Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/538df81b-0dc0-3443-a1fa-8a03a867dc6b.roa
File: 538df81b-0dc0-3443-a1fa-8a03a867dc6b.roa (raw, json)
Hash identifier: 79LnrmfBsa08xKid+YAr3h5irHpKNTsL+9BLXqQ69HI=
Subject key identifier: 41:6B:AA:9D:61:A7:B5:7A:70:06:3E:FF:45:90:4F:68:0C:65:BB:84
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3238A62E615FC2C679C91200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/538df81b-0dc0-3443-a1fa-8a03a867dc6b.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.189.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:38:a6:2e:61:5f:c2:c6:79:c9:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=2f964956-c5f2-4a40-b28e-48f6c8ad7efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:0c:f4:2b:97:45:8b:c9:6f:99:81:25:4f:
29:66:4e:e0:c7:c3:92:f3:66:6f:93:d4:9e:0d:67:
a5:00:b5:4c:83:2c:0d:06:58:83:c7:7d:d7:dd:a2:
5c:ce:e6:58:cd:89:f6:bb:d7:3f:4f:82:53:f9:e6:
9a:1e:f6:0e:bd:46:fb:8f:88:c8:73:58:5b:9a:6c:
cf:bb:2e:e0:82:07:5e:a9:0f:8a:d5:59:31:a3:d6:
e2:89:75:cc:f3:45:a0:4a:91:09:18:a2:37:0a:ee:
47:33:7c:4c:29:f6:70:c9:5f:bc:d4:43:b2:f5:1b:
45:4c:1b:7d:d8:c1:44:aa:83:b2:1d:ac:bd:f5:6d:
f1:9a:8e:7b:df:c9:44:0a:82:d0:57:79:8c:72:db:
ad:5b:7a:81:7d:2a:8c:e0:8d:82:39:0b:02:a2:56:
0d:b5:30:ae:ba:29:05:a3:ab:55:05:14:75:f8:d7:
82:09:a5:5e:e9:3a:b5:b9:d0:b0:eb:ad:f5:55:45:
1d:34:8e:6d:8b:fb:58:e7:a4:da:fe:07:8e:4c:3c:
5a:8f:ff:ea:a4:3f:36:7d:f3:84:ef:80:46:71:cf:
d2:94:05:00:89:2a:03:d7:9b:c6:50:6a:8f:1c:09:
09:f3:4a:84:5e:55:b4:a8:47:de:39:9a:3b:5f:3a:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6B:AA:9D:61:A7:B5:7A:70:06:3E:FF:45:90:4F:68:0C:65:BB:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/538df81b-0dc0-3443-a1fa-8a03a867dc6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.189.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:11:a3:1b:0f:d2:58:a9:2c:8e:03:b1:2c:ca:a1:af:ac:64:
f1:40:73:21:d2:be:75:93:68:b1:b6:e5:69:ec:9c:92:21:c3:
34:5d:10:14:c8:c0:ab:71:2d:b8:ce:ee:7c:80:10:ce:6f:06:
eb:d4:4f:2d:14:d0:41:5c:57:d2:36:57:10:a9:95:0e:67:6e:
04:76:a6:f8:4a:7d:a8:de:72:b6:15:0e:bf:49:21:34:1b:9a:
fe:8c:95:3e:a3:10:ee:5d:a9:93:44:0a:c0:90:4d:63:06:79:
39:9d:b3:77:6c:53:90:a5:2c:a0:2a:24:8d:96:33:85:c2:0d:
44:08:f2:74:a3:45:d7:f0:07:d6:50:77:ff:5d:3d:5c:07:d4:
01:ba:86:df:ac:93:fa:91:f9:6c:f9:f3:8c:c5:90:7f:9e:da:
3b:0b:17:0a:6b:40:d4:9e:90:75:de:65:ea:aa:30:29:40:c0:
c7:4c:69:02:27:24:a3:af:fa:3e:9b:a8:9d:00:86:34:da:14:
1d:97:70:98:44:3b:1d:04:0e:ca:fc:93:36:c6:85:b3:cf:1a:
6a:f7:c3:52:df:2d:ca:33:e6:76:b4:d2:a3:97:7a:92:fa:15:
37:d3:21:52:6d:f4:e9:0c:07:47:0c:82:86:6d:7e:ce:42:54:
3e:de:8c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:41:33 2025 by rpki-client