Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b554a4b-b9d6-3095-b9f0-a6d0317d399b.roa
File: 6b554a4b-b9d6-3095-b9f0-a6d0317d399b.roa (raw, json)
Hash identifier: Mw0qbjt+adQ4C2Cpd1EYJucf9jZw5ZDJ46pSfmrB9hM=
Subject key identifier: C2:6D:E8:A5:55:5F:BE:3C:AA:AE:33:0A:57:CC:A4:7F:15:FC:6A:C0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBA1767A033DECC2FF0E11300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b554a4b-b9d6-3095-b9f0-a6d0317d399b.roa
Signing time: Thu 27 Jan 2022 05:00:00 +0000
ROA not before: Thu 27 Jan 2022 05:00:00 +0000
ROA not after: Thu 03 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.121.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ba:17:67:a0:33:de:cc:2f:f0:e1:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 27 05:00:00 2022 GMT
Not After : Mar 3 05:00:00 2022 GMT
Subject: CN=40f7ca5e-c9ff-46a5-bc43-7690a59b2418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:99:d2:7c:c2:f1:36:a7:d4:73:fc:ea:af:72:
33:6b:8e:c6:1a:95:8e:a0:63:d2:30:48:85:12:85:
de:33:15:0d:5b:d3:85:b1:ae:3e:20:8d:52:ee:94:
1c:79:c6:1c:17:15:4d:30:cb:1c:e5:8b:db:f2:aa:
de:d2:8b:22:68:86:65:e1:aa:9c:40:b1:59:5d:60:
14:a5:f1:92:87:58:4a:06:82:b4:0f:cc:97:4b:d7:
ea:c8:92:0f:24:a7:72:ae:1b:3d:17:f9:1a:1f:2c:
a1:75:d9:dd:dc:69:11:99:bc:78:b3:02:fb:e5:06:
c4:1a:bd:c1:85:1c:e5:22:5b:4f:ff:aa:da:3f:21:
f7:43:8b:36:fd:66:32:5e:bd:a3:fb:79:26:6a:ef:
34:41:fe:d0:7e:1f:a4:50:29:95:a4:65:4e:08:8b:
d3:f1:f7:d0:22:e8:03:f8:c7:38:68:2f:b5:d9:1c:
f6:19:97:b3:7e:82:2d:21:97:ab:07:c6:d7:13:b4:
88:c1:af:44:a4:cb:db:00:63:c0:54:04:f9:95:f8:
20:68:87:16:c4:27:4c:59:52:e6:c3:94:b8:5b:a6:
c2:6b:f5:57:5e:98:e2:1a:b6:69:57:1b:80:50:44:
75:a6:57:95:a2:75:99:fd:24:3a:97:f2:8e:bc:8f:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6D:E8:A5:55:5F:BE:3C:AA:AE:33:0A:57:CC:A4:7F:15:FC:6A:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b554a4b-b9d6-3095-b9f0-a6d0317d399b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.121.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:5f:fe:47:1e:8f:da:3c:2b:ee:00:67:83:6b:7f:ad:6a:b6:
b9:ac:58:e6:b0:cc:1c:be:db:8f:72:97:e2:8f:93:e1:cf:d7:
21:66:76:9b:39:d8:3d:2a:4b:be:86:35:fd:11:ba:79:81:bc:
6d:cb:12:b4:52:ef:f3:0a:e6:8d:c0:eb:cc:c6:97:7b:73:9f:
25:a5:62:22:96:e0:dc:fe:fd:26:bd:e1:c5:ac:df:8e:b5:d8:
db:ce:c0:00:9b:b0:3a:92:75:4f:5b:2d:b8:4a:ad:a0:57:40:
00:98:c8:5f:4f:ca:52:cf:24:09:ee:f3:eb:e8:fe:0f:d9:b1:
11:c7:aa:d0:01:c1:c3:ef:f6:19:49:1b:7d:e5:6e:c1:98:9e:
c9:b9:35:ed:1c:9b:3b:61:40:74:83:80:57:c5:b7:84:79:b2:
bb:44:19:f4:6a:f9:76:1c:f3:a3:d9:e0:17:a0:24:c8:2f:d7:
b2:4a:74:e7:09:a4:2d:13:31:9b:22:8c:b2:1a:e6:82:2f:e6:
43:fc:18:bf:40:b5:15:b1:c9:f1:9f:fd:ba:14:7e:da:5f:28:
d5:fc:a4:75:50:0d:5e:05:87:69:18:1e:e8:15:82:31:ba:33:
38:13:28:fa:1c:fb:41:80:35:04:c3:5e:bb:ed:f2:fe:1b:64:
77:d6:1b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:00 2025 by rpki-client