Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/531b880b-42ea-3548-8d1b-f8a4d4a645ac.roa
File: 531b880b-42ea-3548-8d1b-f8a4d4a645ac.roa (raw, json)
Hash identifier: +9bc6klgN7Z+42b6LJFLr0LN46c4eJrBokAQq4cNyxs=
Subject key identifier: 06:D8:F3:99:BC:10:F5:72:F6:B1:1B:CA:C3:ED:D6:D0:AD:55:37:47
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D7D4026CECDBF9896A2AC7E40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/531b880b-42ea-3548-8d1b-f8a4d4a645ac.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Thu 12 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:40:26:ce:cd:bf:98:96:a2:ac:7e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : May 12 04:00:00 2022 GMT
Subject: CN=e3e82d41-26cb-4f07-9275-b08e1eac076d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:cd:19:3e:e6:06:62:f3:6f:64:91:0e:fa:
46:aa:28:61:4c:c9:9d:65:93:a3:e9:be:01:8a:a3:
1f:3b:3e:3a:73:42:07:d1:66:b0:f6:d5:fb:b4:ea:
c2:d3:d4:8a:bf:4e:ad:2e:ba:c6:39:bf:f9:de:ea:
ef:03:08:12:6e:ea:99:2a:1d:28:b8:28:f8:74:60:
54:3e:61:28:12:f2:77:6f:bf:f2:57:13:c7:40:bf:
d6:cf:9d:51:3f:30:42:c8:47:cf:63:b4:e7:83:35:
b3:0b:e1:ee:82:2b:6c:99:9e:3c:4b:0c:c0:27:b2:
45:4d:16:c2:dc:f5:af:69:de:87:d7:0a:fc:0d:64:
1d:c2:b5:12:a5:89:9c:38:b6:0a:1a:2e:68:d8:b6:
9d:de:64:0b:43:46:ad:07:d7:63:b0:08:75:5e:11:
0d:3e:5c:86:7c:1f:05:df:08:d1:4e:a1:88:24:3a:
9d:c7:f6:2d:c6:0e:6d:73:e4:31:40:6c:4c:f9:05:
aa:f2:06:0f:94:b6:04:cb:b3:99:56:ee:78:11:b1:
31:e8:fc:fa:1c:40:3a:ff:b5:db:fb:95:4c:a8:17:
c8:88:33:40:20:63:22:ed:8a:6a:7e:a5:da:f7:14:
8a:ae:3b:29:77:45:68:32:3c:0a:fa:9c:2f:de:43:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D8:F3:99:BC:10:F5:72:F6:B1:1B:CA:C3:ED:D6:D0:AD:55:37:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/531b880b-42ea-3548-8d1b-f8a4d4a645ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.69.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:b4:13:12:34:f7:16:48:d8:e6:08:4c:f5:ac:8e:06:7d:eb:
ce:2a:1e:4a:0a:cc:5e:00:a9:e1:60:eb:55:83:44:61:b7:51:
d6:7a:92:2e:e0:8d:72:0d:5d:cd:1c:85:66:45:83:29:a1:7e:
77:04:79:42:11:89:38:61:3f:f6:a8:31:f5:8b:71:89:cb:e1:
05:0f:d9:79:e1:3a:9c:6e:6a:a9:1f:7a:ad:d6:8c:ed:12:5f:
f2:cb:76:0a:1b:4c:e9:85:3f:3e:23:c4:0b:14:28:2a:c7:05:
5d:7c:76:f2:f1:cc:91:e0:71:b4:1a:32:07:4b:38:8b:aa:e0:
af:26:23:72:d4:fa:d1:6e:20:34:91:3c:01:c4:72:45:b6:81:
c8:07:b3:98:67:c6:b8:3e:39:76:c3:20:00:e2:4f:d3:51:df:
03:7d:9b:45:93:81:ca:eb:aa:7d:21:06:5f:c1:4f:83:8e:69:
75:5e:f2:49:10:fd:99:54:e4:29:91:0c:0a:f5:b7:77:fc:15:
93:e4:9b:17:9f:d6:e7:b8:65:12:9d:9a:42:42:9a:58:a3:89:
37:0f:f4:7a:6c:f0:7c:e1:2a:ae:53:75:63:87:87:b5:f6:6d:
6c:df:2a:1c:20:62:59:4f:77:e5:cf:67:e6:3f:50:90:dd:38:
0e:43:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:10 2025 by rpki-client