Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a5c9ae1-b441-35b7-b743-8414d1dde030.roa
File: 8a5c9ae1-b441-35b7-b743-8414d1dde030.roa (raw, json)
Hash identifier: EOWJ20O/q2ur/RXgr1PwAaDqFzpoT1B4wsxr4FmTqQs=
Subject key identifier: DA:74:C0:79:74:72:76:6B:50:AB:88:D7:19:BF:D0:5F:74:25:CB:D1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F2C13A797BB40DD35E07C5080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a5c9ae1-b441-35b7-b743-8414d1dde030.roa
Signing time: Wed 07 Sep 2022 12:00:00 +0000
ROA not before: Wed 07 Sep 2022 12:00:00 +0000
ROA not after: Thu 13 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.29.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2c:13:a7:97:bb:40:dd:35:e0:7c:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 7 12:00:00 2022 GMT
Not After : Oct 13 04:00:00 2022 GMT
Subject: CN=1c7de84a-33b9-4682-9c6d-caabbc9c0dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b7:e0:bb:14:03:37:c9:a9:82:64:06:00:ee:
61:39:e5:0e:4b:4a:c0:1c:dc:c1:7e:e1:38:e4:1c:
a7:e7:d5:a8:a7:59:be:18:f6:72:34:90:17:e0:d1:
de:f5:a4:f1:4a:4e:cb:70:23:82:6c:98:51:29:e1:
97:34:a1:4c:74:2c:00:a7:14:5f:46:a9:87:69:03:
53:6c:38:ac:6b:e3:2f:32:3d:7d:27:82:df:79:cd:
e8:b1:12:0c:88:8a:66:9f:05:a9:a7:c4:26:c3:9a:
ff:45:18:1f:a4:da:2b:df:4b:88:e6:a1:82:fb:ca:
33:96:41:9d:68:66:26:a5:de:89:0b:18:47:8b:95:
f1:62:bb:de:26:c7:4d:cb:21:3a:b1:50:76:2e:91:
40:c5:fb:f3:47:f6:23:12:66:d9:b1:af:b7:e7:ad:
35:00:f3:ee:13:76:f3:4c:22:f8:2e:09:f2:83:f9:
bd:05:16:d4:0c:e4:ad:24:63:4f:04:37:75:ba:e8:
27:e1:d9:b5:36:c1:a2:db:c2:cf:e7:85:15:b8:01:
52:71:db:42:26:aa:14:a9:38:48:3a:f9:89:13:63:
6d:83:a1:3b:f3:52:72:9d:42:3f:59:6e:aa:02:e4:
7e:c6:75:41:4a:bd:31:b9:4a:9a:82:a2:71:46:75:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:74:C0:79:74:72:76:6B:50:AB:88:D7:19:BF:D0:5F:74:25:CB:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a5c9ae1-b441-35b7-b743-8414d1dde030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.29.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:88:f6:37:1e:91:3d:ac:cd:e2:ff:70:fa:2f:e6:b5:8b:9a:
9b:b5:ee:c5:da:c7:46:75:e3:1c:8c:00:5a:a4:50:db:9e:28:
02:55:70:1d:5f:22:16:e4:db:af:16:91:ce:55:6e:a2:d6:68:
f6:20:20:55:94:3d:cf:bb:bb:f4:74:6a:0f:8f:f5:15:34:d0:
76:ba:8d:21:46:02:6e:e3:b8:b6:c2:95:f8:e9:15:e3:1e:d9:
ef:0e:27:90:54:65:c9:ce:2b:6a:7c:d6:b0:d9:cf:4d:06:70:
60:fa:dd:dd:5c:f0:90:b1:bc:97:0f:73:10:73:5b:49:f4:4b:
5c:0e:36:48:35:7b:98:cf:fe:2c:f5:f5:33:e7:a4:cc:67:28:
99:74:f0:51:69:72:47:d5:11:96:05:44:ea:93:97:0c:cf:f6:
1a:50:db:62:f2:44:12:72:db:f6:ec:62:a0:ce:5a:2b:12:21:
8e:a2:bd:f5:01:47:2c:30:f6:a9:cc:1d:ea:65:94:5a:5d:6f:
72:0d:4f:6a:72:0c:93:1f:33:4b:1e:05:ee:30:9c:80:1a:14:
1a:37:38:01:d7:63:6e:6a:91:38:5b:49:0f:40:bc:63:1e:66:
23:b1:e1:a2:3f:cf:e4:28:45:a1:3c:b3:9a:ae:b1:01:16:9f:
ce:d4:ed:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:36 2025 by rpki-client