Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c01ca10-0f3e-3d90-9de5-1fb12cee8207.roa
File: 5c01ca10-0f3e-3d90-9de5-1fb12cee8207.roa (raw, json)
Hash identifier: nG9svs7BEMpFEY1R1tCeORs/56ODzWLiP8PcCGVeOR4=
Subject key identifier: 26:C6:68:A0:38:A4:BC:39:B3:55:CC:45:68:20:47:8A:F1:BD:7B:36
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBCDA0CF91DD1AC3C32E1A4B0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c01ca10-0f3e-3d90-9de5-1fb12cee8207.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.170.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:da:0c:f9:1d:d1:ac:3c:32:e1:a4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=20bddfea-057b-404f-a4b4-038248243fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b9:10:c7:5d:f7:94:7d:39:fd:77:e2:f5:c9:
54:cd:ca:98:9c:d6:a9:65:1b:5b:37:98:31:18:5c:
ec:97:dd:f9:f7:1e:6d:d9:75:9f:6a:87:d9:d0:a6:
d3:39:b0:7a:9e:1d:e8:1e:26:5c:7d:2c:d7:c3:db:
07:35:eb:32:97:5d:ef:e0:30:57:87:52:2c:d0:b4:
cd:81:a7:f0:47:0c:35:d0:fc:e6:86:df:d6:42:dd:
53:c3:cf:b6:f9:18:41:6f:c0:3e:c5:39:a8:51:be:
17:f1:f4:23:78:d4:76:0d:29:27:07:30:8f:0d:c2:
51:43:5a:25:fe:b8:12:44:dd:95:d9:c1:57:15:f7:
30:73:95:43:10:7e:a8:a4:5c:20:2c:ea:c8:47:32:
02:45:39:9b:21:f6:2e:fa:db:5e:2f:60:d6:23:e0:
43:ca:98:23:27:3e:d0:ec:32:5b:2e:24:d4:d1:2f:
92:6f:2e:d5:43:25:44:f4:fc:73:fb:82:72:4d:45:
1e:88:42:7e:8b:6d:fe:85:c1:e9:60:56:a4:78:e4:
f2:13:20:37:e7:63:e3:95:df:3e:0e:78:77:93:a7:
6a:13:01:1d:92:58:d1:51:03:e8:13:be:a1:14:40:
3b:55:02:10:4f:ef:0d:6c:23:73:07:95:9d:37:ee:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C6:68:A0:38:A4:BC:39:B3:55:CC:45:68:20:47:8A:F1:BD:7B:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c01ca10-0f3e-3d90-9de5-1fb12cee8207.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.170.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:60:23:91:ba:b3:63:30:57:db:e5:65:11:a8:08:b4:f8:72:
9e:8d:22:0e:31:2c:c8:7e:b6:45:25:7f:ce:e2:8f:e1:7b:ec:
bf:2c:ac:7a:c6:13:b0:71:1f:ac:44:6b:ea:aa:02:dc:25:0a:
db:f8:0c:71:80:ad:c5:50:c7:74:fe:c1:a8:96:50:b7:b2:25:
32:bb:b4:d8:01:d1:e5:b5:91:4d:4c:5e:55:a7:a4:af:b9:01:
62:a8:96:98:98:08:20:b2:cd:41:e3:fc:68:29:c4:27:6a:29:
26:2c:64:96:c7:6f:b7:3b:4f:57:6b:2c:75:ff:d1:b7:ea:eb:
de:d7:27:f8:b6:b4:ad:9a:a3:07:43:f5:07:dc:8e:db:25:32:
ac:f0:0a:fd:a3:08:4e:0c:cc:a0:09:f6:f6:72:56:2f:80:6c:
ff:ba:4f:3b:4a:11:b1:26:c1:c0:a4:ef:d6:36:39:88:03:8b:
b9:6b:bb:57:83:72:17:fc:0e:0c:85:54:81:bf:5f:db:57:70:
75:76:80:a7:fc:55:67:78:4c:44:e2:4b:1e:3d:74:84:e9:b9:
b3:dc:8e:b6:f3:28:bb:22:6f:53:24:10:47:e7:f5:cd:95:7f:
fe:c3:5b:3c:12:40:58:94:76:09:b1:67:a5:d5:9f:7b:15:75:
e0:c8:d5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:24 2025 by rpki-client