Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5cb7ec40-8c5d-3ae6-b281-68809592dcca.roa
File: 5cb7ec40-8c5d-3ae6-b281-68809592dcca.roa (raw, json)
Hash identifier: q1uGKAWtoS9RmN5wj3yQ5Q1CKYxNl27fm7sDnCrTbdk=
Subject key identifier: 38:8A:C6:AD:03:7E:4C:87:BB:CE:B3:81:93:32:12:3B:EA:E5:DD:16
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0B147CB577C438BE3BD96980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5cb7ec40-8c5d-3ae6-b281-68809592dcca.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.162.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:14:7c:b5:77:c4:38:be:3b:d9:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=30d3f819-22ae-4885-a2a1-e130e3902e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:79:49:4f:77:46:f3:86:1a:47:25:cf:d1:9f:
87:8d:cd:ab:ac:58:b2:a2:4a:e6:81:6b:16:f7:b5:
c4:51:f0:db:fa:6c:05:20:27:e1:56:7a:56:93:d9:
0a:4f:97:f8:23:81:28:40:6c:30:6f:ca:36:ff:e4:
38:b8:a8:66:dd:92:3a:60:12:d8:bd:57:fe:f2:16:
7b:ca:40:dc:b7:ea:c4:cd:1b:b1:b7:b5:87:90:bd:
df:99:ab:be:af:8e:58:75:63:cd:2e:46:ba:ea:53:
1f:06:fb:8f:52:09:03:54:9b:21:9e:dd:d1:a8:e2:
95:98:4c:86:5e:19:9d:3e:32:56:91:ec:a0:0e:67:
01:14:89:e6:28:5a:a7:4a:76:e7:de:97:a0:e5:f5:
0b:d9:98:76:7d:8e:ed:d0:e8:8f:9c:90:1b:a2:93:
1f:a7:da:bf:b7:12:d0:2d:7a:74:0f:7e:eb:3a:1d:
2b:e7:57:03:84:60:b7:39:eb:eb:fc:fa:4b:96:ff:
34:6b:7f:4a:13:2d:33:9b:f3:bd:d7:04:cb:9b:b5:
08:fd:de:eb:77:a2:1b:94:f1:b5:8e:e1:3e:19:ca:
1d:48:fc:75:34:81:9a:35:8d:bf:25:10:00:6e:e6:
30:ac:ea:01:be:c4:fc:ad:80:65:21:ee:07:c7:9b:
95:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8A:C6:AD:03:7E:4C:87:BB:CE:B3:81:93:32:12:3B:EA:E5:DD:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5cb7ec40-8c5d-3ae6-b281-68809592dcca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.162.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:5a:3c:35:e6:ab:65:fa:18:56:5a:09:57:e2:8b:74:4c:82:
de:d3:df:cb:6b:bf:00:04:22:b6:8b:48:76:e7:ea:1c:9f:88:
e0:01:1b:d7:06:dd:d0:ca:bc:e3:8f:f5:af:d9:88:ce:6a:79:
7f:a0:b2:e8:d7:4c:af:3a:21:b1:80:e7:9c:20:0f:8a:be:3f:
20:47:cb:3e:4e:45:4a:bd:40:5d:ed:5b:e8:17:79:ca:83:28:
d4:5a:af:59:d0:d5:33:d9:cb:41:04:2d:4c:36:2d:4e:53:89:
b3:45:58:0b:dd:8b:b7:66:7a:28:f0:cf:7d:ed:c6:2a:8d:4b:
22:a1:02:59:ca:c1:6f:ac:ee:8c:15:3a:13:be:27:b0:6a:73:
57:76:c7:b6:46:75:b1:3f:fe:1b:14:5f:a8:1f:36:54:1a:d5:
50:a5:80:84:13:ec:35:35:b6:86:9f:2e:30:4d:e1:32:ce:57:
c6:fa:52:9d:6f:e3:31:78:c9:a7:4b:8a:a0:f2:23:37:7e:fb:
43:0c:b6:b5:a5:c1:46:3c:10:3e:d7:12:7e:77:d7:31:05:4d:
df:57:75:38:37:b1:09:d5:72:28:48:5d:84:78:b7:81:3f:24:
6e:e0:f1:10:84:0b:88:8e:38:bc:90:dd:b6:83:31:b1:cc:6a:
f1:63:8d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:14 2025 by rpki-client