Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6675cc0c-b401-3959-8e5d-e90214a308d3.roa
File: 6675cc0c-b401-3959-8e5d-e90214a308d3.roa (raw, json)
Hash identifier: lWD6W9CAug/e98FG9PlGCd4RO8ZJSiqmg/i+kOxcOyQ=
Subject key identifier: 21:7A:19:CA:3B:F9:6D:A0:E1:5F:5C:EA:13:32:1B:24:3A:A7:62:F4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6E91C28D4722ED4F11C46F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6675cc0c-b401-3959-8e5d-e90214a308d3.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6e:91:c2:8d:47:22:ed:4f:11:c4:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=7825caa2-2714-4402-8ea1-2443adc53df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d6:2a:fc:e8:c7:ab:0b:57:fb:c4:55:68:66:
f9:0d:9e:36:3c:60:a6:ad:72:a3:d9:5c:31:c0:a6:
ed:94:ab:5a:62:9a:61:1a:87:e8:8c:b0:f7:ce:d1:
38:44:5a:ba:84:39:07:bd:ac:8d:a0:16:bf:b9:fd:
cc:46:55:84:a9:7f:94:2c:2d:2a:fa:86:d5:a6:ef:
cc:87:f8:3f:67:5c:33:5a:8f:98:c1:91:08:b8:00:
dd:69:ef:23:ed:b1:4e:26:59:c7:fa:e6:39:c7:48:
0e:d0:aa:a5:92:fd:fc:4a:21:81:38:81:bb:16:1e:
8f:5b:0e:2f:70:dd:14:0a:d0:95:1a:5c:40:1a:1c:
03:b1:7c:bd:7f:1d:18:94:c3:b1:27:31:84:fc:3f:
bf:11:7e:27:fa:1c:82:03:2f:ff:2c:ea:24:11:43:
03:ed:0a:50:b1:77:33:3d:fc:0f:03:da:d5:f1:cb:
4d:28:a4:d0:bd:b3:6a:cc:cf:65:90:4a:31:9b:6c:
48:d4:d3:f2:c8:2b:00:11:95:14:87:6b:6a:48:0e:
a9:04:fa:8b:13:f2:ba:db:cf:9b:5d:30:46:b2:70:
86:7f:50:85:01:de:36:dc:22:20:56:02:96:2e:f3:
5c:33:df:4d:59:dd:0e:34:d8:56:40:34:4b:0c:ff:
f4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7A:19:CA:3B:F9:6D:A0:E1:5F:5C:EA:13:32:1B:24:3A:A7:62:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6675cc0c-b401-3959-8e5d-e90214a308d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:d9:0a:d2:c7:87:01:0d:db:fe:d8:31:0e:8f:c1:10:ab:2a:
15:41:4e:2e:b5:c7:c5:1b:cd:62:0d:06:30:17:18:b7:19:0c:
57:de:f3:2b:26:de:5e:9e:9d:56:88:5e:bb:da:41:ef:4b:e5:
d8:c6:b5:ad:dd:3a:96:e0:dd:7a:1f:bd:7a:76:38:e0:bd:4c:
c5:24:ba:5c:1f:3b:d7:f7:18:34:2d:95:a7:77:ba:1e:d4:c5:
23:cf:16:e3:e6:e5:19:97:ee:fe:0e:7d:c5:4e:9e:4d:9a:0c:
89:d8:ef:c0:d1:e2:48:24:b8:b9:70:37:2e:e8:0b:25:07:ab:
ec:f4:4c:73:5b:a2:67:0a:f1:1a:7c:26:97:d3:8c:4f:b4:27:
b5:f7:13:ad:f8:f9:14:d2:af:0d:1d:8b:a8:c4:59:25:a2:b9:
bf:e4:c7:c3:22:99:c4:1d:9d:e9:cc:e4:c6:43:eb:43:33:1e:
0d:d4:0c:39:c4:b9:46:43:34:b9:d0:c5:91:0d:89:99:cf:e3:
b7:18:d4:a0:0c:06:c7:94:30:01:c9:4f:f0:17:02:ad:8a:bc:
6b:f5:33:a0:dd:95:d3:54:2c:13:4d:23:e1:f5:ba:fe:f2:b8:
eb:9b:3d:e7:a0:4f:de:18:17:a5:5d:e1:ef:61:7d:75:00:69:
2b:6a:52:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:51:38 2025 by rpki-client