Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ae1d933-8508-3bc8-ae90-a281523ea047.roa
File: 8ae1d933-8508-3bc8-ae90-a281523ea047.roa (raw, json)
Hash identifier: fFVVN3wrglH1frTXGJizoz/R31xXDTuzKBqUVfZr2+U=
Subject key identifier: 0A:04:08:3C:50:2C:0A:51:CC:75:14:8E:67:7E:45:27:76:72:00:B9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2F5ED8ECA3D4F0776C2D1600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ae1d933-8508-3bc8-ae90-a281523ea047.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.27.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:5e:d8:ec:a3:d4:f0:77:6c:2d:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=3f4e60e2-fdce-4bfc-964f-b354a6b76b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:b2:06:61:09:e0:cf:7b:8f:1f:f9:a1:69:
5b:2c:5a:1b:bb:67:f3:21:54:02:68:15:d2:ee:21:
70:b7:44:48:8a:ee:c2:d6:b2:56:05:4e:51:92:0d:
be:c5:6d:57:55:98:75:d1:83:3d:87:20:75:06:5c:
50:03:57:c9:0d:c5:5f:0d:f0:61:20:61:60:4d:cb:
a4:99:25:c5:e6:b2:22:83:ce:5a:49:a8:d1:ee:0c:
e4:63:08:38:ec:9b:1a:59:f0:01:d5:a3:b7:c5:41:
79:b5:b3:ad:a8:24:15:43:3f:ec:97:9a:46:08:cf:
d5:cf:bf:f3:3b:4f:ee:ea:a9:c1:32:93:1c:69:d3:
3b:1c:f1:da:fd:3f:60:e7:e3:d2:50:91:2d:eb:65:
ea:97:01:4d:43:76:ee:8b:4c:2f:34:c7:68:b6:e4:
1d:e6:53:e3:0e:ab:8e:51:79:a6:69:09:5e:6b:c5:
bb:ab:90:09:a5:ab:81:be:0a:33:f6:ae:19:41:47:
15:92:cc:85:12:32:bd:d0:27:00:83:64:d1:18:28:
09:63:73:5a:40:53:f1:b7:11:19:c8:31:19:be:a6:
fe:25:23:66:6a:60:e3:5a:09:ce:c5:10:4a:bc:fc:
54:75:9a:39:a6:36:59:12:ad:ac:be:80:21:e1:66:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:04:08:3C:50:2C:0A:51:CC:75:14:8E:67:7E:45:27:76:72:00:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ae1d933-8508-3bc8-ae90-a281523ea047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.27.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:dc:8e:3b:ba:df:d1:50:c4:12:79:dd:b8:6b:4f:18:eb:76:
d9:be:82:a6:14:74:0a:d8:8f:2c:2c:b8:e1:de:d7:3c:ea:d1:
2c:9d:b5:f6:75:3f:77:e0:6a:f6:42:49:26:ab:e0:af:21:88:
b6:66:11:75:5e:f4:d8:71:9a:73:32:8b:a9:53:48:67:be:b7:
3f:47:e4:fb:24:5a:bb:9d:73:b7:b7:2e:b8:7e:b3:0d:7f:f6:
15:84:d8:7a:32:44:40:20:80:3b:73:c1:d7:f7:9e:48:35:04:
44:00:32:dc:d5:3c:07:6d:06:46:0d:83:8a:db:8e:cd:33:81:
52:4a:92:55:13:99:f6:e5:f6:31:35:58:89:19:72:eb:48:0f:
5e:b8:5c:b4:60:cc:44:ef:9c:4c:f2:fe:85:67:df:02:c7:ba:
7f:6b:91:8d:36:d6:4a:6b:fa:57:07:cf:2e:e8:fd:2c:d5:59:
2e:f5:27:e1:b8:5e:8b:41:e6:b4:d3:7a:bb:d6:4b:e6:a7:41:
95:4b:ca:f8:b3:f3:89:26:49:1a:c4:4b:28:a5:9c:3b:fb:fc:
bb:c7:bd:9f:81:bd:72:e0:3a:dc:30:e3:d6:63:9a:7b:ab:c9:
7d:0e:bc:f3:86:93:50:06:e3:0f:d6:ec:f3:56:57:56:17:38:
bb:4e:43:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:07 2025 by rpki-client