Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/654b8e3a-da2c-3518-83b9-c88304ff5711.roa
File: 654b8e3a-da2c-3518-83b9-c88304ff5711.roa (raw, json)
Hash identifier: 7Bz6AxvvyQrL+7j6a4fDNE8yYHVbjx9T0c/pOJuOs2U=
Subject key identifier: 6A:9A:CF:EF:57:3F:85:48:2F:3F:CA:CE:76:C8:B2:9B:4E:34:3E:CA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F04781AABB5847CE8CA466C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/654b8e3a-da2c-3518-83b9-c88304ff5711.roa
Signing time: Wed 24 Aug 2022 12:00:00 +0000
ROA not before: Wed 24 Aug 2022 12:00:00 +0000
ROA not after: Thu 29 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.91.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:04:78:1a:ab:b5:84:7c:e8:ca:46:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 24 12:00:00 2022 GMT
Not After : Sep 29 04:00:00 2022 GMT
Subject: CN=5d01249b-7062-4d03-ace8-df72b1771a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:04:8f:00:52:cf:83:ea:e2:a4:cc:9d:ba:ed:
04:51:d5:7e:b9:60:c4:76:cb:a1:5c:8c:da:db:a4:
79:73:75:05:f2:30:a6:37:63:0e:c4:3c:4a:98:24:
c6:94:a2:fe:e6:c9:13:f7:a5:71:9b:f1:25:4b:7a:
75:26:a0:fc:c9:79:94:59:cf:d0:99:fd:17:66:e3:
41:d1:c5:5c:91:a0:44:29:4a:cb:91:34:b0:b2:90:
3c:6c:5b:df:42:68:73:14:1c:b8:0b:50:5f:08:27:
66:a5:4b:0d:77:84:f5:50:2c:46:11:9c:87:d5:b7:
96:8c:52:b9:34:67:19:6c:98:18:df:c8:38:7f:5d:
6d:cd:7c:11:4c:33:d8:37:f6:e1:a2:c5:15:d7:4a:
c0:af:76:0b:75:34:a1:be:97:ab:fd:b6:05:7d:21:
89:07:d1:83:fa:2d:e8:f5:b7:b8:58:4a:52:06:85:
3b:ac:fd:45:79:67:ac:cf:d2:db:b8:0c:73:bb:5f:
2d:6f:92:32:77:13:ab:42:26:79:fe:01:f0:69:a1:
01:7b:9b:97:f6:21:5e:ec:60:50:0b:4d:d4:d5:a5:
d6:d9:94:57:46:ee:c8:5a:d1:3f:8a:14:0c:30:bb:
46:f7:d9:1a:32:f0:e3:b7:dc:06:ad:25:12:68:35:
65:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9A:CF:EF:57:3F:85:48:2F:3F:CA:CE:76:C8:B2:9B:4E:34:3E:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/654b8e3a-da2c-3518-83b9-c88304ff5711.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.91.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:57:31:4f:e0:06:8f:de:32:73:71:cc:35:4d:6f:72:7b:31:
33:3d:06:39:b1:50:d5:a0:52:96:9f:82:ff:24:6c:15:d9:ae:
36:57:55:f3:84:db:5f:ad:a5:dc:5d:27:60:c8:56:b3:fd:34:
b4:4d:7e:55:68:0a:61:1e:f1:e7:36:c8:7f:d6:81:68:c9:59:
fb:17:f0:c7:50:53:9f:e7:0e:af:26:87:6d:51:39:e5:98:3a:
18:fe:3c:43:11:77:e2:2a:d3:9b:9b:0b:42:05:88:f3:5d:11:
07:ff:f0:96:35:bd:2e:f2:6b:66:f2:d1:89:4e:5a:82:96:d5:
5e:64:9e:12:66:7e:41:eb:02:e0:ac:3d:98:05:b6:80:38:b5:
5f:3b:3a:3f:b0:f1:c3:20:13:74:37:b8:e0:01:99:d9:af:a1:
96:3b:06:00:90:9e:6f:3c:75:d7:69:13:5c:5c:c3:6f:de:cb:
4d:d2:f4:92:e0:61:c5:f9:8a:47:29:dd:15:4a:83:27:ed:07:
37:2e:43:95:8b:d8:df:b0:91:4a:37:f5:22:11:25:f0:de:21:
ab:ca:48:82:68:62:b4:24:d4:6f:f4:14:f1:27:81:a8:1a:f2:
fc:54:e8:a5:8b:39:57:21:b9:6f:d1:f6:2a:b8:7e:db:16:2e:
8e:86:ce:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:43 2025 by rpki-client