Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b23be26-d67f-3cca-9588-47b671213834.roa
File: 5b23be26-d67f-3cca-9588-47b671213834.roa (raw, json)
Hash identifier: Wz+wkDH7v5p+sW5txNVEbu+ksT2DZWpz80mKQBBrYFo=
Subject key identifier: 88:9D:CF:0D:0D:91:78:23:31:34:B9:E5:E4:BA:36:87:31:2B:91:5F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5683806FF6F79B8A5DA25280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b23be26-d67f-3cca-9588-47b671213834.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Thu 28 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.61.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:56:83:80:6f:f6:f7:9b:8a:5d:a2:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Apr 28 04:00:00 2022 GMT
Subject: CN=be9ddf60-a85f-4e19-b103-c02af54eaf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:27:09:f4:df:7d:38:81:54:de:62:64:be:fb:
87:91:85:44:a7:b3:31:2e:a9:77:ff:de:63:35:cb:
03:f2:2c:e0:a1:2c:99:85:1c:18:ce:0c:53:b6:e4:
be:48:d7:08:ba:b8:a1:ff:18:62:08:b7:54:1d:2d:
e9:b2:3c:97:cd:ef:d6:c2:39:5b:05:4e:99:34:99:
13:3b:e7:98:9f:49:4a:c3:3e:e4:07:b2:2a:2a:9e:
b1:a9:0e:df:7f:be:bc:bc:f5:d7:b2:64:2d:5f:27:
87:19:1c:f1:7c:ee:84:93:64:3b:d3:61:8f:90:ef:
33:62:0d:f6:db:02:c5:98:ab:ba:95:bb:7c:56:30:
26:80:f3:7d:72:f1:65:a4:5a:78:fc:1d:85:eb:95:
12:a0:d9:6e:bb:32:e0:b0:18:1b:3e:69:ac:a4:22:
e1:a5:3c:2a:e5:92:50:ae:f0:04:cc:05:83:7d:cb:
eb:cb:8b:c5:cb:07:c1:68:cf:d5:e5:83:82:6f:69:
b7:1d:c7:2b:bc:86:c4:e6:32:64:06:ac:91:f0:33:
5a:8c:fb:6e:aa:bd:5c:12:28:92:ff:c0:38:1e:3d:
83:ed:4b:54:67:b8:04:2a:ec:18:1e:66:2c:a0:ee:
e5:0d:87:f6:ac:71:5b:ee:70:ed:10:76:e3:86:c5:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9D:CF:0D:0D:91:78:23:31:34:B9:E5:E4:BA:36:87:31:2B:91:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b23be26-d67f-3cca-9588-47b671213834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.61.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:c9:ae:e4:11:8c:60:35:45:14:a2:ab:66:2e:54:13:4e:84:
f2:8f:25:15:e7:10:fd:b4:a6:f2:2d:b9:04:07:e0:a5:3f:8a:
81:7a:6b:27:a4:06:9b:77:c1:91:31:87:0b:84:c3:54:6a:3d:
c9:af:7e:49:fb:99:0e:0a:d8:c9:23:a1:03:b3:4e:5b:97:10:
09:73:c0:96:66:c2:40:98:39:a5:50:65:b1:41:6f:71:53:b4:
96:76:f4:d3:b4:1f:95:1c:ac:a1:2f:e8:ec:bc:26:3b:b5:27:
f5:41:6a:e0:da:52:54:d8:7b:b5:28:9a:69:5d:57:8d:f9:64:
85:2e:a2:93:f7:31:53:08:a5:c0:39:ec:b1:26:d4:83:14:06:
5e:52:d5:0c:04:b2:cb:c9:7c:12:0d:c8:40:32:82:2a:86:bf:
9e:de:41:4b:08:ca:06:a8:ef:0e:0e:86:12:75:db:3b:84:e9:
eb:88:e2:f8:d1:a1:0a:d1:4d:43:0e:0b:41:a7:90:d4:34:6f:
ba:0f:54:91:b3:92:9a:19:d7:d5:b8:5a:bf:3d:dd:bf:7c:92:
8c:bf:75:64:95:ac:f9:8c:ce:c2:d9:f2:43:f1:b9:8c:d0:38:
05:86:33:db:b9:fd:b4:cd:94:9f:38:ab:ed:f5:6e:6d:ab:b8:
1d:35:f1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:21 2025 by rpki-client