Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89f7c1c9-a02a-3020-a1ac-d9a7527b39dc.roa
File: 89f7c1c9-a02a-3020-a1ac-d9a7527b39dc.roa (raw, json)
Hash identifier: AS7mNWBn/84USYQCxQBLC0GxZkG/fE0T/3prMksoOxo=
Subject key identifier: 45:C8:4E:A0:B8:D6:BE:15:05:C9:C2:BC:94:46:6A:AB:B2:6C:57:B5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E1C4A676348A1FBA642824300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89f7c1c9-a02a-3020-a1ac-d9a7527b39dc.roa
Signing time: Wed 01 Jun 2022 12:00:00 +0000
ROA not before: Wed 01 Jun 2022 12:00:00 +0000
ROA not after: Thu 07 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.89.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1c:4a:67:63:48:a1:fb:a6:42:82:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 1 12:00:00 2022 GMT
Not After : Jul 7 04:00:00 2022 GMT
Subject: CN=8f5e6608-e38b-41d1-b5c6-5b6a3c624af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c6:79:4c:7f:a9:2d:6c:1f:bf:33:e5:3f:8a:
44:dd:ea:04:bd:df:f8:fd:8a:be:a2:59:42:f2:d1:
4c:7e:ce:43:fc:0a:fc:27:e5:01:11:c8:bf:c0:50:
1c:8b:51:35:11:7b:b2:35:ed:3f:be:e5:53:2c:7b:
b4:b7:98:f4:3d:d6:bb:13:bf:68:66:94:27:18:99:
ac:c3:f2:dc:1b:78:19:a9:ce:07:98:2b:77:3e:53:
f6:ef:62:cb:02:0c:5a:44:ef:63:09:3a:16:a5:60:
87:0b:27:7a:e4:19:cf:48:06:94:08:27:33:0b:21:
d9:69:e5:34:dc:86:5a:69:a8:50:79:04:22:33:da:
c3:f1:63:0f:37:a6:ed:cb:0f:78:19:ac:7c:94:7a:
3e:66:a8:8f:e9:cb:c0:96:30:3b:50:2f:47:48:16:
69:a9:80:2b:6e:7a:16:c1:39:65:b5:fd:27:88:76:
02:79:76:41:a1:7e:d3:26:55:8d:fe:aa:5e:2a:5e:
a5:43:86:d2:75:08:43:88:80:3d:5f:e1:5e:2c:cb:
2c:d7:43:5f:80:56:57:fe:50:18:91:9e:8a:0c:31:
b4:81:fc:0e:d6:a4:b7:50:eb:96:14:79:b9:ad:76:
23:74:fc:32:7c:e5:47:f5:a8:f4:51:93:04:55:8f:
3c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C8:4E:A0:B8:D6:BE:15:05:C9:C2:BC:94:46:6A:AB:B2:6C:57:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89f7c1c9-a02a-3020-a1ac-d9a7527b39dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:f4:98:1d:24:57:7d:40:87:c2:f8:e0:f4:c8:21:e7:1e:2d:
3c:37:57:b6:0e:34:3d:e6:c5:e9:18:ea:e8:bb:44:65:69:b3:
47:cb:8a:51:cf:67:26:1e:62:d0:16:8f:bf:ec:86:c3:35:fe:
95:8c:aa:a1:12:0e:d4:e6:72:83:43:80:24:0e:68:e4:5e:38:
28:a2:fc:6f:9d:f2:28:5f:9f:46:95:c4:bf:c3:6c:fd:cd:67:
0f:ca:f1:a1:78:6c:69:5f:10:63:c6:ce:83:da:df:0a:ca:70:
4f:02:42:3e:ef:0f:9f:e0:85:71:9b:ec:10:0a:b6:c8:40:b9:
d2:5f:0d:3a:2e:81:64:30:b6:9a:1c:f5:f8:db:88:f2:1f:56:
24:fb:a1:87:c4:13:83:62:54:da:e2:49:58:c4:d9:3d:af:20:
59:9f:97:c1:2e:57:c3:fc:a7:3f:52:06:53:8f:21:7e:c0:79:
1f:d6:23:b3:f9:b4:c8:e5:29:21:15:71:0c:07:69:8f:a7:f1:
9e:30:51:29:65:05:c2:1a:51:63:39:fd:9f:a1:40:f5:52:26:
2e:9c:03:c4:fe:e4:bd:63:19:29:5e:a0:d4:93:a0:fb:d9:48:
7b:8f:38:38:6a:27:37:61:27:f7:91:b7:ec:48:1b:3d:b1:62:
08:04:67:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:21 2025 by rpki-client