Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80b7a6b2-8e5a-3167-8140-5c19ab398fac.roa
File: 80b7a6b2-8e5a-3167-8140-5c19ab398fac.roa (raw, json)
Hash identifier: e5xCNhOf1TKvePOrt2u0PIawX4GeMc9t+IDSqs2XlQ8=
Subject key identifier: 0A:99:81:3D:A6:85:5D:5F:69:D5:DE:FA:C7:6A:91:F0:9B:E2:98:AE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D805C5C345270DB4A6E435900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80b7a6b2-8e5a-3167-8140-5c19ab398fac.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.128.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:5c:5c:34:52:70:db:4a:6e:43:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=092f0842-6fbc-451f-b908-d0f9c3f09fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:68:8a:a3:cd:44:bf:07:b8:ef:87:27:06:36:
42:f0:77:ba:13:71:42:5f:81:83:83:66:62:5a:df:
91:2b:b7:1b:b7:c7:42:70:36:4c:08:89:d2:2a:74:
5f:76:f5:43:b6:ec:9c:ea:a5:0c:0e:36:5d:23:92:
51:cf:c5:49:8c:31:e7:2d:6a:a6:e4:e8:d6:b2:47:
0c:41:0d:42:dd:4b:d3:6f:18:93:c2:27:bf:a7:ce:
f1:c2:86:80:4b:e0:43:bf:78:f2:c6:45:64:de:6c:
08:df:a8:4a:00:90:73:3d:17:59:24:38:cd:39:e4:
1d:ea:a3:cb:5f:e7:97:a8:63:0f:89:03:9d:a3:96:
ba:9e:7d:25:92:de:37:e4:dd:98:fd:48:a8:79:a6:
ee:9f:2c:7a:89:0f:43:f7:c5:71:50:fc:d7:37:70:
21:70:9f:54:1a:5d:f0:41:78:fc:d8:a6:7c:32:6a:
09:dd:9f:6c:bb:1a:d1:16:33:c7:44:12:61:b1:01:
90:a2:82:8b:99:4e:1e:27:00:87:2f:7a:6c:64:15:
f9:0e:64:da:ce:35:92:0c:5a:01:a6:29:58:97:b6:
d4:92:e1:74:fd:a4:36:1b:9a:19:2f:22:37:af:df:
21:30:4b:fb:f8:8b:38:d7:5b:f5:f5:8f:20:82:7d:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:99:81:3D:A6:85:5D:5F:69:D5:DE:FA:C7:6A:91:F0:9B:E2:98:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80b7a6b2-8e5a-3167-8140-5c19ab398fac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.128.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:3d:c6:02:60:db:3a:d6:f7:1e:99:00:b5:be:b4:a5:3e:f0:
97:e6:f1:e2:fe:72:71:70:49:78:69:c6:d9:f2:92:2c:c1:2d:
18:7a:45:62:49:fc:d1:fd:d5:92:c0:13:c9:d0:00:09:02:95:
57:2b:f5:44:5c:3e:4a:68:a7:31:83:0b:09:3d:27:b0:17:e1:
e5:b2:c6:ba:8b:e5:a4:68:2c:23:44:d0:18:89:c4:70:0b:58:
bf:5a:c8:46:62:12:2f:73:f2:f5:ef:37:29:67:c9:e7:eb:cb:
04:a1:bc:b0:63:79:11:ac:2b:7d:7d:21:36:ce:f0:ab:77:bd:
50:2a:03:ab:62:c9:3a:8c:c6:18:48:2e:1d:fc:63:e8:20:df:
de:2b:90:5f:1c:26:ae:c0:c2:c1:b4:49:36:46:c5:95:8e:1a:
1f:4a:5b:6f:2c:d1:ae:cb:ee:08:27:08:ae:ca:5d:2f:c7:6a:
3b:2c:c1:77:90:b3:a0:eb:54:eb:bb:d7:9f:a2:21:ee:43:b8:
2a:1b:a7:62:79:b2:48:9c:61:6c:aa:e3:b1:9f:a1:8d:59:7a:
aa:cc:0a:7e:c7:0c:ca:e6:82:b3:59:38:52:65:be:41:2d:82:
04:79:04:9d:33:2f:17:8c:3c:3f:e4:24:88:04:74:64:d9:68:
b7:7a:e1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:04 2025 by rpki-client