Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b7dce20-7bfe-31c6-84a0-5118f5c1015a.roa
File: 8b7dce20-7bfe-31c6-84a0-5118f5c1015a.roa (raw, json)
Hash identifier: WV4268Kei5dnbJunMdla+7l4u1oLrGonJAyTopMRRno=
Subject key identifier: E0:4E:16:59:F5:EE:13:B7:32:24:C8:2E:CE:89:B3:A5:5B:16:65:73
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EDD5B34C4A9AF206E17A84000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b7dce20-7bfe-31c6-84a0-5118f5c1015a.roa
Signing time: Wed 10 Aug 2022 12:00:00 +0000
ROA not before: Wed 10 Aug 2022 12:00:00 +0000
ROA not after: Thu 15 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:dd:5b:34:c4:a9:af:20:6e:17:a8:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 10 12:00:00 2022 GMT
Not After : Sep 15 04:00:00 2022 GMT
Subject: CN=d0b638f8-021b-44c5-b5b1-2747270c8a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:e6:03:1d:da:06:83:5b:ac:63:29:4c:73:
40:be:95:88:c5:44:8d:a3:c0:fd:07:78:0a:d4:c8:
dc:e9:18:6a:8a:e1:7a:e4:9b:06:bd:8f:1f:da:85:
00:9e:93:a3:dd:dd:26:35:c9:2c:95:12:e9:49:02:
c9:7e:07:fb:73:c5:55:89:76:09:aa:16:65:c3:68:
80:93:19:a6:48:05:18:00:43:12:ed:40:f2:af:0e:
ba:2d:c4:bf:07:1b:f7:58:6b:51:b4:14:61:e6:1f:
ea:83:64:0e:2d:50:d5:82:04:3d:3a:f1:cb:23:39:
3d:cb:5a:2a:ae:29:47:86:ab:bc:9d:28:3c:3b:a5:
72:80:54:91:af:1b:e4:3c:47:49:1b:26:d4:f5:94:
95:1f:d4:80:ba:19:b4:ab:66:d3:93:fa:46:0e:17:
85:49:45:8f:c1:38:ec:41:df:86:16:5f:8d:01:6d:
88:53:58:34:29:cb:9d:35:ef:d7:cf:70:01:20:d7:
61:31:66:e1:fc:2f:84:2c:56:48:0d:3b:55:79:45:
af:0a:ea:d2:4c:bd:fb:f4:9a:e3:2e:d2:65:76:24:
fc:d3:74:81:50:fa:e6:d6:37:ad:db:52:09:97:0f:
95:33:f6:6c:c2:fc:b6:1b:83:00:a7:80:0f:5b:20:
8a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4E:16:59:F5:EE:13:B7:32:24:C8:2E:CE:89:B3:A5:5B:16:65:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b7dce20-7bfe-31c6-84a0-5118f5c1015a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.22.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:62:96:08:36:1f:0b:cd:51:0f:25:45:c8:3d:8e:ec:99:53:
9e:71:a0:15:93:55:ab:6d:64:35:0a:69:ce:67:d6:16:c3:17:
d0:47:6f:d9:e0:99:91:27:3c:b7:a6:d1:03:02:8c:76:0f:c2:
d2:0f:5e:73:8b:86:a6:92:b2:87:75:a8:3f:25:1d:c6:a9:c6:
bc:ac:08:fe:17:16:99:18:5d:52:b1:a6:c8:59:3b:1d:84:c7:
0b:b0:37:c9:2c:09:c8:88:8a:d3:fc:9f:8a:cf:41:15:b9:8d:
4c:d8:78:46:7d:47:ea:b2:ac:be:9e:29:f3:64:04:b7:ce:c2:
78:7b:99:2a:28:3d:ab:8a:74:4b:40:c2:d6:95:c4:7d:04:8f:
25:54:d0:05:c7:b9:d1:84:d3:29:fd:b8:1b:f5:52:24:c1:3a:
1d:7e:3b:48:b7:f3:7a:8c:48:c8:50:7a:35:fa:a1:a6:42:8a:
02:8b:46:fa:cb:03:29:f7:66:b7:c9:fe:fe:a7:54:af:0e:1d:
ed:70:35:1b:94:e1:a4:b5:78:ae:49:14:a4:46:d7:37:52:5c:
ac:87:29:95:5e:1d:f3:b8:b1:26:c7:7c:79:2c:fd:3d:07:43:
cd:78:ab:67:b6:7f:32:46:c7:ba:e1:b8:3e:8b:2f:77:46:31:
19:47:bd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:47 2025 by rpki-client