Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71064c23-dfad-3cbf-bea4-2a1147173381.roa
File: 71064c23-dfad-3cbf-bea4-2a1147173381.roa (raw, json)
Hash identifier: NE+oBpoU7js9S1yGTMwd3Mj+aPssZe23TYaiyP2/QAg=
Subject key identifier: A1:06:50:F9:F0:A6:85:D3:57:7B:D3:AA:AC:F0:E3:9E:B8:1A:56:E3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584067A162D8F4D32C992979D200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71064c23-dfad-3cbf-bea4-2a1147173381.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.89.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:67:a1:62:d8:f4:d3:2c:99:29:79:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=51738546-b4e5-48e7-b2f6-7364931f920f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9e:41:dd:40:30:7a:96:8b:f1:69:ab:87:39:
67:3a:e7:b1:3a:85:77:16:18:dd:48:01:c8:4d:69:
13:a2:ea:52:fb:5a:ed:73:47:ba:72:9c:89:73:23:
30:b2:c4:fe:73:99:0a:64:ad:6f:78:4f:6c:93:58:
38:58:86:7e:e6:27:19:85:ba:c1:a4:31:8e:a0:ba:
3f:94:b2:72:6f:3a:80:bc:fc:37:28:b5:7d:15:e2:
29:22:47:7d:04:3b:77:ec:ef:68:39:bf:91:a5:c6:
06:b6:c8:fc:fe:48:68:c4:78:db:39:d6:10:b0:2a:
76:7c:dd:ef:06:14:b0:d1:24:b3:58:11:d5:c9:ca:
4c:3a:79:16:6a:da:cd:dd:08:c3:90:61:f7:23:a9:
e7:2b:12:7d:44:01:bf:d6:af:e9:66:9b:50:c7:62:
e9:01:87:a5:57:74:45:b4:07:e6:24:a4:d9:16:01:
87:d2:11:03:d5:c0:30:52:ca:f5:69:ee:8a:a9:33:
c5:e8:d6:38:3c:92:19:11:cc:86:34:6a:6d:31:46:
ef:88:ce:da:f2:ba:68:2f:cd:46:62:9e:27:67:8b:
e6:8c:94:7c:e5:f3:57:4d:0c:40:e0:c0:d3:d7:87:
2d:74:27:f7:21:de:7d:3e:ec:fd:8b:bf:a5:fc:1a:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:06:50:F9:F0:A6:85:D3:57:7B:D3:AA:AC:F0:E3:9E:B8:1A:56:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71064c23-dfad-3cbf-bea4-2a1147173381.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:77:5e:ec:a2:f7:cc:68:98:2e:64:cd:68:50:c2:dd:11:3d:
29:86:41:b7:49:40:90:fb:cd:52:08:4b:12:4c:5a:04:07:9a:
65:5f:47:0e:1b:4f:eb:1a:1b:58:a3:17:d8:24:81:3a:99:31:
2c:d5:6e:90:13:3b:7a:dd:76:3b:a5:fd:a6:f1:36:76:64:d1:
c6:4b:bd:4e:f1:96:7f:18:08:ea:65:a6:a1:92:50:b0:04:30:
3d:c0:70:a0:f3:37:b1:69:85:02:db:d4:25:12:1a:de:06:ca:
e0:64:6c:6c:c5:c1:3d:be:a4:ca:9c:01:e3:44:74:ba:c8:39:
12:62:ca:5b:2f:1b:f4:bc:4a:50:9a:98:9b:31:e9:f2:68:51:
41:f1:f9:5c:b8:53:8c:ed:4a:21:83:22:dc:7f:84:32:f7:25:
fc:93:b5:68:fc:7c:a2:50:e2:3b:9b:d6:92:bf:15:52:10:95:
99:53:38:e0:01:27:0c:60:7b:7a:d2:96:52:21:23:96:f8:f3:
3c:a9:76:ff:71:cc:42:f4:4f:6f:05:66:bc:7c:52:b0:52:25:
1d:d4:08:51:dd:40:b1:93:cc:00:79:55:a1:00:3e:e5:46:bf:
b1:8f:ae:b9:c7:8e:0b:74:59:df:19:32:d7:fa:19:b8:62:48:
c5:5a:71:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:42 2025 by rpki-client