Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f1eec71-6dae-35dd-a7f4-29a2bb8af4d1.roa
File: 7f1eec71-6dae-35dd-a7f4-29a2bb8af4d1.roa (raw, json)
Hash identifier: +gTcpTMVl95qHui6f3E4axx1bQ4Dol60drnWbYdPMxk=
Subject key identifier: 3D:E7:CC:79:6D:86:BD:63:06:EB:2D:25:43:14:31:2B:2A:70:DE:E1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584041E9E7400A17695AF7DB3380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f1eec71-6dae-35dd-a7f4-29a2bb8af4d1.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.104.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:e9:e7:40:0a:17:69:5a:f7:db:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=7a80cc47-7808-4e68-b1c4-f3d107bc92aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:2c:94:1f:03:b9:7c:76:a1:e3:70:db:04:
2a:2b:40:96:3b:6e:6f:89:35:89:14:0a:dd:9e:da:
b1:7e:d5:99:6c:18:a3:03:40:73:43:07:76:82:6d:
02:97:8b:75:db:9e:93:ad:4b:72:66:d7:33:c6:92:
07:4e:06:18:13:e0:c0:8d:ed:1f:e0:9e:78:f0:8f:
e4:c9:0e:48:1c:19:15:d9:12:79:2d:24:2a:a4:ae:
7c:94:b7:cf:3b:82:4c:7f:01:78:4d:c7:7d:87:c8:
82:c8:0a:17:f0:51:f7:86:af:17:44:fc:e1:55:72:
3c:28:cf:93:d4:69:13:20:1e:5b:ec:f5:63:68:f8:
8b:c2:80:35:b0:6f:48:94:ad:29:f7:80:3e:3f:47:
ee:9e:1b:1c:36:21:8f:73:41:bc:fa:c8:40:dc:3a:
25:a6:6e:d7:d3:f5:e0:6b:80:50:34:bf:b3:53:d0:
73:65:59:1c:97:ff:b9:f5:08:16:2c:e9:45:68:f5:
31:57:c6:3c:f0:04:ea:e0:9f:c9:29:60:27:7e:72:
15:de:b9:c5:e3:f5:8b:58:c7:94:68:0b:1f:d3:08:
bd:c6:f9:76:d9:e4:55:a1:ec:b2:82:51:7c:9d:de:
b9:3f:20:ac:1e:eb:7f:8d:87:f0:68:4a:8c:1e:67:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E7:CC:79:6D:86:BD:63:06:EB:2D:25:43:14:31:2B:2A:70:DE:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f1eec71-6dae-35dd-a7f4-29a2bb8af4d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.104.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:c2:c7:04:54:90:5d:62:bb:a5:19:fa:45:7b:00:d1:8d:6c:
17:20:33:27:69:f6:82:02:91:8b:24:08:4b:07:0a:b8:86:21:
f9:7a:30:fa:f6:15:f9:e5:3d:81:2e:74:09:9f:80:22:7d:69:
66:49:40:cb:8f:c2:50:ec:bd:f7:c7:2a:69:7b:c0:3f:a5:e8:
a8:75:ed:36:76:2b:d6:97:64:6e:e9:bc:4f:79:d7:40:ce:dc:
ec:f0:de:bd:a0:2d:1b:4c:2d:f0:4b:c7:2c:d3:7e:d6:9d:c6:
ba:89:fe:53:92:e8:ca:6b:f4:78:20:69:e4:e2:04:a1:5d:2b:
fd:79:67:78:53:8d:22:31:99:eb:aa:f6:4d:6e:22:37:f6:b5:
0d:73:1b:83:c4:d2:fb:42:38:64:60:a2:54:e3:3f:c9:9d:3d:
e6:81:a4:7e:d4:81:5b:59:a5:ce:d2:81:1d:27:27:17:8c:f4:
de:24:29:92:93:ba:1e:24:b2:36:d6:fe:ae:29:78:5e:e5:c2:
42:07:23:58:ed:98:52:f4:74:57:8e:42:56:0b:18:cc:99:fb:
a4:2f:5d:0b:fe:b3:91:7a:c0:ab:aa:10:67:d6:d1:77:b6:6f:
ae:2a:a9:22:b8:fb:68:f4:ba:86:66:6f:d6:88:41:d2:b5:0e:
c5:74:51:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:42:42 2025 by rpki-client