Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5431ed85-373c-3818-bd70-6e4e7af4750e.roa
File: 5431ed85-373c-3818-bd70-6e4e7af4750e.roa (raw, json)
Hash identifier: tHT3wXTwbkPC8ICygPDrrIR08nJCxlbDD8y+1OLkET8=
Subject key identifier: E1:67:ED:D2:16:BA:8F:29:65:78:9E:02:EE:B4:B1:14:1D:F6:5E:B2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D8BA5614930BEC321A7055500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5431ed85-373c-3818-bd70-6e4e7af4750e.roa
Signing time: Tue 12 Apr 2022 04:00:00 +0000
ROA not before: Tue 12 Apr 2022 04:00:00 +0000
ROA not after: Tue 17 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.154.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:8b:a5:61:49:30:be:c3:21:a7:05:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 12 04:00:00 2022 GMT
Not After : May 17 04:00:00 2022 GMT
Subject: CN=8cb40f05-351f-45c3-9fc3-08c03f9547f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:4e:1b:a0:06:f0:b0:91:3f:c3:d8:46:9f:
d3:d4:75:12:7b:04:88:b9:8f:22:1c:84:69:0a:dc:
3e:3b:70:9c:77:4b:23:9d:24:37:4b:07:d4:15:03:
4d:9c:e3:8d:c1:51:85:94:61:48:be:65:03:92:9f:
0a:79:91:ac:09:73:8b:6d:b5:a9:ba:b0:b2:59:f2:
f1:db:02:b6:08:1d:6e:15:99:20:1f:c5:a2:ca:cb:
44:51:26:59:0b:66:f0:80:e1:b8:ab:d6:c4:21:71:
ae:58:63:21:cc:d4:dc:48:3a:ec:b8:e3:58:df:ef:
12:41:1e:b8:ac:1c:d6:c3:70:73:6a:1e:f3:41:6f:
da:4f:e1:74:8a:82:89:4d:7a:c0:8a:34:ae:ca:c6:
77:4d:23:1a:71:f1:d1:b3:61:bd:95:16:b6:2a:c2:
77:0c:55:75:01:40:a1:9c:96:63:b9:b2:e4:a2:88:
f8:57:87:64:c2:aa:7c:71:b5:17:e9:e4:00:cd:66:
87:fa:78:e3:14:00:ac:04:a7:f0:88:ef:a9:61:ad:
dc:ca:80:c7:17:71:6c:4d:14:70:99:54:2f:6f:31:
08:dc:ab:16:a7:7d:57:6f:1f:3f:30:d1:70:77:35:
fd:36:4e:5a:08:9a:4c:21:e2:de:98:0b:31:37:04:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:67:ED:D2:16:BA:8F:29:65:78:9E:02:EE:B4:B1:14:1D:F6:5E:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5431ed85-373c-3818-bd70-6e4e7af4750e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.154.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:33:7f:83:d8:73:a0:6d:62:29:0c:39:5e:7f:4d:2a:1c:ea:
9d:1e:5c:02:e1:8a:fd:44:55:15:7c:3c:2e:1d:4e:f8:2c:50:
d3:fe:a7:9e:75:0f:7f:3f:28:02:57:3f:50:d0:e3:2e:1e:13:
d9:10:e6:2f:64:12:d3:f9:d9:cc:a2:e7:ee:39:ab:0f:ec:75:
28:de:c3:7b:b9:fb:0f:fe:9d:f6:c8:87:0d:a7:8e:a3:ec:fc:
c1:71:57:3b:cf:47:86:4a:5d:32:5c:39:b0:27:cb:01:7a:69:
7d:f6:5f:4b:b9:e7:6e:78:e7:18:5d:dc:dd:82:c7:e4:3b:2b:
c8:d8:be:bb:ec:81:03:9a:ca:42:8b:78:e3:8d:23:7a:03:8f:
80:0e:52:22:de:79:97:6f:f2:f9:bf:2a:b0:3d:94:2c:d8:36:
73:f3:79:d9:b3:51:46:40:c2:74:e8:a0:a2:7c:91:42:01:c9:
1a:2d:07:76:40:2b:63:ed:72:38:50:35:51:a6:e3:fa:06:49:
af:d7:6d:2d:33:5a:68:67:9c:78:9e:6b:a1:85:78:32:31:8a:
14:16:07:da:49:8a:51:bf:ef:d2:ea:d0:7e:cb:27:db:27:c6:
af:99:de:32:73:b3:2b:7d:e0:f7:af:e9:b0:85:ba:4b:bb:17:
c0:a8:2a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:18 2025 by rpki-client