Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cbb5720-3dcf-3068-adc5-62bac20895ae.roa
File: 8cbb5720-3dcf-3068-adc5-62bac20895ae.roa (raw, json)
Hash identifier: lCzckqFe6A/e76gvwBUbWLOSnvY3/rvWPE0bkKHprK0=
Subject key identifier: E2:B5:46:80:AE:24:91:22:BC:99:7F:86:07:0E:9F:E8:8E:7C:E5:BF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D8B9DD98582039B9AA99EA400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cbb5720-3dcf-3068-adc5-62bac20895ae.roa
Signing time: Tue 12 Apr 2022 04:00:00 +0000
ROA not before: Tue 12 Apr 2022 04:00:00 +0000
ROA not after: Tue 17 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:8b:9d:d9:85:82:03:9b:9a:a9:9e:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 12 04:00:00 2022 GMT
Not After : May 17 04:00:00 2022 GMT
Subject: CN=7614564b-28fc-4bfb-ad99-d4001e6f9479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:aa:4c:6c:62:5d:3c:65:df:f7:01:24:4c:
54:ab:a7:5c:8a:25:57:b6:21:a5:a8:40:4d:8d:16:
24:b7:2a:61:e5:fe:92:b0:42:94:9c:0d:18:5c:ca:
5a:84:10:9b:ce:ee:96:6d:af:d5:48:48:c1:1d:91:
1b:12:77:8c:df:95:e4:5c:a1:00:bb:06:13:e0:17:
eb:42:8a:26:c9:44:4c:d9:0e:57:18:a5:93:8c:dc:
05:0b:78:0b:ce:a9:f9:37:46:dd:72:42:f9:ce:d3:
53:4c:c3:a5:9c:a2:54:3e:79:d6:39:77:54:1c:a1:
81:c5:37:5c:07:c0:97:e0:b8:31:38:7c:d8:4c:cc:
5f:fe:14:d9:df:8c:60:b5:83:11:8d:c3:6d:d2:e6:
49:f8:6f:4b:68:f1:82:93:77:11:1a:3b:3b:c1:e6:
7a:35:06:f1:57:b7:10:4c:63:35:55:ba:05:80:1d:
fc:5f:3b:cb:62:80:ae:3e:d6:53:56:4d:56:7c:45:
a1:95:0c:f6:c8:94:2a:d8:eb:e1:c9:56:18:b5:f5:
53:a6:41:2c:fb:ac:0d:b0:41:82:20:14:69:1a:ab:
75:5b:c5:72:a6:d2:b5:3c:3a:7c:66:8b:93:cc:cb:
75:fc:97:23:ba:b7:91:d8:0c:e2:3b:5b:e2:3e:52:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B5:46:80:AE:24:91:22:BC:99:7F:86:07:0E:9F:E8:8E:7C:E5:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cbb5720-3dcf-3068-adc5-62bac20895ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:10:ca:68:45:61:71:58:9a:1a:9e:65:64:f1:71:a4:35:e7:
88:4c:20:f4:db:ad:82:c4:85:0f:55:ec:c2:a9:04:f2:3d:d1:
e9:8d:49:90:01:4d:d3:82:c4:fa:5a:d3:f0:4d:33:25:2a:49:
bc:24:c3:8f:21:1b:51:e1:ee:a9:af:32:35:6e:89:34:3e:d9:
26:89:87:97:d6:fe:27:68:e1:1a:bd:0f:7d:12:44:df:ad:09:
9b:bf:c9:83:a6:86:d1:67:55:4e:4a:a9:44:35:52:6b:6d:4e:
ef:cf:69:f7:58:4a:05:9d:a6:28:ac:a5:16:eb:be:fc:82:be:
13:9c:88:8d:a6:54:67:0d:21:d0:20:36:44:f1:f4:1e:5b:49:
ae:71:a5:34:38:d8:53:da:6e:c4:9f:93:fd:5f:c3:27:cb:8b:
15:14:91:2e:b2:01:82:fe:95:a6:a7:4f:5e:0d:05:d4:20:e0:
21:64:3b:0b:11:8a:04:ac:d5:f5:50:f7:e2:75:2f:40:f8:90:
bd:f6:46:34:58:46:d7:e2:4e:a7:be:b3:39:12:6b:a3:73:be:
b4:b6:cb:24:67:cd:e5:73:a2:18:3f:fa:f3:d3:bf:e9:6f:35:
59:7c:b3:55:6f:11:7c:c6:91:aa:35:a9:94:c9:6c:c1:d3:d4:
a3:ee:f9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:58 2025 by rpki-client