Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ccb3f02-b2c3-3a1a-9cec-e9b11be954c6.roa
File: 8ccb3f02-b2c3-3a1a-9cec-e9b11be954c6.roa (raw, json)
Hash identifier: z0rHN9Mlg9rNhNDT54Ub7ze5BjojtZCzB1Tw/eg0k8A=
Subject key identifier: E4:AF:CE:4A:54:1E:77:47:2E:95:87:16:90:07:F3:08:1E:BC:25:94
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E012FCADE362FA7AA3C408700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ccb3f02-b2c3-3a1a-9cec-e9b11be954c6.roa
Signing time: Mon 23 May 2022 12:00:00 +0000
ROA not before: Mon 23 May 2022 12:00:00 +0000
ROA not after: Tue 28 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:01:2f:ca:de:36:2f:a7:aa:3c:40:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 23 12:00:00 2022 GMT
Not After : Jun 28 04:00:00 2022 GMT
Subject: CN=c3511815-bdd1-4088-b16c-45b04615ee44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0a:36:95:2e:a0:a7:41:d8:cb:dd:d9:c6:7c:
fd:04:29:db:b8:f9:c6:5f:18:c4:8a:04:f9:e2:c6:
64:e4:bb:70:06:84:ed:07:d9:b2:50:7f:27:00:6b:
e7:cd:12:4c:45:4e:a4:a4:5e:3f:36:2d:a1:b0:e1:
43:5f:a5:26:17:79:bb:e7:f9:af:a4:85:7c:6f:12:
45:a9:f9:13:30:00:91:98:2a:5d:44:84:04:6d:a2:
c9:34:c6:ab:d4:a9:6c:bc:42:02:42:2e:7d:93:ed:
92:cc:44:18:8d:4d:4b:ba:9d:54:4c:34:b4:3c:18:
9a:32:07:cc:fb:0b:58:b9:8b:c7:89:8b:f3:e7:bd:
26:c5:91:78:1e:fb:a9:62:c5:9c:1d:77:34:c7:3f:
be:8e:75:7c:c2:5c:72:b1:30:3a:d2:b4:ff:2f:32:
88:73:2c:fa:a3:12:2e:4d:1e:5f:f4:ca:46:19:f0:
95:15:99:ad:f7:1d:e3:25:a1:8d:27:92:be:cf:f1:
dd:35:79:1b:52:0c:80:e4:d4:5d:9c:96:80:c7:f8:
76:df:9b:f6:3e:25:13:16:f6:28:a7:0d:1d:9d:f9:
ba:cb:bc:1a:f3:59:fb:a0:47:c8:5e:eb:72:00:15:
d0:84:de:a4:44:d3:e3:d6:12:90:ee:34:63:6a:7e:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AF:CE:4A:54:1E:77:47:2E:95:87:16:90:07:F3:08:1E:BC:25:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ccb3f02-b2c3-3a1a-9cec-e9b11be954c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:17:4a:97:fa:a4:f2:51:72:78:4b:ef:38:9c:73:4f:15:28:
d0:68:17:ae:34:42:62:fb:d4:e5:fb:ba:7c:fd:dc:d7:ed:23:
81:36:2b:e9:86:88:0a:f3:2e:58:2e:56:da:7b:30:a3:ca:ef:
7d:9b:32:42:9d:a4:42:2e:86:39:1f:64:86:39:c5:47:b3:fa:
64:7b:5b:bd:e2:e3:8f:ef:1f:b4:a0:2e:55:13:4e:75:c9:2b:
1f:af:cc:e8:5a:37:4d:20:3d:e8:3c:8e:96:b8:f6:89:64:4f:
ba:eb:9f:3f:1a:97:da:a1:58:0c:dc:29:b9:94:da:f4:3a:41:
69:06:a7:c3:21:eb:7e:eb:86:a5:61:3c:0f:7e:20:48:25:41:
5a:36:0d:ba:02:4b:87:c2:ba:d8:a6:ab:8f:f8:d0:b9:87:d2:
f1:39:b1:0d:7f:ee:eb:83:a1:d8:33:db:68:71:2e:2f:90:3d:
16:77:8f:be:82:c7:69:7c:7f:40:3c:b2:6e:37:1e:82:b1:b3:
5c:6c:5d:3f:44:bc:1a:27:14:e8:70:31:f5:9b:a3:ba:57:90:
98:a7:c9:16:c4:48:0b:6d:da:83:75:a3:b6:61:a4:51:5b:34:
4f:28:07:8d:56:39:8d:b3:52:a8:e1:c0:3c:28:48:06:30:c9:
0e:55:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:51 2025 by rpki-client