Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/88cedfe7-4fc3-3308-b6aa-7c70ce1d717a.roa
File: 88cedfe7-4fc3-3308-b6aa-7c70ce1d717a.roa (raw, json)
Hash identifier: kyITojuXVaGoabvT9dmNejq6FFqrPhHNOv+0x6Ax7uY=
Subject key identifier: AA:56:71:F4:7F:C9:C8:62:C9:51:B6:CB:00:99:BF:E9:6C:6D:F0:16
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0B1424F66E4CE74F74811700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/88cedfe7-4fc3-3308-b6aa-7c70ce1d717a.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:14:24:f6:6e:4c:e7:4f:74:81:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=69d95ee6-c1db-4e8f-bbda-777276d4a0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:94:13:4f:70:cc:4f:9b:25:70:b6:ef:86:dd:
f0:57:ea:9b:07:eb:ae:d0:4d:c1:62:92:a7:06:b7:
9a:ab:40:06:08:95:0f:b2:cb:0f:4c:d3:67:78:40:
3b:cf:be:7a:f4:48:37:06:6e:0b:21:1d:4e:93:6e:
9f:81:47:53:d3:34:84:b1:c6:2b:c3:a3:1d:5d:96:
29:13:a4:25:f0:d3:98:6f:81:20:2d:0d:dc:96:1f:
59:d7:91:03:55:15:07:4e:83:ed:89:37:1e:49:01:
e6:3d:23:3b:c2:5b:f0:c0:df:7d:2a:cd:8d:01:95:
2f:ab:90:ad:05:70:b7:71:4f:6c:71:f7:a1:d4:e6:
b6:b7:d9:e5:59:77:2a:98:04:32:dd:3f:93:df:7d:
a7:8a:0d:d7:11:66:3f:13:b7:1d:9b:6f:16:df:ea:
75:66:a4:bb:6a:21:ec:85:d0:ed:83:78:f5:46:96:
a2:39:6c:cf:51:a4:7d:21:b8:ff:9e:68:c0:51:fa:
e1:08:eb:d3:9a:8d:ba:1d:e2:9e:f5:d7:cd:24:ce:
a3:a2:ed:1c:49:24:24:38:a6:f2:fb:15:e7:c1:fc:
39:06:05:2d:16:04:c0:06:a8:da:f8:9c:45:f2:74:
e7:1c:85:d3:d2:8e:27:19:a9:f0:4d:16:9a:13:77:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:56:71:F4:7F:C9:C8:62:C9:51:B6:CB:00:99:BF:E9:6C:6D:F0:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/88cedfe7-4fc3-3308-b6aa-7c70ce1d717a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:24:f9:33:58:68:9c:5e:5c:cf:df:36:07:cb:07:d7:ba:63:
50:ac:70:f1:1e:13:ce:fa:f8:63:3a:63:94:eb:c5:48:84:e7:
3f:2e:3b:1a:53:ee:0b:05:d7:e8:dc:ea:17:ee:5a:4f:80:72:
d5:77:e7:c2:4d:36:fc:61:ef:79:2b:64:04:c3:f9:d4:11:b9:
17:c6:95:43:3d:9c:ed:5e:75:38:55:45:d0:c6:e1:3d:23:e5:
19:dd:ac:a2:54:7f:93:60:92:d4:05:ce:fe:6b:a1:71:b1:f1:
eb:58:3a:c8:d0:44:77:6b:53:d4:91:6a:2e:c8:4a:7a:78:17:
15:27:18:0f:20:74:24:a9:f3:5d:f1:11:05:75:40:3e:6e:a9:
7b:04:24:ad:35:e4:65:7d:e6:e1:86:b4:fd:66:65:a2:de:0a:
3c:68:e6:0d:bc:50:12:74:bd:dc:3a:1f:ed:a4:81:78:ea:27:
ad:30:db:5c:cb:74:c9:c5:a4:64:d8:4c:e6:93:9a:3f:50:6a:
b3:65:25:ea:5c:b6:6c:7c:69:80:f3:e6:b5:7a:ce:d9:22:ce:
be:c4:34:cc:12:36:1f:ac:51:b7:14:57:be:bf:14:4c:25:9f:
74:18:8c:eb:1a:26:6c:4a:91:ce:8e:6b:cd:f2:89:2a:cb:22:
01:0d:43:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:46 2025 by rpki-client