Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a1f63cf-de6e-35d4-829c-c1b8deb36e4a.roa
File: 7a1f63cf-de6e-35d4-829c-c1b8deb36e4a.roa (raw, json)
Hash identifier: QFJ/TMW4yqbpbGZt5144qofJ/b1bpsoZEvO7NdRKZo0=
Subject key identifier: 3F:B8:F7:49:9E:E3:33:6A:99:F1:BF:09:1A:FD:72:14:73:E6:F9:92
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D083AA810E18159E8E7E3FE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a1f63cf-de6e-35d4-829c-c1b8deb36e4a.roa
Signing time: Thu 24 Feb 2022 05:00:00 +0000
ROA not before: Thu 24 Feb 2022 05:00:00 +0000
ROA not after: Thu 31 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:08:3a:a8:10:e1:81:59:e8:e7:e3:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 24 05:00:00 2022 GMT
Not After : Mar 31 04:00:00 2022 GMT
Subject: CN=a3aa0d82-4355-4653-a26a-3a08511d83ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b5:de:23:b6:61:fc:11:29:f0:c4:34:bc:54:
13:9d:6a:f8:cc:1e:86:fc:ac:52:d7:35:f0:a2:ce:
5d:25:90:e8:0d:77:b9:b3:02:19:27:f1:33:d6:17:
19:1f:74:9b:f3:f3:eb:b3:96:82:b1:a6:72:8d:c7:
7f:2b:27:b4:b8:06:d2:f4:a5:c4:a0:be:e7:3d:39:
4d:30:ad:95:3d:c6:34:aa:45:35:98:99:2e:84:6d:
38:50:50:b2:a3:fe:db:5d:70:37:d8:5e:99:75:8d:
cd:78:af:2b:96:80:cc:a0:cb:49:20:f3:eb:3a:95:
be:f5:e8:6d:a4:1c:36:c9:ce:04:7a:4a:ff:29:36:
cd:84:5c:bc:60:da:ed:20:dd:be:ac:3d:2c:d1:92:
c3:3f:93:e0:b5:0e:c7:11:a0:35:2d:b0:bb:04:12:
83:e4:71:08:1e:23:30:80:e7:a2:a0:2d:1f:52:e8:
08:72:21:50:f3:f5:24:55:fe:82:e9:33:3e:38:6f:
b3:1b:f6:3b:23:4d:6f:6c:dd:0e:9f:c0:1a:f3:7f:
9d:26:fc:bb:6c:4d:5e:f9:f4:20:ed:68:14:7c:b6:
23:95:13:b3:09:87:28:cb:da:85:26:6b:39:a9:36:
7b:54:ce:f5:41:9b:50:84:5d:2c:8b:b9:16:64:43:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B8:F7:49:9E:E3:33:6A:99:F1:BF:09:1A:FD:72:14:73:E6:F9:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a1f63cf-de6e-35d4-829c-c1b8deb36e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:e1:57:90:94:ca:be:cb:fc:09:c5:dc:50:31:59:82:ce:24:
b3:0f:70:fc:2c:07:17:9d:99:52:ba:3c:d0:74:61:f6:fe:3d:
d7:10:1c:d0:77:8d:34:89:cd:52:84:3e:10:6e:01:b8:78:69:
82:12:c1:f0:bf:fd:33:4d:8f:01:3e:91:1c:a0:d8:ef:78:2b:
4b:e4:bb:c1:8a:c0:38:3d:21:13:89:74:0a:e5:4e:92:7b:5f:
47:d4:4a:48:73:f4:fa:07:c8:3b:d9:72:07:6e:e1:d2:63:cc:
9d:7d:58:10:a6:12:61:5e:2e:09:85:56:79:09:8d:76:f6:45:
87:fc:eb:82:1a:1f:6c:e4:0d:06:8b:aa:b1:ba:c9:a1:eb:9f:
ce:ac:60:0a:72:a6:98:f2:34:56:7a:bb:5e:aa:71:5a:8f:40:
32:73:62:7e:47:a2:94:e0:76:50:48:cb:7a:ce:10:91:65:6a:
e1:96:28:05:1f:70:0a:97:0a:99:46:ca:fb:f1:0c:c7:b9:54:
52:68:2b:0d:cf:96:c8:d1:34:30:db:42:5e:a8:b6:c4:09:f1:
f0:ad:a8:7e:ab:7d:d8:b0:8f:e8:34:bf:18:72:95:fd:9d:6d:
a5:77:af:f2:7a:7b:0e:45:a4:4a:c2:eb:cb:82:3e:0f:f3:14:
2c:ea:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:58 2025 by rpki-client