Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b20b783-67b9-3f61-af0f-a008694bffd7.roa
File: 5b20b783-67b9-3f61-af0f-a008694bffd7.roa (raw, json)
Hash identifier: GQSWBn5uRYLKCezbyFT9TlBT5hStVkMlE4nq2M45b+Q=
Subject key identifier: 7D:BB:F3:2A:C7:2C:B7:D0:12:01:D9:C1:71:26:ED:5C:76:DE:63:7A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E9F2740EBDC50B579B2FE6A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b20b783-67b9-3f61-af0f-a008694bffd7.roa
Signing time: Mon 18 Jul 2022 12:00:00 +0000
ROA not before: Mon 18 Jul 2022 12:00:00 +0000
ROA not after: Tue 23 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.88.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:9f:27:40:eb:dc:50:b5:79:b2:fe:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 18 12:00:00 2022 GMT
Not After : Aug 23 04:00:00 2022 GMT
Subject: CN=41dce3c0-946a-4206-9e9d-ab5988d9aeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a6:ac:ed:e5:82:a8:12:76:ab:78:73:7f:05:
e4:d2:31:d9:71:1f:11:f1:f8:e4:51:39:75:30:c9:
80:8f:98:92:67:51:d2:8f:5e:a1:cc:a5:49:98:d5:
59:db:01:3b:c4:d2:f5:8c:f4:13:d8:43:a8:76:3c:
37:45:4a:66:36:ce:2f:e4:19:bb:f0:4f:f5:b5:c8:
d7:64:fd:fb:3b:16:a8:63:05:37:3a:1a:85:74:c6:
c7:bf:b5:f6:f2:5e:1e:2e:92:41:c3:74:9a:9f:ef:
c9:60:38:92:c2:14:10:be:86:07:0f:c1:76:0d:53:
67:6a:09:f1:06:ce:78:f1:c6:6a:e2:b6:7e:5c:50:
68:fc:f8:9d:54:c8:b8:d9:90:84:24:9f:01:16:5a:
1c:2b:ea:88:00:dd:19:c7:26:7b:c2:82:de:93:af:
79:f6:f4:9e:e8:6d:58:2b:4f:f0:66:f7:90:11:03:
c9:72:7e:9d:bf:26:04:22:c6:8b:c2:28:e5:3b:77:
42:f2:99:ec:2d:1a:dd:4c:c7:63:c5:6c:45:f7:55:
5b:11:b1:b6:f9:47:91:8c:50:0f:b4:99:15:5f:4a:
02:98:77:4d:2e:8d:33:1b:a4:9a:77:bc:d8:30:76:
a8:b2:32:10:3d:c9:ec:f1:22:74:d6:06:25:4b:c9:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BB:F3:2A:C7:2C:B7:D0:12:01:D9:C1:71:26:ED:5C:76:DE:63:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b20b783-67b9-3f61-af0f-a008694bffd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:be:83:b6:e9:8a:35:53:0a:37:07:b3:4d:39:56:0b:a4:a6:
72:86:79:18:c6:60:d2:44:88:d2:4a:9a:22:57:5b:2f:e7:c0:
0d:ae:77:e0:8f:a7:73:89:ad:d0:af:83:b8:3f:0d:3b:48:e9:
ff:a4:66:67:38:a2:40:8f:be:e5:b6:c3:03:c4:78:b0:30:18:
37:32:5a:7a:ed:fd:15:2b:91:86:02:51:5d:6b:e7:36:80:ea:
5e:da:39:ca:af:d5:3c:a7:fc:0d:c3:6e:0d:5a:17:71:e6:a6:
39:b7:bb:53:f7:76:7a:c6:4b:fc:d6:59:b9:6b:da:21:e2:96:
8f:38:a9:bd:28:99:f2:91:77:7a:a5:b3:65:a9:9d:a0:a5:47:
f1:3e:dd:5f:70:82:04:bf:c4:f0:72:2a:b5:dc:3b:f3:ff:bb:
13:46:b5:14:ab:da:f2:0f:44:1e:fb:d6:03:68:e6:04:29:46:
36:09:ba:eb:1e:ed:bf:d3:15:4b:8d:fc:f5:bf:f4:40:65:97:
21:cc:9d:6e:00:21:03:92:94:7d:4a:db:fd:68:7d:5a:9a:6d:
e9:fc:9e:53:be:de:31:e5:58:94:4b:d5:d2:b1:d8:02:7e:c7:
bc:4f:e2:02:1a:4b:f4:11:18:c3:8e:58:3b:09:79:83:e7:60:
32:aa:53:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:13 2025 by rpki-client