Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58c1f848-652c-3f6f-8e38-af2e4fc7e83b.roa
File: 58c1f848-652c-3f6f-8e38-af2e4fc7e83b.roa (raw, json)
Hash identifier: KcAWomOQhp8T9B7j+Br0M2+n652PosV3B9hfzrRFb9w=
Subject key identifier: 9B:D9:BF:AB:B3:6A:4A:A8:86:19:14:07:77:9D:E8:B7:01:7A:B6:87
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D7FBFD097782C894036CCEE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58c1f848-652c-3f6f-8e38-af2e4fc7e83b.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Thu 12 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.55.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7f:bf:d0:97:78:2c:89:40:36:cc:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : May 12 04:00:00 2022 GMT
Subject: CN=32473e1b-9bf4-4765-8714-38537b810b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:24:55:da:07:02:3f:d1:1a:c6:92:4d:60:
85:e7:eb:bc:d7:70:64:08:52:48:5f:74:a4:06:d3:
bb:f4:82:9b:45:3d:a9:ff:2a:74:f5:b9:03:22:31:
37:7f:99:b4:da:c7:7d:b5:69:c2:18:08:8d:e7:77:
1d:4e:d3:00:0a:92:83:2d:ca:04:2b:f5:53:08:ef:
23:08:c0:4e:cb:e8:ea:1b:be:0c:e1:d6:a8:62:ce:
5d:fe:5f:54:1e:ae:ff:ba:bc:6f:ab:a5:a3:f8:54:
0a:f8:43:06:a5:e2:6e:f9:06:07:cd:8c:02:69:8f:
3e:f3:13:bd:f0:6f:b7:a1:59:60:44:53:b8:48:f4:
44:72:13:df:fa:ea:4d:a4:1a:a8:c8:d6:af:cf:d5:
a1:70:b1:ee:e3:14:c9:0c:e5:f0:88:33:19:db:cb:
85:5f:2e:7e:53:fb:ab:ed:72:e5:29:70:48:ff:a0:
34:fe:3a:6a:7d:21:18:0d:59:43:b7:48:d0:b4:81:
02:f1:9a:45:dc:98:a7:6e:8d:3b:21:3c:d4:c0:be:
35:ed:48:09:c1:ea:87:de:5e:12:de:61:27:33:72:
88:97:a2:a6:ba:f1:36:18:97:92:41:c5:1b:1f:47:
88:89:e7:86:f6:b1:48:91:64:a9:1a:4b:12:4a:b7:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D9:BF:AB:B3:6A:4A:A8:86:19:14:07:77:9D:E8:B7:01:7A:B6:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58c1f848-652c-3f6f-8e38-af2e4fc7e83b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:13:d1:84:f7:75:90:1f:61:c4:06:a0:d8:d8:6d:7f:00:46:
76:09:4c:88:4a:19:99:ff:8f:67:7c:cb:e8:65:38:93:28:18:
57:9d:05:d6:e6:19:72:5d:cf:5d:06:8b:09:01:d7:8d:f9:40:
b3:c0:ae:8d:fc:60:62:fb:1f:24:f8:83:16:71:dc:33:cc:b9:
71:d0:38:72:0a:39:3b:f9:bc:9a:82:fe:b2:ef:d5:46:c3:df:
24:a7:ba:3c:8a:f3:ba:b1:15:c8:8b:a3:2f:99:03:5c:03:bb:
93:43:b2:61:86:e4:29:ce:17:a3:a2:64:2a:9a:cd:cb:bb:4e:
30:c2:46:cd:8f:bc:10:d7:ce:6f:4a:bd:8b:4d:20:74:d6:97:
b8:79:37:57:58:34:34:7c:23:6a:cc:9e:00:0e:89:67:0d:92:
bd:41:4b:16:2e:18:fd:82:0a:db:1e:14:e4:61:fb:ab:7a:ef:
95:3d:1f:14:cb:20:e8:5d:63:8f:e7:38:ba:f6:f1:af:f1:29:
a1:48:bb:4c:3b:67:ca:c2:e8:fc:79:cd:1e:fd:c6:99:33:8c:
a8:48:24:cf:b4:ce:e9:aa:c6:66:cb:c6:48:e0:99:b3:90:8e:
9a:cc:1a:66:7d:0c:59:fb:33:0c:c3:8e:66:8f:4f:5a:24:59:
a4:5e:1a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:06:42 2025 by rpki-client