Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d340a63-2f53-3a2e-a741-db7516d8c2ee.roa
File: 7d340a63-2f53-3a2e-a741-db7516d8c2ee.roa (raw, json)
Hash identifier: errIMmB7xotoFGysBiRCkXDjpjVbczgri+23lyZ10s4=
Subject key identifier: EE:F5:8D:01:74:32:C5:0D:D6:B0:3C:44:78:D1:D6:23:E5:E6:9F:12
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC7FA5F09E7871B306E458D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d340a63-2f53-3a2e-a741-db7516d8c2ee.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.99.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c7:fa:5f:09:e7:87:1b:30:6e:45:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=8bea2a73-5c97-43f6-ade8-51c8064d8f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:f1:b4:97:15:26:d0:cf:ac:d3:74:11:f5:
02:bb:37:29:e7:d4:03:58:16:69:50:8e:32:c4:88:
61:31:d9:5e:68:2e:02:a2:b9:07:a3:b0:ef:dd:7f:
f7:50:22:ea:0d:db:23:68:72:1f:d3:09:ec:9c:42:
91:d4:37:75:72:96:df:63:fe:41:2f:2b:9e:f0:d9:
52:b9:ec:3b:73:2d:4e:ee:0b:40:0e:fa:02:24:0a:
d3:2b:fc:23:04:ea:6c:0e:81:69:2d:24:6a:ff:5f:
69:fb:ab:7a:12:ab:60:be:1b:43:1a:82:91:fe:99:
c8:01:48:37:73:ac:f5:00:d6:0f:7b:e9:23:6a:62:
fd:9d:2f:72:c5:bd:a2:2c:7e:e6:45:7c:3d:7a:9c:
34:7c:db:a5:3f:dd:0b:28:93:3f:3a:d0:9a:dd:ae:
41:87:80:21:1b:4e:3e:fe:3f:7a:f3:1c:64:e2:1f:
15:6d:28:4a:11:c5:16:d1:3b:41:7d:03:16:94:43:
9a:ef:7f:84:b4:44:2e:7d:4d:c9:a3:9a:71:ad:18:
c3:04:3f:0f:bb:df:11:94:14:75:c8:6d:f0:bf:10:
fc:12:67:1f:7b:a9:0e:6f:b0:d8:38:b1:a8:2e:06:
90:4a:60:b9:1d:07:61:aa:7a:f5:63:dc:0e:61:6d:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:8D:01:74:32:C5:0D:D6:B0:3C:44:78:D1:D6:23:E5:E6:9F:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d340a63-2f53-3a2e-a741-db7516d8c2ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.99.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:db:f2:62:53:90:58:93:e9:28:6a:2b:98:6f:7a:8c:25:13:
28:80:d4:ce:09:ad:17:03:e0:46:f6:07:fb:06:69:8a:67:96:
f4:0b:62:cf:68:be:e7:15:c7:6e:51:62:9a:92:ab:e9:63:f9:
66:de:8f:ab:cd:db:0e:16:7c:13:34:53:cc:0b:c8:42:fa:29:
fc:4f:58:a2:4f:e0:b3:ac:2b:ef:f9:cd:a6:ef:79:23:c6:a0:
7b:6b:53:a1:b9:24:3e:b9:c7:b1:88:36:e0:9d:87:10:81:cf:
00:80:c2:1b:fb:26:82:15:12:b5:c8:a8:58:31:09:28:f5:df:
ee:3a:4b:d4:b3:7b:2f:59:ca:27:76:ed:a5:12:c4:6e:54:18:
e2:30:50:6e:3c:cd:8f:93:3f:55:7e:ad:3b:5c:f9:64:12:f9:
e1:69:e1:a3:14:a5:10:a6:d0:8a:3b:81:ac:0b:c5:fa:f1:a4:
35:1c:9b:86:4a:21:dc:34:9d:18:98:85:1e:e1:e9:1a:59:cc:
48:15:8c:1f:a8:bb:49:3c:dd:94:67:ec:c2:25:53:97:20:ca:
62:65:bc:97:69:e8:62:0f:21:8e:16:2b:94:07:8b:9a:d7:4b:
d0:29:76:bc:15:fb:26:71:18:a8:4a:4a:b6:a4:eb:1b:9c:2e:
59:fd:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:05 2025 by rpki-client