Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ce12c1d-a03e-3ecb-b3f7-7fc804d35c4c.roa
File: 8ce12c1d-a03e-3ecb-b3f7-7fc804d35c4c.roa (raw, json)
Hash identifier: HO3IE6AhNyqrJNlrSU9jtb3Gpb27g8Aa4cG1Y030jmE=
Subject key identifier: 6A:C0:C7:CC:93:BB:ED:98:70:B4:BA:49:22:A7:0B:21:D7:DC:AD:E1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E4F6A18375CC8F5ACBF8D5980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ce12c1d-a03e-3ecb-b3f7-7fc804d35c4c.roa
Signing time: Mon 20 Jun 2022 12:00:00 +0000
ROA not before: Mon 20 Jun 2022 12:00:00 +0000
ROA not after: Tue 26 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:4f:6a:18:37:5c:c8:f5:ac:bf:8d:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 20 12:00:00 2022 GMT
Not After : Jul 26 04:00:00 2022 GMT
Subject: CN=c4ee577f-8ff5-4fca-a70e-f96e0c7b75ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:0f:4b:fa:b4:59:98:0c:e5:38:1c:3f:93:
c8:f0:46:65:c7:06:37:3d:c1:2d:07:1a:10:f1:2a:
8c:82:42:eb:ce:96:a3:7d:25:cc:e5:58:5b:7e:87:
f9:6c:b7:b0:86:8d:de:67:5b:0a:80:71:b8:2c:92:
03:73:7c:1a:5a:02:84:0a:04:b1:61:38:b8:33:a8:
d9:e8:ac:f1:46:8e:f8:79:ee:89:f8:30:4c:e1:0c:
fc:5f:80:36:11:48:f5:c1:0b:dd:4d:8e:21:f3:6c:
d7:1b:b1:67:4e:8d:08:c7:05:c4:6b:e9:56:9d:9c:
a0:5f:b2:bf:fe:75:8a:c4:2a:1b:23:c7:c3:7c:4d:
74:4f:7d:16:0d:80:75:e8:43:0f:c4:de:fd:8d:90:
0b:62:1d:1f:dc:92:80:43:3c:da:12:e0:8c:ba:95:
69:40:0a:c1:55:02:c9:17:91:f3:a5:f8:86:4d:47:
87:f3:c9:8e:81:0c:b0:e9:f9:3c:c0:4b:2e:7b:78:
19:1c:dd:3a:48:2c:56:cd:63:b3:f0:43:91:c9:72:
50:c3:0e:c9:90:0c:d7:76:bb:90:d6:07:28:a3:db:
d5:65:84:47:9d:db:17:63:d2:93:4e:7b:1b:8a:52:
a8:81:28:60:c3:b3:f8:ec:64:bb:55:46:4d:bb:32:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C0:C7:CC:93:BB:ED:98:70:B4:BA:49:22:A7:0B:21:D7:DC:AD:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ce12c1d-a03e-3ecb-b3f7-7fc804d35c4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:2e:ba:d4:59:59:5f:34:5e:db:8b:b0:f9:67:f2:b9:33:42:
a4:23:c2:6c:50:bb:7b:63:3f:25:63:46:1a:99:2b:1d:8c:21:
68:14:69:e9:2d:12:34:01:bd:7e:5b:64:d8:a2:da:3d:f9:4e:
2e:2c:aa:cc:5e:94:20:ff:32:a3:32:b3:a5:e8:f4:d8:67:71:
8d:f1:42:1f:b8:31:af:83:33:c5:bf:9e:27:0f:cd:b0:54:21:
56:d0:39:83:6d:e5:d8:29:0d:c7:4c:df:bf:bf:f6:37:db:64:
74:0b:af:49:42:87:0c:63:67:ed:bd:ce:b1:e1:b4:6c:f0:95:
89:c8:d2:50:78:58:84:97:45:7b:12:5d:29:2b:9b:9e:72:9c:
e9:1e:24:9f:cd:02:53:fe:4e:ee:2a:17:82:88:e5:6d:15:0e:
ad:24:bc:e2:2e:47:5f:b5:e5:cf:62:11:c5:66:ee:1e:4a:da:
c2:e8:6b:26:5b:c3:91:1d:e6:5c:2b:3d:a2:e9:9c:0a:a9:68:
66:f1:a6:1e:ed:09:71:18:ca:b3:cc:c2:59:88:09:0e:88:de:
aa:7f:78:00:6e:9f:f9:c3:2f:4f:89:63:dc:d3:92:18:e6:56:
00:1e:cf:e6:b0:a9:f2:2c:f6:66:fe:54:94:90:01:43:bd:51:
02:ff:70:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:49 2025 by rpki-client