Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d89ea1a-7bb0-3cd9-9cfe-630a0b856dcd.roa
File: 7d89ea1a-7bb0-3cd9-9cfe-630a0b856dcd.roa (raw, json)
Hash identifier: OpeIyFBW0/s/TKJgVssFY4o/ckEgU4bJRSoYgVKwlx4=
Subject key identifier: 27:8C:41:13:43:52:AA:0E:29:13:49:AE:2B:DD:3E:26:D7:38:14:0C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FFD2AB35BD153E34F58D0AC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d89ea1a-7bb0-3cd9-9cfe-630a0b856dcd.roa
Signing time: Mon 21 Nov 2022 12:00:00 +0000
ROA not before: Mon 21 Nov 2022 12:00:00 +0000
ROA not after: Tue 27 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fd:2a:b3:5b:d1:53:e3:4f:58:d0:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 21 12:00:00 2022 GMT
Not After : Dec 27 05:00:00 2022 GMT
Subject: CN=3bb0a67f-a340-4272-b63e-2b38c57646fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:2e:9f:eb:37:6c:37:93:2e:dc:e5:61:25:
23:3c:b4:59:e6:a2:8e:66:97:1a:ef:6c:29:94:4c:
af:18:07:ba:35:42:00:79:81:da:15:0d:e6:e9:ce:
85:20:0d:2c:53:63:c4:b0:2c:bb:fe:5b:e4:6e:76:
8e:93:bb:51:77:17:cc:cc:b8:96:27:d0:a6:ec:45:
dc:4c:89:34:43:50:ea:28:9a:ab:fe:8c:e8:fa:d5:
48:80:f2:3d:38:36:f2:38:2c:66:ce:d5:2f:16:27:
f8:36:56:62:ff:6b:69:76:82:87:97:1e:a1:b9:42:
b2:df:9d:a2:89:fe:91:9a:b3:a8:3b:a4:96:ec:47:
88:b1:b3:cc:be:4c:e9:5a:f0:d7:04:f6:65:95:19:
d1:e7:77:61:4b:02:6e:b4:23:9b:4a:f8:a7:37:aa:
3f:f2:4b:d5:1f:37:9c:fb:fb:bf:d1:69:b0:7e:2a:
03:ba:6d:fc:50:84:9c:7c:23:d2:cb:2a:1d:9b:b6:
b8:ad:98:af:8e:d2:8c:c3:f4:fe:41:44:d8:32:4f:
ea:3d:02:e5:67:c2:14:5a:d7:3e:48:48:86:77:a2:
2a:7f:11:8e:d0:fc:bb:79:3c:e7:e2:ad:d1:fe:78:
59:94:bf:e4:72:95:06:af:2c:0a:e9:bc:af:58:f7:
20:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8C:41:13:43:52:AA:0E:29:13:49:AE:2B:DD:3E:26:D7:38:14:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d89ea1a-7bb0-3cd9-9cfe-630a0b856dcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:41:7a:9d:68:a5:64:33:de:9a:d7:25:67:67:68:43:46:46:
2a:4c:84:2f:3e:6a:97:3a:8f:a7:b8:5d:fb:2f:48:43:e0:8d:
c5:18:17:26:43:b1:dd:1d:0e:0e:24:26:7c:25:8e:9c:ab:44:
c3:89:84:65:54:2d:d5:a5:80:a5:45:11:4d:59:96:bc:61:c6:
19:3e:97:5a:d2:68:25:36:09:72:96:b2:f8:b4:e6:33:34:3b:
4e:28:5b:9e:5f:bb:85:aa:84:1f:1c:cd:6c:a7:5a:7f:a0:8d:
b4:09:9e:fc:17:e6:ae:a3:bf:01:ba:1c:24:91:c4:77:5d:fb:
36:d3:22:94:85:ec:db:8f:9a:f9:d5:ff:c9:a0:79:c5:bf:a6:
dd:74:80:2d:a8:14:13:23:39:10:33:93:b4:74:0d:b3:27:18:
96:65:86:24:8e:4c:c4:7f:ac:8a:de:46:4b:f2:3b:70:e8:84:
86:de:a5:16:cb:81:2e:0b:11:9d:df:6d:e8:6e:37:6a:55:18:
36:d2:b5:de:e3:0e:bb:21:fe:23:9e:35:57:41:2d:24:ba:9c:
4d:77:56:27:ad:2c:e1:0e:6b:3d:dc:4c:df:a6:54:7c:b5:06:
53:94:eb:5f:1f:b6:db:36:38:4e:21:40:26:d3:c4:4a:4e:83:
1c:54:80:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:28 2025 by rpki-client