Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7dfa5ae7-79a1-3676-a0ea-086a03ebe7a3.roa
File: 7dfa5ae7-79a1-3676-a0ea-086a03ebe7a3.roa (raw, json)
Hash identifier: 9vIEwzK+kWAMyMCnBjwoiOuxK8fPD+v6ZFLM31dhwG0=
Subject key identifier: 9D:77:22:4A:D5:47:D4:88:D5:88:C9:81:6B:02:62:82:88:05:25:E0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3D6402DC94E830649E4F92C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7dfa5ae7-79a1-3676-a0ea-086a03ebe7a3.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 19 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.88.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3d:64:02:dc:94:e8:30:64:9e:4f:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Apr 19 04:00:00 2022 GMT
Subject: CN=18ccaf59-6032-4a5d-9952-f17bd73fc0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:c4:dd:6e:c3:11:23:e0:fd:3d:5c:e5:ed:
47:6d:65:09:1b:39:e2:31:84:66:0f:44:ee:25:62:
c2:37:c1:93:50:89:7a:8d:07:01:5a:dc:0f:c1:c5:
fe:1c:92:5f:4e:ed:38:2d:e4:fd:f8:d8:6b:08:44:
05:8f:b8:31:26:f0:3b:6e:f4:b2:6e:e9:83:3b:f9:
6d:3c:06:37:d8:89:cc:23:aa:8b:50:6a:7c:de:59:
4b:00:2d:f4:5b:fd:86:2b:28:02:d4:59:83:b1:28:
45:6b:ec:d2:47:0c:d1:ff:df:68:e0:18:48:96:5e:
a5:c1:fb:d1:c3:d3:68:b0:0f:ae:db:7d:45:df:96:
96:a4:13:c8:3b:42:fb:74:66:3f:58:89:d0:7c:e6:
1e:c6:8d:5d:c3:e2:fb:8c:e7:00:3f:af:32:f6:08:
0b:fd:f4:63:6b:61:b7:4c:7e:82:45:8e:5b:ee:e2:
c2:f8:1e:c9:dd:de:7c:42:7b:c1:03:0e:a9:65:15:
de:7b:d4:d3:34:c0:fa:81:d7:95:7c:17:b8:81:2c:
a0:39:de:73:eb:36:7a:e7:b4:08:64:97:6f:aa:84:
33:53:65:ed:19:49:6b:7c:13:8c:1a:0d:0c:6a:e4:
95:0f:75:e0:92:28:b8:00:8f:79:6c:99:9b:30:43:
e3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:77:22:4A:D5:47:D4:88:D5:88:C9:81:6B:02:62:82:88:05:25:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7dfa5ae7-79a1-3676-a0ea-086a03ebe7a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:76:2e:93:78:ee:35:b4:65:8f:c3:1a:7f:fc:f8:1f:08:4e:
91:92:81:1c:4f:5b:c1:23:b3:3c:63:20:80:25:19:5c:be:6a:
f7:10:de:a1:08:5d:fd:e0:fe:0f:aa:ca:71:49:64:8f:50:c4:
3b:b3:cc:74:41:3b:f6:8e:0d:fd:c6:63:c2:a8:1c:64:8a:0b:
02:86:7a:e3:42:47:72:c1:32:32:98:95:03:c7:9e:29:22:0c:
fd:c1:44:c5:20:5b:f2:ab:cf:72:90:62:f5:c0:f2:8a:7b:f5:
0e:53:7f:ad:e9:67:b3:20:7a:2a:39:b1:4e:10:69:6a:11:3b:
3e:53:0a:e5:3c:50:c5:2d:61:54:4b:7f:05:d7:e7:55:43:91:
c7:cb:3a:06:19:d6:81:c4:c4:26:64:c4:19:16:3d:ac:61:b4:
18:f5:dc:eb:02:f8:63:a6:eb:52:6b:dd:38:5f:98:93:ba:8b:
e1:2e:af:3d:49:78:db:4e:e0:0d:18:ab:c9:e4:83:da:0f:16:
9c:cb:cf:4a:0e:5c:b8:61:7f:65:ce:f2:41:9c:71:a5:13:40:
08:24:e4:58:10:5c:a4:6a:02:f0:7c:19:02:29:53:4b:5b:6a:
e1:03:d2:ae:cb:71:21:59:da:e1:d3:63:5b:85:f4:4f:23:3f:
27:19:f9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:19 2025 by rpki-client