Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7457f4c1-65d5-38b5-bd03-aaaa75db9865.roa
File: 7457f4c1-65d5-38b5-bd03-aaaa75db9865.roa (raw, json)
Hash identifier: F/8alseIXMIq5QHxoHM8MnavbOVPKGKqyrhDuFWVnpI=
Subject key identifier: 83:81:CE:78:FD:1C:F8:4D:E0:95:C2:65:AB:53:23:91:65:CB:9D:03
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DD46E8B9D66BBDF8501C6BA60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7457f4c1-65d5-38b5-bd03-aaaa75db9865.roa
Signing time: Sat 07 May 2022 12:00:00 +0000
ROA not before: Sat 07 May 2022 12:00:00 +0000
ROA not after: Sun 12 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d4:6e:8b:9d:66:bb:df:85:01:c6:ba:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 7 12:00:00 2022 GMT
Not After : Jun 12 04:00:00 2022 GMT
Subject: CN=31b7176e-f641-4dff-92a6-cd7f70b6cf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9d:de:52:f2:df:cb:8b:af:76:79:13:11:12:
25:7e:55:6b:ef:ba:b7:0e:7d:82:a8:21:67:c6:36:
be:7f:2b:53:78:74:70:56:99:d6:1d:2a:ae:50:2e:
d4:d1:84:a8:dd:73:2f:72:22:c3:16:a9:7e:6e:c0:
b5:4e:dd:4f:5a:77:7f:0e:e8:f7:21:be:5b:b4:bc:
a0:13:36:b7:ec:33:61:8a:84:30:da:0b:00:2c:d2:
08:9f:03:71:8a:87:27:c1:5b:2a:8a:13:72:82:a6:
ef:3f:60:6d:81:78:9c:26:0d:65:00:6d:06:57:76:
cb:df:1c:65:6e:22:24:cc:e9:50:62:4b:8f:ff:62:
34:e7:39:14:ea:9b:7c:1e:82:bc:0b:23:0c:43:ea:
29:2d:eb:69:04:a6:9f:37:20:f7:26:d9:92:7c:38:
c2:c4:2c:a8:a5:bf:da:a0:4c:39:0f:7e:5f:1d:a5:
b3:d3:15:ee:74:f1:bb:b9:4e:e0:28:55:fd:d0:ee:
e5:fb:ad:d2:23:17:af:6d:4e:4e:1b:89:04:e4:6d:
db:78:22:cd:2e:f7:b6:e1:ec:4d:33:ce:63:96:df:
9f:4b:fc:53:1b:e8:dc:fc:c7:39:ba:1a:72:24:af:
e3:f7:e8:bc:46:94:ff:1f:27:b7:bf:2a:e9:b9:9e:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:81:CE:78:FD:1C:F8:4D:E0:95:C2:65:AB:53:23:91:65:CB:9D:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7457f4c1-65d5-38b5-bd03-aaaa75db9865.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:a2:43:0f:57:25:7d:12:51:87:ef:a8:fc:51:ac:3d:20:c4:
8c:ad:9e:7c:98:72:c8:00:07:bf:9e:56:63:f4:a8:1a:aa:0a:
c7:39:e0:1a:7b:10:48:98:f7:3f:83:c4:85:16:d5:b8:10:20:
77:db:d4:a7:a0:76:3c:19:ea:91:23:de:e6:97:c9:a7:7e:81:
1b:46:e5:8b:7d:59:e3:29:ac:57:a2:24:50:89:8a:74:f1:f3:
29:ef:66:cc:4c:53:19:bf:ed:ce:33:92:0c:e1:ab:ba:15:c8:
3f:bd:ed:de:5c:1c:02:36:f4:a5:44:0d:09:7b:a2:29:4d:0e:
18:6c:e2:71:c4:e1:7e:0e:89:48:9b:df:f5:35:95:e5:41:da:
35:8e:65:24:d8:2a:05:5d:4c:18:a3:70:cf:fa:f8:09:ff:23:
ee:ff:b6:d4:65:0b:e1:bb:9f:9a:82:73:5c:a9:34:fd:15:ce:
92:21:18:ae:5a:46:fb:dc:b6:71:9b:07:f1:df:9c:bf:e8:dd:
5f:e8:c3:37:9e:67:b0:07:48:0a:74:39:42:4f:61:6d:d7:75:
42:f5:50:15:e2:86:4b:20:cb:a0:bc:b7:eb:d5:0c:5f:2b:21:
ed:82:ef:8c:fc:13:07:ec:2f:69:8d:2e:fa:ce:f7:05:6f:64:
5c:3e:cb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:22 2025 by rpki-client