Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bfc21f4-45bd-3949-b27a-ec2a967d8911.roa
File: 7bfc21f4-45bd-3949-b27a-ec2a967d8911.roa (raw, json)
Hash identifier: Z7e1dkqBmEl7Uca/RYMF8KimUiF9U6w+OQTTXsBOUik=
Subject key identifier: FA:5B:50:8E:52:0E:DC:FF:E5:35:D8:A4:A0:30:A1:57:B8:29:D5:B6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858407307CADC4F5F2CB02DF35380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bfc21f4-45bd-3949-b27a-ec2a967d8911.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.125.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:07:ca:dc:4f:5f:2c:b0:2d:f3:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=4a84fe9e-d43d-4075-9e6e-140fd02cc470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:06:2c:23:e9:73:54:18:35:f3:cd:97:33:7a:
f6:af:a7:32:1e:0a:99:69:2f:90:6a:7b:d7:86:70:
95:7a:0a:83:60:90:bb:01:46:65:56:3f:b3:fd:cc:
03:8a:7d:30:5f:81:92:24:3e:36:36:bf:15:78:58:
c0:45:c2:6d:56:55:b7:b8:f4:7d:3e:56:be:99:19:
74:7c:65:c5:e3:df:74:88:6a:30:f1:03:1a:a5:99:
38:3d:3b:40:6f:2b:05:d9:e5:78:14:d5:3e:3f:43:
50:2f:23:e6:61:de:c9:7a:73:75:a1:d3:3a:51:3e:
b7:88:7c:d0:a3:7d:c6:98:b2:3d:c1:0c:3a:dd:da:
08:93:12:0b:16:96:60:bc:22:53:41:cf:27:c3:bd:
06:25:aa:67:70:e9:28:07:12:9a:7c:5a:29:50:de:
d7:08:88:99:d5:19:f0:36:ac:08:58:17:45:b4:ab:
02:7a:7f:56:21:2b:b7:dd:a8:8d:dc:b7:56:c2:3e:
9e:10:e6:9b:8c:db:0c:e4:89:57:65:30:b4:6e:19:
5a:a3:26:2e:d8:95:ba:03:4b:80:aa:48:24:c1:b9:
18:5e:b9:83:6a:9c:fc:ae:44:2d:94:94:2d:30:aa:
24:c1:5c:aa:43:71:fe:bb:21:78:80:b2:86:ac:e7:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5B:50:8E:52:0E:DC:FF:E5:35:D8:A4:A0:30:A1:57:B8:29:D5:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bfc21f4-45bd-3949-b27a-ec2a967d8911.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.125.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:71:37:53:ea:bf:19:50:3c:8d:7d:2b:05:c1:91:26:7d:9f:
99:fe:42:44:56:20:a4:a0:9e:4b:28:0d:b8:b0:ab:c2:cf:dd:
f7:fd:8c:9b:82:ed:ab:20:af:d9:ff:f5:ca:29:13:9a:6e:31:
b3:2d:ea:18:33:f6:7c:5d:12:fd:20:d8:52:f5:e3:19:eb:c2:
5e:cf:fc:b6:02:cf:e1:14:46:9f:3d:84:b5:e3:fc:5e:90:d2:
1d:d7:a2:8a:b0:0b:45:6f:ee:0d:19:55:d2:2d:3e:6b:42:61:
dd:64:42:d8:90:90:1f:8c:5e:29:f3:ae:30:24:08:54:e6:0b:
06:4e:7f:11:f6:19:a9:2e:ff:02:53:bb:67:c0:4a:05:19:81:
c7:f4:11:d0:f1:c4:08:a9:b8:36:c8:79:ea:17:e2:44:e1:0a:
88:00:99:27:eb:ff:d0:20:b8:f9:3f:22:b6:fb:bd:81:5a:63:
f5:87:a5:a4:ef:63:67:82:14:b1:c2:3b:90:50:3a:c7:f3:1d:
5e:93:2f:8e:5a:18:74:bb:cd:84:72:f6:79:11:de:42:6a:d3:
09:e0:20:f2:c6:54:76:74:0e:e5:da:ee:7a:5a:bc:9f:fd:89:
a6:c2:a8:26:2d:3e:d1:8f:c7:bc:11:11:00:3e:ed:94:88:cd:
3c:f3:f9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:05:10 2025 by rpki-client