Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/536f9e8b-1864-3768-bede-bfa28a78584e.roa
File: 536f9e8b-1864-3768-bede-bfa28a78584e.roa (raw, json)
Hash identifier: cO5MKs7JGGRGSEfhIE5kzmG/mclPtfgscHEGxAMkhA8=
Subject key identifier: 7E:67:A4:06:F2:68:A7:3C:E3:68:E6:2F:2E:C5:C7:01:32:96:CE:F1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D48B3811BAB80F0BFA78B9128
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/536f9e8b-1864-3768-bede-bfa28a78584e.roa
Signing time: Sat 19 Mar 2022 04:00:00 +0000
ROA not before: Sat 19 Mar 2022 04:00:00 +0000
ROA not after: Sat 23 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.54.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:48:b3:81:1b:ab:80:f0:bf:a7:8b:91:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 19 04:00:00 2022 GMT
Not After : Apr 23 04:00:00 2022 GMT
Subject: CN=f67c7e60-dd4a-4c46-8fb8-cbb4d28a8f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:c7:2d:94:92:35:d8:75:e8:9d:76:b1:ba:
55:0a:cf:7c:49:3c:ba:f4:9f:4d:a2:7d:c3:ff:4c:
45:2d:48:8a:9a:01:b1:7a:b7:2f:a9:37:d1:2f:51:
77:19:5a:cf:14:43:ed:31:65:db:35:0a:e2:9f:96:
49:40:bd:9e:73:c2:ca:de:0c:51:60:2f:bd:6d:ee:
3e:f3:69:e8:96:14:1c:f5:e9:86:f8:49:76:57:ea:
ee:6b:41:ef:49:0f:17:66:59:65:61:33:b7:4f:d4:
52:4b:e7:ee:50:77:1a:04:20:e6:70:12:9a:3b:2e:
86:b1:ee:4c:cf:6f:2c:de:ac:84:05:38:3e:f2:cd:
36:6b:47:eb:5b:44:0f:b0:1c:cb:7c:c6:d0:15:6d:
39:15:6a:98:65:8a:2d:2e:00:79:54:31:00:c3:19:
15:20:cf:17:2d:b2:96:9e:93:d3:65:c4:0a:ea:d8:
05:ff:f4:d7:13:03:99:21:db:24:eb:58:f8:3b:57:
12:3f:47:e9:ea:03:22:3c:d9:a0:9d:bf:f9:c1:3f:
ca:9d:9f:89:e3:18:76:04:11:7e:87:f3:0b:82:05:
c9:36:cf:46:44:07:7c:e6:f5:6d:60:f5:52:11:cf:
24:fe:56:d6:ac:55:b7:f9:49:ad:d5:5d:06:a5:73:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:67:A4:06:F2:68:A7:3C:E3:68:E6:2F:2E:C5:C7:01:32:96:CE:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/536f9e8b-1864-3768-bede-bfa28a78584e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.54.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:23:72:59:57:c4:ca:b5:a7:87:5d:53:4a:8a:f2:96:fa:68:
45:a1:f7:30:a6:7f:65:11:91:3b:34:fd:78:c7:73:59:18:17:
c2:57:37:3b:ce:86:57:d8:0e:54:03:5d:67:88:b0:9c:0e:63:
98:b2:c9:4a:36:7d:03:9d:df:16:df:2e:44:d1:18:ec:ae:eb:
d0:2a:36:69:5f:af:69:62:87:9b:8c:ea:ee:45:10:7c:f5:06:
66:07:36:92:83:2f:24:66:81:63:5a:ce:55:12:d0:f5:44:7a:
b3:f1:45:e5:a8:b5:dd:25:7f:db:4b:56:d0:6f:67:99:4e:7c:
2d:be:8f:5d:b1:65:1b:c3:77:85:30:45:bc:64:d4:d0:c6:8f:
27:cb:4f:c1:07:28:f2:2d:b8:10:20:fe:32:d3:3e:e1:16:33:
48:c7:64:d2:73:19:91:ac:86:7a:8d:e5:04:b1:6d:26:ac:87:
66:bf:79:78:06:6d:0c:51:43:90:f4:c9:73:85:83:a3:16:a2:
24:74:d1:24:5e:e3:e8:60:02:68:a4:d2:d7:e8:92:2e:c8:b0:
46:3d:e3:8b:8e:d6:ea:c1:07:05:e5:01:42:fa:c3:c3:33:3d:
0b:02:47:2d:af:f3:29:05:3f:7d:89:16:81:f1:42:6e:e8:0b:
57:31:f5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:42 2025 by rpki-client