Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85d118c0-4931-3ba2-ad49-8cc7605e65b2.roa
File: 85d118c0-4931-3ba2-ad49-8cc7605e65b2.roa (raw, json)
Hash identifier: 2/pPbRrBoqS4/v3y6dmDC8QqxqRgpQ++Bk8kuGVeww4=
Subject key identifier: 77:D6:D5:55:F9:F4:1B:78:DB:F7:54:02:78:EE:85:03:B4:F8:0A:FE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EDDBC19DFB25F47506D6C75B4
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85d118c0-4931-3ba2-ad49-8cc7605e65b2.roa
Signing time: Wed 10 Aug 2022 12:00:00 +0000
ROA not before: Wed 10 Aug 2022 12:00:00 +0000
ROA not after: Thu 15 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.121.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:dd:bc:19:df:b2:5f:47:50:6d:6c:75:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 10 12:00:00 2022 GMT
Not After : Sep 15 04:00:00 2022 GMT
Subject: CN=b6f91211-bba7-4293-8fe8-335b0718347a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:45:6f:58:83:d2:25:c4:3f:91:a9:1f:b5:
0a:e3:98:8f:7a:cf:d0:28:06:71:74:f1:ea:d9:3f:
ed:0b:f3:7c:e7:e7:1a:26:fe:0f:27:7d:02:8d:fb:
b3:86:0c:41:fe:5a:66:35:65:03:e7:a0:e8:cf:dd:
f5:f5:05:1f:43:dc:5f:3d:8a:71:93:cc:db:45:ba:
b8:c5:74:42:3e:22:44:87:0b:3c:6d:78:1b:16:e6:
8d:c4:e8:37:0d:2e:26:6a:e2:68:97:ab:b8:10:2b:
f6:75:a5:bc:b1:e7:bf:05:5c:b2:e3:47:4b:f6:df:
ce:31:5a:2f:f8:0d:f5:61:ba:d2:1a:91:ad:0e:c0:
c6:81:46:f4:63:da:a3:ba:58:c6:5b:ec:52:63:02:
80:64:18:d9:4a:d0:1c:4d:76:2a:da:af:8b:1d:18:
15:89:62:37:fe:00:49:0f:12:90:0a:9c:4b:41:77:
59:07:4d:ef:3f:7b:cd:0c:47:7a:b9:ab:50:f9:ba:
f9:7a:00:02:a5:43:13:20:04:cc:de:77:02:54:dc:
a4:8a:df:75:b6:11:5d:ac:bb:f3:08:26:4b:ad:45:
d4:88:96:37:aa:31:d8:e1:a0:6f:96:8d:fc:3a:06:
d7:05:b3:fa:45:0a:1d:7b:4c:19:bd:8b:af:b8:da:
b1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D6:D5:55:F9:F4:1B:78:DB:F7:54:02:78:EE:85:03:B4:F8:0A:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85d118c0-4931-3ba2-ad49-8cc7605e65b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.121.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:e7:a0:a4:fd:19:f4:97:2b:f2:05:1d:fb:10:7e:f4:9c:69:
a5:36:bd:66:70:9f:bd:3c:db:71:d9:1e:7a:8d:02:7f:a7:7f:
0d:3c:bf:ea:1b:17:f1:fe:56:82:fc:c3:fd:0d:ed:04:2c:98:
44:f6:95:32:45:3f:dc:b7:27:8b:d3:19:f7:fb:87:a7:cb:f7:
4a:06:93:ea:82:b3:d3:18:3d:c5:a6:ae:bd:d1:d2:53:5c:28:
05:65:bc:e4:77:3d:f6:0a:b8:0d:8f:cb:48:70:1e:b9:86:fd:
7a:c7:f1:19:30:11:fc:cb:c5:4d:5e:df:30:1b:d1:7b:00:18:
9e:de:bc:65:3c:25:e1:88:eb:85:45:4b:f8:f5:b7:c5:1a:52:
dd:a2:8d:ed:d7:25:bb:02:77:77:57:b4:79:63:ce:80:b7:36:
f7:ce:00:e0:d8:06:13:30:39:f1:10:c6:d4:c9:df:97:b7:dd:
77:61:d6:0a:79:39:27:d2:27:79:7e:29:2c:3a:cb:9c:b0:6c:
79:72:09:14:09:c5:18:79:2e:c9:f1:01:6d:78:f5:cb:94:57:
3f:6e:fc:d8:3d:41:c2:37:2c:7f:05:6c:e4:c7:f4:56:a0:df:
a9:f3:73:39:27:27:c4:28:fe:99:f8:78:c5:5c:48:c3:80:e1:
a4:ff:ae:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:35 2025 by rpki-client