Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7344dbde-c782-37b1-aa06-8a899bd32cbe.roa
File: 7344dbde-c782-37b1-aa06-8a899bd32cbe.roa (raw, json)
Hash identifier: w7sMHD91uS8/VZNFeLcoLI04cte25GJ8XqlBziSUEmQ=
Subject key identifier: EA:D9:C3:FA:0F:76:EF:99:84:47:39:46:DD:C6:D2:48:29:5B:A4:72
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DCBD329BAD6DCD5738F853680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7344dbde-c782-37b1-aa06-8a899bd32cbe.roa
Signing time: Wed 04 May 2022 12:00:00 +0000
ROA not before: Wed 04 May 2022 12:00:00 +0000
ROA not after: Thu 09 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.31.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cb:d3:29:ba:d6:dc:d5:73:8f:85:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 4 12:00:00 2022 GMT
Not After : Jun 9 04:00:00 2022 GMT
Subject: CN=2f3f59ac-560a-4524-b2a2-bb8fd321eaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3b:e0:e3:03:e8:c4:89:42:bd:87:ad:df:e9:
cc:75:33:01:47:4f:ab:b7:42:b9:97:d5:f7:d9:0c:
d3:15:43:61:72:da:d6:6f:ed:e6:1a:63:bd:29:a2:
2a:59:29:cb:0d:fb:5a:eb:7d:28:4e:49:c3:14:7d:
97:f3:07:16:46:aa:67:da:ef:9c:bd:41:e0:76:47:
08:84:27:a6:28:82:37:f6:60:c8:3b:47:c2:be:16:
d2:45:83:6e:b5:d6:eb:3e:4d:99:4d:60:55:43:77:
de:ce:83:2a:a4:19:22:a2:53:16:36:4c:68:67:64:
44:6d:49:6f:16:54:a3:d9:08:31:8f:9e:3a:81:ba:
38:0f:a7:52:2a:65:62:7b:e7:69:38:6a:30:c1:b2:
ca:b0:9c:14:8e:15:0b:9c:ec:72:12:8e:8c:e3:9d:
e1:9a:98:e4:47:94:51:ce:b9:44:e2:1c:5b:8a:18:
77:1c:d0:43:58:29:81:0c:b6:8e:c9:2b:50:dd:6e:
86:6d:07:6a:76:8e:41:24:0a:72:da:a1:c9:fa:8b:
7b:e0:04:84:a1:4d:f9:a5:da:be:f1:ca:f6:90:d3:
96:b7:4d:9e:fe:a7:1f:0e:29:39:e4:2f:e8:e3:29:
67:22:79:83:08:6b:4a:b0:f0:3c:6b:04:80:16:14:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D9:C3:FA:0F:76:EF:99:84:47:39:46:DD:C6:D2:48:29:5B:A4:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7344dbde-c782-37b1-aa06-8a899bd32cbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.31.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:b2:e6:a3:52:ae:21:ee:a5:7e:b6:2d:45:c0:42:36:e0:96:
ba:9c:fd:bd:e9:c8:bb:3c:6a:43:3d:34:74:7d:e7:74:f3:db:
7c:8d:0a:a1:03:3f:5b:bd:3f:0b:82:6f:fd:81:4f:25:16:1e:
d7:2c:ce:be:18:c9:ff:4b:0a:bf:49:dd:66:4c:ca:4a:c3:df:
08:f4:e7:a8:51:f5:3a:2f:d1:16:d3:77:a9:79:2c:9a:a7:e0:
f9:71:e1:8c:2a:1d:aa:a9:72:7a:6b:8a:fc:07:da:1f:13:a5:
59:04:8d:f3:db:d2:03:92:ef:83:84:6d:d9:9a:b9:e7:cb:06:
a2:a5:31:52:4b:f5:39:46:be:3f:3c:ef:10:8c:2b:1d:24:fc:
86:a9:74:bf:e9:ff:56:09:73:0b:ea:bc:d7:f7:12:25:93:e6:
a9:ad:c4:f2:36:1c:7b:e2:c8:24:9a:4c:21:da:17:29:42:52:
eb:a7:b1:27:19:14:c5:27:b0:c3:7c:2f:84:1b:de:c1:d8:e3:
2a:d6:e3:23:62:47:3a:3d:06:fe:81:25:5f:1d:fe:ad:27:8f:
da:1b:90:bb:2e:67:b2:bd:89:6f:28:f3:fc:e9:9d:92:24:f6:
a5:e7:ab:b2:d1:95:71:a6:9b:e0:dd:cd:5a:14:7f:72:82:3c:
3a:c1:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:59:03 2025 by rpki-client