Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/827d7666-49ab-3560-8eac-4a1be57c05b1.roa
File: 827d7666-49ab-3560-8eac-4a1be57c05b1.roa (raw, json)
Hash identifier: TZ82pUcL0qow5E14NEKPVoqqIZuBK8ATuC//ikQka9Y=
Subject key identifier: 68:5D:68:C9:F3:4A:CC:4E:15:2F:22:1D:FC:E1:68:48:AA:DD:B0:A9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA41F610A99869700DEDFC1C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/827d7666-49ab-3560-8eac-4a1be57c05b1.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.124.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a4:1f:61:0a:99:86:97:00:de:df:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=4ca289a4-7c7d-40b9-8f6e-82b96174264f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:48:e7:a5:78:5e:58:50:dd:4a:fc:8f:26:04:
ab:12:e0:e3:39:76:19:54:e2:a0:93:a5:16:23:e7:
1b:d1:fd:fb:08:77:ff:69:28:ad:b1:fd:71:6f:c6:
01:8c:cb:61:46:f6:d8:d8:b6:48:5b:9c:46:11:02:
2a:bf:62:ad:0b:51:86:88:1d:ba:c6:0e:12:16:84:
29:ce:20:b1:31:d3:25:1f:e8:7c:c8:45:66:c4:71:
93:76:6b:ee:53:08:29:9c:64:a2:29:79:38:92:2d:
7f:f7:73:06:f9:73:26:39:be:7c:e4:a8:7d:68:8d:
3e:85:a6:9b:e1:8d:1a:03:8d:8a:4f:89:f8:b1:ed:
6d:1d:f0:f8:01:38:12:f6:a1:8c:d7:da:72:f7:77:
3d:01:b7:96:29:3b:bd:13:23:49:9b:36:82:3b:2c:
87:89:fc:6c:64:65:1d:86:ad:2b:e6:55:58:50:9d:
0c:0f:f6:a8:1c:cd:b1:3c:a9:2b:b4:c3:c4:05:5a:
9a:fa:47:40:4b:34:8b:95:56:2c:54:6f:3d:e7:37:
41:49:1b:ff:9e:d0:29:bb:15:31:84:ad:ee:b7:51:
e4:3f:18:79:80:4a:ef:9d:d9:68:3c:ef:c5:c3:f8:
f1:13:40:f3:e4:9e:23:21:50:ef:0f:05:ee:87:4a:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5D:68:C9:F3:4A:CC:4E:15:2F:22:1D:FC:E1:68:48:AA:DD:B0:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/827d7666-49ab-3560-8eac-4a1be57c05b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.124.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:17:a4:6d:ab:88:71:9e:cf:44:e6:51:8a:ac:08:d2:04:fd:
1f:44:10:8b:23:d9:01:0e:52:9a:29:77:9c:73:9f:aa:61:87:
6d:62:18:f3:0b:b7:46:33:f6:43:58:a7:2a:87:11:c5:09:f8:
a3:7f:45:f9:8b:0b:3f:9c:ce:94:cb:f5:0b:a8:ff:e3:cd:d2:
34:4a:fa:ce:61:c7:60:76:d2:2d:8c:08:a8:ad:fd:48:94:cf:
39:38:2a:e6:e1:14:1d:1d:4f:39:db:cd:57:18:8f:31:31:64:
fb:7d:4a:da:bf:45:71:d3:a7:6f:30:11:f2:b2:88:98:b2:98:
28:c5:7a:c1:c2:d4:90:cd:a3:68:a8:23:86:c8:4c:01:4d:58:
70:5c:a9:92:dc:ae:d6:8b:71:c7:e3:3a:88:91:77:42:af:7d:
f2:1b:c9:94:74:86:4c:7a:3a:2e:ff:ca:19:d3:2e:92:7b:28:
0f:74:7a:33:5c:b5:56:e0:99:90:e2:fd:27:07:fa:7e:27:99:
f4:d5:ae:53:b1:2c:9e:10:f9:27:55:54:ea:42:c1:8c:54:ee:
3f:e2:66:cc:5e:78:2a:d8:29:b9:07:c1:b6:f6:0c:9e:0e:fb:
b4:7d:94:17:d7:cd:46:c6:2d:87:50:d7:a8:d3:5d:26:71:fd:
8c:81:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:30 2025 by rpki-client