Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61fcb3ff-8eef-3747-9574-cb5e079bcc2b.roa
File: 61fcb3ff-8eef-3747-9574-cb5e079bcc2b.roa (raw, json)
Hash identifier: JMmnPEx/wfULD08P1LP915UtaLpb9v9JbpMT3w1Z1Vw=
Subject key identifier: E8:C4:23:FF:11:9F:48:11:77:ED:26:84:CD:7A:2E:9A:DA:D4:0A:A8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3222B5EDD89B2022E88C64E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61fcb3ff-8eef-3747-9574-cb5e079bcc2b.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.128.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:22:b5:ed:d8:9b:20:22:e8:8c:64:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=12a0a7f5-5a94-4041-8d74-1d6358a28424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:37:80:9f:4e:9f:36:51:1f:91:bd:2e:ef:
30:ba:bb:66:37:01:12:78:75:ed:57:19:78:7f:13:
07:c9:82:cc:56:e9:da:c1:9b:c7:fe:45:bf:c9:16:
97:c8:d9:9a:76:fa:13:b7:97:11:65:cf:43:b8:a0:
6f:0a:96:bc:20:07:c4:16:06:57:60:fa:e2:66:58:
f1:c5:89:56:1e:73:fd:a1:51:97:87:1d:f2:64:96:
af:fe:a8:0a:0a:2b:2e:c3:3e:90:cc:1d:8f:72:a7:
6c:b2:d7:61:8e:d6:e7:c9:fd:36:b7:d2:4d:c5:3b:
fe:54:7c:7e:67:f4:ea:9b:78:59:13:cc:7b:1d:15:
23:8d:4b:15:cc:9c:b8:da:c8:0b:c9:9d:40:10:b5:
e5:58:92:5c:b1:7a:1c:f6:cb:b4:dd:75:69:f2:09:
f6:86:16:be:0e:8f:44:b1:b8:bb:be:fe:d2:79:02:
47:b4:0d:18:2b:df:b0:68:58:8d:ac:6d:0e:bf:61:
62:79:bf:57:dc:ad:cf:35:dd:c4:e1:33:e9:71:fa:
3c:fb:0d:58:e6:22:bd:02:41:47:d6:1d:58:88:8a:
62:47:df:00:dd:c8:be:74:30:51:0c:9b:5c:fc:35:
92:8e:4a:99:7b:1c:74:8c:e7:0f:5b:7e:3c:af:b2:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C4:23:FF:11:9F:48:11:77:ED:26:84:CD:7A:2E:9A:DA:D4:0A:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61fcb3ff-8eef-3747-9574-cb5e079bcc2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.128.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:78:43:8c:ba:38:ad:be:7f:f5:2a:bd:95:b2:b0:bc:7d:c5:
f1:9d:c0:49:38:74:aa:b8:17:5f:03:9c:ff:52:47:30:e3:dd:
11:ee:1c:1a:fa:8c:8a:5b:5e:28:1c:3e:c4:2b:99:be:3b:35:
f1:9c:b1:1a:ca:b2:d2:e6:38:f4:09:81:95:81:51:41:e0:d3:
cc:ea:c0:c9:5d:18:b6:e9:79:20:f6:4f:40:7a:93:21:ba:11:
53:39:04:b1:52:e7:3c:03:ef:34:5e:bb:dc:8b:d6:e1:8a:0e:
60:af:26:86:e3:63:e5:8f:ae:39:5f:a1:a9:48:58:35:6c:1a:
12:7e:10:54:14:8a:75:78:a3:6c:29:8e:8b:37:cb:71:4c:c9:
60:2e:05:20:14:e8:e0:22:54:df:5e:09:91:63:2f:5a:b3:5f:
40:ae:86:c3:9d:8c:0c:14:55:19:93:16:d0:a6:0e:56:9e:2d:
e1:8f:df:a9:cd:e1:11:cb:e1:d7:ce:8e:4a:13:d2:46:ae:73:
78:32:6d:49:63:50:ca:05:4a:1a:78:91:9c:74:9c:52:5e:b9:
79:af:2f:bc:18:a5:2e:54:1b:ad:8c:62:ea:14:f8:1f:84:a0:
bb:02:5d:93:ed:1d:6e:ee:72:6d:19:0c:99:56:6e:19:13:63:
9c:b5:39:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:02 2025 by rpki-client