:6a:70:7c:3f:9b:80:b1:3b:56:
41:d8:3f:f3:fd:ef:26:af:25:70:81:0b:90:99:0e:7c:f7:15:
49:bd:2d:dd:bb:6d:16:75:86:5f:62:21:a2:9e:5d:7c:32:c1:
4a:3e:11:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:29 2025 by rpki-client