Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7796e41a-a7f3-38b8-a5fb-b683ee5a1191.roa
File: 7796e41a-a7f3-38b8-a5fb-b683ee5a1191.roa (raw, json)
Hash identifier: QwouJ/ac1IWEYb4eyzp5EaV3TE9z+DgUBLaoQRnu+T0=
Subject key identifier: 1F:48:84:C2:94:CC:F8:24:81:DE:07:E7:8B:89:46:82:41:43:1E:9F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E4165B289DC81F0294BF2A060
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7796e41a-a7f3-38b8-a5fb-b683ee5a1191.roa
Signing time: Wed 15 Jun 2022 12:00:00 +0000
ROA not before: Wed 15 Jun 2022 12:00:00 +0000
ROA not after: Thu 21 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.29.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:41:65:b2:89:dc:81:f0:29:4b:f2:a0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 15 12:00:00 2022 GMT
Not After : Jul 21 04:00:00 2022 GMT
Subject: CN=72819c4a-f37a-4917-9bf0-1ef6d088def3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:17:79:fc:f8:1e:5d:69:f8:3e:57:21:ca:
fe:cd:6f:41:1a:bc:93:6f:ea:3c:7e:c7:17:60:9c:
2f:ae:a2:93:8a:cb:f5:c4:33:df:db:d7:cb:1f:46:
33:1a:35:e8:3f:da:3d:37:f7:10:ce:d3:46:50:f5:
84:b7:8c:e2:44:e2:1c:42:40:7b:c7:00:be:27:e2:
3e:ba:a1:e2:6b:f2:98:90:30:22:cc:09:ca:e5:28:
c4:77:a8:92:78:43:4a:ca:b1:98:51:7d:61:e9:50:
fd:26:04:ab:ff:af:6e:eb:9b:f6:17:e1:79:b5:11:
d1:5a:83:e5:4b:05:a7:fb:13:b7:eb:10:17:bf:45:
55:38:c9:76:4c:49:74:e9:0c:1a:a8:df:de:7c:52:
fc:83:cd:34:04:2e:44:f3:cf:a3:69:62:fa:61:98:
af:b7:69:75:ef:65:47:c5:07:53:b9:15:51:51:4a:
8d:3e:a0:1c:5a:50:cd:6c:0f:a6:99:5c:f2:dc:56:
5b:1c:c8:db:cc:a7:83:e2:b5:ca:b2:f4:ef:3e:af:
89:4a:7b:2f:2b:6e:a5:b8:d9:2d:cc:3f:1e:70:e1:
76:17:95:7b:94:3d:9b:fe:5d:3b:d9:07:1f:b4:34:
30:04:24:d3:85:5c:7c:2e:7a:8e:07:67:03:ca:f4:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:48:84:C2:94:CC:F8:24:81:DE:07:E7:8B:89:46:82:41:43:1E:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7796e41a-a7f3-38b8-a5fb-b683ee5a1191.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.29.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:5a:3c:32:c7:e1:fa:57:2c:26:9e:91:d5:78:3f:ff:3b:b7:
6e:2e:9c:29:92:e0:11:bf:e6:a4:f8:da:81:f6:7b:f3:01:cc:
cb:9b:36:20:8a:9f:b3:44:7d:fa:28:2f:4c:fd:f4:ce:5f:16:
07:54:5c:d0:dd:ca:e8:fd:b9:c6:db:0e:7d:ab:c5:1f:6f:7f:
66:d7:59:1c:6e:9c:9d:08:ef:97:c7:e8:ca:89:a0:a2:5e:8e:
4b:63:a0:6a:04:b4:41:57:58:d6:f4:bf:9a:cc:65:d6:2b:70:
0e:3e:fa:8f:92:69:65:d2:f1:bd:da:d5:2e:c0:90:ad:e2:40:
91:21:a2:55:2b:0e:e6:e0:6a:05:37:63:89:25:88:f0:a2:6f:
49:9e:ef:97:a1:93:db:5d:b1:c8:78:22:19:3e:99:8d:d6:c5:
96:d4:55:24:13:75:92:d7:48:d3:ee:c7:21:c4:72:f3:ce:df:
29:06:e8:c9:e5:f1:32:52:b9:09:f5:91:f0:6f:0c:72:e3:82:
78:bf:32:61:d1:5d:8b:bf:26:3c:9a:a7:46:ac:4d:3c:9b:16:
05:1c:41:0f:26:50:09:8b:5e:78:7c:e9:c8:ce:04:83:42:48:
3b:e8:22:d8:7f:84:37:8d:4a:a5:59:2f:97:23:90:5c:d0:b5:
1b:fc:a4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:02 2025 by rpki-client