Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f9d56ff-5626-326c-a329-adf02c48abdd.roa
File: 6f9d56ff-5626-326c-a329-adf02c48abdd.roa (raw, json)
Hash identifier: Y7bQxniu1WFCknrRVR5aOa4dn1bjkNlQTypOI4q/PiE=
Subject key identifier: 38:9D:2D:30:0B:DB:3C:DF:D9:5B:5E:13:F9:5B:C2:B9:AB:59:81:28
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D7D3FFA3DBD0FE2EF6ECF7680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f9d56ff-5626-326c-a329-adf02c48abdd.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Thu 12 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:3f:fa:3d:bd:0f:e2:ef:6e:cf:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : May 12 04:00:00 2022 GMT
Subject: CN=e5b2cb23-b224-4bda-af3e-53def69a1a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:d0:49:18:98:e2:7a:8f:ee:32:de:c2:c7:
14:6b:83:d7:de:84:9b:9c:e0:7b:1f:20:3e:83:f2:
b0:a3:14:bd:e7:09:26:8c:7f:84:73:e9:6c:3f:d9:
e7:ff:3c:fd:a8:81:b8:00:1d:5b:b6:36:57:98:4d:
c6:b8:a8:50:f2:00:3d:3f:c7:87:de:3d:d4:22:7d:
05:9b:c1:dd:b6:0c:a4:f6:8b:79:2f:6b:26:50:8c:
78:6d:ed:a8:f4:a0:17:8b:38:bf:58:d0:c5:55:12:
44:08:64:af:2b:76:5a:65:d8:50:b7:b2:6d:40:9b:
ff:1d:32:37:cb:8a:b1:52:45:88:ef:1f:d2:be:64:
de:6b:69:c3:55:2f:4b:dd:02:24:b9:b6:3f:d2:ad:
48:4a:68:32:31:34:39:24:45:a5:67:82:19:e1:a4:
5a:3a:e4:82:df:2c:94:34:42:55:5e:ae:d7:66:d1:
79:55:95:db:c0:c5:c7:be:f1:d6:f7:87:81:8e:d7:
fe:4e:66:c6:4d:38:e7:b9:93:f7:86:4f:55:c2:63:
7f:41:0d:36:af:52:b3:8d:33:1b:b6:34:10:ad:76:
59:83:0a:c9:5e:1b:f0:ed:68:cb:6f:dc:2b:de:da:
7b:fd:ef:08:02:46:b9:6d:7e:85:d1:7c:f8:8e:58:
11:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9D:2D:30:0B:DB:3C:DF:D9:5B:5E:13:F9:5B:C2:B9:AB:59:81:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f9d56ff-5626-326c-a329-adf02c48abdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.22.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:9c:f1:aa:62:4c:ff:33:8d:c7:78:5c:f0:0f:c3:b9:27:62:
d9:79:e6:3d:10:c7:6a:e4:d6:50:3c:de:ed:61:7e:66:69:2c:
5a:2c:79:ba:67:58:a0:b3:95:df:1a:bd:dc:da:64:76:3b:c2:
da:e9:25:39:26:2a:aa:14:04:3a:63:78:26:d2:53:68:bb:8a:
94:12:86:23:d4:a9:6a:15:57:e8:00:fc:ef:46:72:08:69:a0:
6c:fb:62:fe:80:ef:08:6a:83:22:d3:59:6f:ea:fc:04:e4:f4:
74:d5:15:7c:64:dd:fd:9c:02:ac:12:9c:90:e7:1a:83:d7:c7:
b7:c3:0d:05:eb:a8:b3:35:6c:f4:9e:af:69:45:ba:66:b8:1f:
2a:55:29:a7:67:59:59:13:30:25:d9:34:07:dd:a1:f0:29:bd:
ef:92:91:db:b1:3b:64:65:5b:4d:af:75:32:3b:72:d7:fb:8f:
c7:ef:00:e4:b8:60:c7:f5:0f:cd:9d:52:e0:93:50:b8:28:a2:
72:49:39:53:97:4c:4e:96:fd:b6:4d:f7:bd:dd:f2:b3:0c:07:
3f:fb:47:14:fa:7c:eb:30:32:a8:cb:24:bd:44:c2:e5:b2:26:
7b:9b:90:36:00:15:8d:ce:e3:10:f6:51:85:7f:32:2d:86:58:
f0:9c:8d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:43 2025 by rpki-client