Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7dc74137-d7dd-3194-8043-3eafa4a7e038.roa
File: 7dc74137-d7dd-3194-8043-3eafa4a7e038.roa (raw, json)
Hash identifier: 62ipyrBXGCn+YWUmxc1ZM6OV4hZae/5Bpi/tFzr63qM=
Subject key identifier: 08:A0:C7:B6:F7:4C:9A:81:01:A4:A7:D7:76:2A:2D:D3:37:BA:19:A3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D6FD067B03832D11DBFA20E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7dc74137-d7dd-3194-8043-3eafa4a7e038.roa
Signing time: Sat 02 Apr 2022 04:00:00 +0000
ROA not before: Sat 02 Apr 2022 04:00:00 +0000
ROA not after: Sat 07 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.52.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:6f:d0:67:b0:38:32:d1:1d:bf:a2:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 2 04:00:00 2022 GMT
Not After : May 7 04:00:00 2022 GMT
Subject: CN=21da57b0-aac3-42c8-b68c-6b9f6464c69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9b:86:09:55:8b:42:23:3b:e9:a7:fd:06:aa:
d4:41:c6:36:ab:fd:d4:ba:f2:1a:68:85:3a:42:fc:
22:f9:25:27:15:25:81:5e:94:49:bc:d8:a6:55:a8:
e0:5f:eb:c5:45:22:85:e9:df:d5:c0:70:89:1a:c4:
4b:31:6a:1a:5a:28:79:02:4e:28:32:64:9d:f0:52:
33:89:44:4a:d0:66:04:2e:84:35:e1:0d:66:74:a8:
07:31:5e:10:f1:d0:d8:bb:91:55:89:11:9b:78:6f:
7d:17:04:db:d9:88:92:b1:fc:4b:21:9a:82:55:54:
38:15:e9:ce:97:82:bc:d0:83:54:f3:4a:24:81:5d:
29:f9:1b:fd:46:27:26:b0:d0:9d:dc:29:fa:a6:e5:
71:90:27:4c:c6:47:e0:cd:f4:2f:93:28:d6:d4:3e:
2e:39:a0:04:13:26:48:e9:7b:bb:e5:0f:e7:4b:31:
1a:a2:6a:f0:a5:05:0c:da:d2:bb:24:9c:17:07:56:
2f:73:50:6f:3a:06:15:4f:f2:6b:08:49:28:e2:a4:
4a:b8:df:c8:43:f6:11:19:e3:24:72:dd:ea:1a:50:
31:bb:5e:15:53:1d:05:85:77:8e:c0:b5:39:cc:52:
1a:3e:28:4c:ca:bf:94:11:e9:1a:72:82:01:33:c6:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A0:C7:B6:F7:4C:9A:81:01:A4:A7:D7:76:2A:2D:D3:37:BA:19:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7dc74137-d7dd-3194-8043-3eafa4a7e038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.52.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:d0:56:0c:7a:98:e4:9e:1e:21:05:69:aa:99:bd:29:c3:22:
b1:e5:5c:8b:ae:cc:fb:f4:cf:e2:27:0b:40:ab:86:51:fe:ec:
f4:cf:52:28:82:75:72:8b:7a:36:b3:b8:b2:30:bd:43:44:e5:
a6:d0:8b:44:fe:e9:d6:39:3d:a6:e9:91:58:6a:f3:df:63:b0:
32:60:f9:0c:ae:ee:2f:60:48:35:11:ae:11:a2:4f:4c:0d:b6:
cc:c9:d1:d5:34:96:03:ce:00:5b:86:5f:71:38:ba:a3:42:3c:
1b:ce:18:2c:21:87:fb:2a:70:d0:35:cc:cb:18:99:39:08:69:
4c:f0:a1:2f:93:58:75:31:8e:00:49:6f:a3:e1:f4:d9:f0:cf:
e2:de:65:a4:df:ef:4a:92:60:ea:33:50:4b:80:72:1c:48:b2:
38:72:5d:3e:ce:f1:42:78:9b:14:53:4f:80:8a:84:75:32:8d:
f0:88:88:34:4b:8d:9e:c5:30:ac:19:6a:77:31:8f:fa:af:42:
60:d7:80:a8:a5:71:45:0a:ba:83:30:e9:e2:c0:d5:d2:bc:db:
75:d3:ca:98:5e:b6:30:bb:b8:e2:f0:d3:16:93:dd:b8:ca:63:
f4:f7:41:f0:99:77:51:4f:4f:27:8a:c7:34:59:58:6d:62:1b:
ab:56:4b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:38 2025 by rpki-client