Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63f01a6e-dd38-3de0-8e75-2b8998f706e6.roa
File: 63f01a6e-dd38-3de0-8e75-2b8998f706e6.roa (raw, json)
Hash identifier: x2G9FldVD2lkwUGFg49Wik6v5RgXFfeOIsaA+D45BNQ=
Subject key identifier: 2A:FE:8F:AF:28:DD:88:4E:0A:F7:7B:E2:A9:BC:2A:A9:F7:22:F8:DC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F2C13FCC302D5C8754733EA00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63f01a6e-dd38-3de0-8e75-2b8998f706e6.roa
Signing time: Wed 07 Sep 2022 12:00:00 +0000
ROA not before: Wed 07 Sep 2022 12:00:00 +0000
ROA not after: Thu 13 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.24.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2c:13:fc:c3:02:d5:c8:75:47:33:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 7 12:00:00 2022 GMT
Not After : Oct 13 04:00:00 2022 GMT
Subject: CN=c32139a9-e26a-46f6-8c29-fc0feb0f905c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:89:93:4b:cc:c9:2e:af:a2:4f:5f:ac:68:ea:
00:88:c2:38:a3:03:bb:28:f8:80:e7:2f:72:8a:36:
fc:27:e2:cc:54:52:79:e3:ad:24:04:4b:02:28:13:
b4:b0:97:67:36:d1:5b:57:d0:8d:c1:f7:bf:99:ab:
36:61:0a:35:0f:8e:51:9f:1e:45:24:b8:ba:2c:f3:
3a:40:af:20:4e:91:f9:41:e5:0b:cb:b0:8a:f8:26:
ba:90:d8:d6:23:fb:fb:74:70:b4:d3:13:a2:3a:2a:
fc:7e:ca:7e:a7:f6:4f:d1:c9:5e:bc:6a:93:0e:a5:
7a:27:dc:71:ec:50:82:38:30:71:1a:ed:5e:93:2a:
be:98:e1:d8:2d:07:ad:5e:40:9d:b6:4e:2d:f1:59:
82:35:01:36:e7:7e:fe:18:7a:2a:a5:1a:ca:32:fb:
57:d7:fd:cf:8e:0f:35:b8:5c:39:34:2e:6d:9a:b0:
1b:79:6b:e5:da:cf:44:38:1d:87:3e:c8:98:79:e7:
23:51:92:be:14:81:2b:45:11:3b:b8:45:ca:9e:09:
22:a7:ff:3e:45:80:d6:e8:4b:31:99:41:7e:39:45:
44:82:e2:be:35:e1:3f:a0:04:ba:d7:4a:58:5f:cd:
6c:58:f8:83:01:1c:c9:a1:0f:a2:03:e3:94:60:5c:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FE:8F:AF:28:DD:88:4E:0A:F7:7B:E2:A9:BC:2A:A9:F7:22:F8:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63f01a6e-dd38-3de0-8e75-2b8998f706e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.24.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:0e:94:ab:84:0c:3c:d3:8b:39:84:db:f3:c3:d0:52:36:6e:
46:1c:4e:59:1c:bc:ed:a9:c1:87:38:a8:b5:21:99:c1:c0:31:
37:1c:ed:88:0a:28:ac:68:1d:12:1e:b6:53:e1:fa:8a:7e:bf:
ef:87:17:27:39:2f:4b:2c:a0:20:9f:3b:1a:16:bf:6e:7e:df:
05:bc:ea:ae:ac:4a:ac:83:16:62:60:53:ab:ea:b8:73:b0:6d:
76:5e:eb:cd:49:29:34:e2:09:36:1a:6b:6d:cc:20:d3:c6:9a:
87:26:25:7c:41:4b:86:45:75:24:fe:cc:ad:b5:08:e7:98:61:
06:d5:95:b9:6e:ca:e9:14:88:45:03:3c:bc:47:d6:12:e3:f6:
81:82:34:b7:0e:3d:06:a5:c7:12:74:f8:86:a6:7e:fc:66:50:
14:57:95:5f:88:2c:f6:a4:45:0d:f5:8c:78:77:40:c4:16:34:
7a:1f:f4:26:ee:c1:dd:e7:33:84:0b:e5:6d:22:bc:d4:e2:03:
b0:ed:18:72:bc:24:38:16:82:74:d9:39:dd:ec:27:35:55:fe:
26:12:90:30:58:1e:93:d8:54:0b:ef:f6:f1:d4:1c:b9:c0:8b:
67:6d:65:43:96:65:19:8a:91:8a:93:e0:8b:d0:ea:4e:c6:ae:
70:77:60:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:28 2025 by rpki-client