Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7dac278b-c4f8-33b9-ae4f-2c5e3b6611e8.roa
File: 7dac278b-c4f8-33b9-ae4f-2c5e3b6611e8.roa (raw, json)
Hash identifier: yypoGCMi30Rd0MkRN2UAD2hR8Rwcb4nsMF7zEgXHWYY=
Subject key identifier: C3:35:15:FC:1D:8F:09:C1:7A:7F:D1:89:E1:6A:E6:7F:E8:04:48:93
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408CA69347B889442AD4C31280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7dac278b-c4f8-33b9-ae4f-2c5e3b6611e8.roa
Signing time: Wed 11 Jan 2023 12:00:00 +0000
ROA not before: Wed 11 Jan 2023 12:00:00 +0000
ROA not after: Thu 16 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.121.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8c:a6:93:47:b8:89:44:2a:d4:c3:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 11 12:00:00 2023 GMT
Not After : Feb 16 05:00:00 2023 GMT
Subject: CN=bf8df1c4-132c-406c-a051-42320cb2d6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:c6:d0:9e:41:a6:43:62:24:0c:89:13:79:
38:28:84:f5:09:ca:0e:93:b4:7b:b6:e8:1e:89:e2:
8a:d4:05:e6:9c:58:4e:2f:98:32:ed:24:79:40:67:
e9:98:6d:3a:d0:59:54:a1:d2:0a:88:22:57:af:39:
8e:ca:1a:6f:07:1b:50:f9:6b:49:2b:95:54:1b:ac:
08:1c:7e:31:55:19:35:02:ed:51:b9:0d:eb:68:9d:
51:94:76:b7:78:85:a7:4a:1c:cd:c3:f3:74:13:31:
91:aa:46:d5:29:48:ea:2f:ed:3e:30:19:96:b7:3d:
a0:2e:b1:b6:17:b4:de:f7:fc:cf:82:9f:6d:9e:43:
d7:fe:dc:3a:e3:bd:50:cd:18:6b:36:26:b1:69:7c:
06:48:8a:94:72:87:f3:24:db:de:f6:5d:f2:72:14:
42:38:a5:0c:03:f7:ce:f1:42:02:42:14:bd:8c:d8:
30:e1:d7:03:25:80:a6:7f:7d:cc:8f:e7:11:ab:e4:
63:96:3b:d2:8a:2e:d3:bd:a2:50:52:d0:90:2b:3c:
c3:8f:9c:6b:7c:2e:21:16:02:c5:ec:9f:dd:50:46:
69:3d:43:af:89:32:ad:db:97:47:e8:48:05:e7:82:
76:ca:e9:a8:5d:da:c0:da:ec:56:90:29:81:4e:3c:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:35:15:FC:1D:8F:09:C1:7A:7F:D1:89:E1:6A:E6:7F:E8:04:48:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7dac278b-c4f8-33b9-ae4f-2c5e3b6611e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.121.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:87:53:e2:18:94:f6:d9:bd:6b:83:b7:a4:06:2c:1b:5b:f7:
a1:2d:52:a3:e3:e2:56:c1:22:7c:1c:b6:2d:6a:1e:fa:0f:cc:
85:9b:dc:6b:59:93:19:05:1d:3e:d3:22:46:62:c0:23:88:bd:
f6:6d:8e:17:89:8f:e7:5a:6d:0b:5b:fa:50:f2:72:99:de:4e:
5c:e3:11:8e:ee:7e:ec:6c:7a:9b:0b:6e:99:f1:cb:c8:e1:d0:
fc:08:49:28:1e:d6:d1:80:81:e7:34:62:ed:7e:54:ed:df:54:
da:68:00:da:f9:3f:f9:25:85:61:af:23:fd:90:98:af:a5:aa:
50:56:30:ea:7d:96:49:c2:8b:a6:c5:d5:9b:e4:d4:c3:fd:ff:
ee:6d:44:cd:73:04:1a:0d:8d:89:51:85:5e:54:77:c1:a4:b1:
81:83:0a:2b:ff:bd:38:47:8c:36:e8:b9:b3:22:d3:c4:d1:69:
b3:6a:3e:18:a1:21:c4:e0:68:a2:48:ed:97:5d:7d:a2:83:6a:
e7:97:1d:aa:d0:7b:2c:40:a2:16:eb:dc:67:fd:e4:d7:75:54:
0e:e0:b8:58:80:0e:ec:e8:43:ae:7c:15:f8:aa:88:32:64:4b:
75:1f:5a:0a:6e:42:65:27:b3:1e:57:64:fa:a4:8d:1a:68:df:
e1:40:d8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:59 2025 by rpki-client