Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a57eca3-a2ad-3c60-8985-4882036e66b4.roa
File: 8a57eca3-a2ad-3c60-8985-4882036e66b4.roa (raw, json)
Hash identifier: csrnjeIr3zqBgN47HH9KQ07o3AjOaGoiJfuA73LYE9E=
Subject key identifier: F2:AF:AD:08:E9:07:E0:23:88:79:91:EF:5E:E7:0E:99:14:3F:43:38
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DA4BD9E881729FC876CD5E440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a57eca3-a2ad-3c60-8985-4882036e66b4.roa
Signing time: Wed 20 Apr 2022 12:00:00 +0000
ROA not before: Wed 20 Apr 2022 12:00:00 +0000
ROA not after: Thu 26 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.119.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a4:bd:9e:88:17:29:fc:87:6c:d5:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 20 12:00:00 2022 GMT
Not After : May 26 04:00:00 2022 GMT
Subject: CN=9923a38d-06a4-4d01-b2e0-6ed43bc39391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:46:78:b5:37:f6:4c:00:6c:65:5e:20:60:
87:52:5b:61:59:d5:33:b8:c9:0d:db:96:b1:2c:64:
dd:a7:4a:30:28:c9:b7:8d:22:fb:27:40:b7:38:d8:
53:30:02:e5:05:fc:18:64:5a:4b:92:de:2b:01:9b:
97:c3:62:15:5b:6e:ed:ed:63:29:9d:5d:ff:38:d0:
15:4d:91:2e:27:8e:51:fa:9c:20:24:c1:4c:56:5b:
24:ee:f2:ee:5f:c9:ee:ed:b1:c5:5d:cb:64:43:a1:
45:e7:7c:58:f0:2c:16:cc:3d:5a:ac:d2:41:b6:23:
92:17:d2:58:a3:fc:1b:78:bd:37:81:9c:02:ac:c6:
73:91:ef:03:92:ea:9f:2c:1e:79:41:9c:ec:34:39:
4b:08:09:a1:d4:91:51:7f:de:af:3f:f0:a6:39:1d:
b4:a5:0e:f4:32:89:8e:36:f1:19:8b:2b:74:3c:09:
8c:30:ff:39:34:ff:50:a8:f8:32:65:69:51:11:56:
7f:0a:6f:5e:b3:e5:2b:3b:ac:0d:57:d6:17:6e:fc:
a2:90:63:9f:39:e1:05:ca:af:16:e0:05:2d:80:04:
b9:19:0e:c6:b8:6c:09:78:97:3b:b2:28:90:d2:cf:
7c:0d:56:8c:da:c5:33:39:4a:f4:de:03:43:6c:91:
16:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AF:AD:08:E9:07:E0:23:88:79:91:EF:5E:E7:0E:99:14:3F:43:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a57eca3-a2ad-3c60-8985-4882036e66b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.119.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:28:18:2d:37:62:ed:8f:9a:9e:5d:47:f2:fe:dc:eb:ea:eb:
d0:85:cc:12:ab:c7:27:d9:90:d5:3f:db:4d:a9:3c:7c:d8:30:
22:a6:28:a8:45:6f:c9:7e:b5:35:d8:c3:17:1c:8b:5d:4a:8e:
04:05:0d:f0:96:1f:5c:81:84:57:ce:5e:5f:69:0b:2b:4f:6a:
78:27:bd:e0:fd:e7:1f:da:82:e0:85:92:1c:1a:3d:67:5b:8a:
54:f3:bb:39:ac:87:7d:ab:d0:2c:b9:e6:46:9c:9c:c3:5d:4c:
5b:b0:18:3d:62:52:6f:75:a5:04:c1:97:fe:15:24:d0:cc:21:
2e:d5:87:8d:77:6a:96:8d:8f:eb:27:22:75:56:74:78:d9:b0:
85:a8:1a:20:ca:15:c5:87:ee:33:bc:7b:c5:56:82:ba:76:ec:
fa:13:5b:1c:ea:d0:54:33:a8:90:af:cf:f5:82:f2:b2:4e:60:
0f:7a:14:34:52:a9:7e:6b:e7:7a:0a:b9:5b:ef:10:74:7b:1e:
4f:93:f8:ca:ca:dd:4d:d9:5f:3e:6a:37:66:d8:39:9e:3c:08:
cf:57:ed:27:bf:d3:16:e7:07:b8:74:0c:ba:79:11:96:c3:f6:
2f:b4:1d:eb:bb:94:88:97:af:5b:4f:46:dc:94:e4:9a:5c:ff:
d9:24:95:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:15 2025 by rpki-client