Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/580258e0-118c-3c93-b36a-8996192063c3.roa
File: 580258e0-118c-3c93-b36a-8996192063c3.roa (raw, json)
Hash identifier: rMSBBmJCkK27tIzBMBvOR9dMylbxCGvp6xVGxGtXZtc=
Subject key identifier: BE:F4:04:B3:3A:03:A9:26:5C:67:04:CD:34:9F:E3:63:B7:C4:B4:82
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF29E3A949D9E7576B83BC280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/580258e0-118c-3c93-b36a-8996192063c3.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f2:9e:3a:94:9d:9e:75:76:b8:3b:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=3a2e0a8e-4226-49ab-8440-6ce3ecf297d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:fe:fd:cb:b8:83:ba:47:36:96:2f:90:1e:
80:7d:e3:75:97:c9:45:29:fe:ab:a6:68:85:71:17:
82:94:74:13:ea:dd:02:1b:b7:bf:24:72:27:1c:e6:
32:a7:2d:5b:81:1c:0f:f6:6d:80:70:b7:d1:74:8f:
9f:42:e7:f2:bf:82:5f:25:8a:fe:64:5b:c8:7a:92:
9a:ef:ac:e1:de:80:7c:bc:bf:6e:e2:d1:9d:a4:8c:
db:19:73:d6:3f:77:42:7a:8d:19:21:de:6b:e7:0c:
07:e3:07:5d:9c:ed:79:7d:c3:c7:af:b9:2a:02:aa:
cd:86:b5:c7:b1:57:e2:3e:9d:b6:52:01:2d:60:41:
42:9a:86:97:bf:9e:e3:99:ff:05:ad:e7:e2:95:6e:
e3:37:80:1a:ab:3a:f0:83:ed:75:25:f8:7a:e4:aa:
c2:cb:f4:77:be:8e:55:28:7d:23:d6:f3:ba:a8:5e:
49:d1:93:db:60:ae:87:a6:da:7b:b3:84:34:f8:91:
cf:cc:e0:06:90:a5:a3:e1:60:2b:3c:ca:7a:ec:4e:
2b:8f:d7:77:4e:58:ff:20:93:45:92:6a:84:61:12:
69:5a:fa:2a:3c:c9:2f:bc:31:3f:d0:6e:5e:d5:46:
fc:29:a5:4d:28:f0:31:eb:7f:d8:97:97:67:6b:b0:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F4:04:B3:3A:03:A9:26:5C:67:04:CD:34:9F:E3:63:B7:C4:B4:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/580258e0-118c-3c93-b36a-8996192063c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:77:28:18:09:1d:70:a5:b2:8b:59:5e:6d:44:47:38:e0:22:
58:ca:22:44:cb:db:09:1b:6a:90:17:23:48:80:e8:99:c8:0e:
95:c6:da:de:4d:b7:8d:52:27:97:ba:67:3e:48:75:7e:c6:73:
95:df:15:bf:b1:5f:d0:65:7b:a0:8a:f2:38:7d:2e:65:fb:5f:
59:c6:8d:6b:43:f5:de:31:e1:ee:28:3c:d9:4e:f1:21:79:75:
f1:79:2d:31:83:18:a6:2f:b0:8d:04:60:ba:c3:7d:a6:e1:f7:
f7:36:78:8b:83:ea:03:31:49:16:31:6c:f2:e8:5f:f2:db:73:
64:91:c0:16:82:3c:4e:9c:3e:2b:79:bc:b1:85:88:c5:a4:04:
1f:75:84:94:a5:5e:41:41:7c:ee:3c:4a:d7:32:0d:ed:cb:3f:
25:1f:4f:03:04:26:4e:5c:88:da:74:08:e0:e5:fb:fe:66:63:
d1:b9:71:f9:e8:63:59:a8:e0:41:46:2d:dc:50:5a:a1:91:58:
4b:4a:83:71:e3:64:ca:ca:c6:6b:0a:05:9a:54:b9:51:16:c8:
11:a9:3e:d5:5c:a6:40:d4:52:eb:92:3b:19:af:22:5f:c4:d9:
a7:6b:f6:2c:3c:6e:11:43:09:ef:a7:79:68:4b:ed:87:7b:f8:
78:04:fb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:57 2025 by rpki-client