Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ce5d764-7706-3385-80e3-e79e2449eea1.roa
File: 8ce5d764-7706-3385-80e3-e79e2449eea1.roa (raw, json)
Hash identifier: p7V7ShAL9qc/PTbUP1r679qEgDeyHjBOi++dNAhkNMU=
Subject key identifier: E3:FE:40:F0:8C:03:41:D7:BD:33:DF:42:0F:C1:09:55:DC:22:EB:A3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F2E155ECBD29B43DC100E0100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ce5d764-7706-3385-80e3-e79e2449eea1.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.89.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2e:15:5e:cb:d2:9b:43:dc:10:0e:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=95f87e5f-92aa-425a-b435-ce6b55140a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2b:31:34:c1:c5:39:51:8f:4e:bd:74:48:28:
8e:1f:d5:f1:99:ef:ce:40:76:e3:76:d5:41:cc:0a:
3b:dc:04:6d:64:c1:0a:22:1a:8d:02:3e:16:1b:9b:
1e:4e:f6:47:d6:1f:66:b7:79:4d:10:38:8d:28:7f:
8c:ff:d8:3c:5a:60:c9:62:c5:b6:b0:ff:50:3f:03:
59:66:97:ba:29:ee:be:9e:33:f4:fc:97:4f:6e:da:
8e:e2:e2:d8:7c:61:04:ee:ae:8f:5e:df:66:0c:a9:
d6:e9:c4:fc:33:bd:e0:8b:6d:05:66:51:b5:79:fd:
19:bf:c7:83:5c:c4:fc:67:cf:cd:85:ea:70:6a:b7:
54:d0:53:12:ad:eb:79:57:87:1e:ea:d8:d3:b2:93:
57:f0:e2:5b:d1:0c:50:4f:d9:c2:21:d3:18:84:29:
e9:1f:01:0b:66:aa:fa:46:1a:68:8e:03:6e:7e:5a:
8f:78:65:ea:7a:c4:32:34:24:e8:b7:d5:8d:87:0a:
a7:46:ca:29:0d:bb:d8:e6:d0:d5:75:8b:15:70:3e:
30:a2:5c:49:7a:4d:ed:8b:24:27:0d:d1:e8:2c:2e:
93:4f:fb:93:79:a6:5a:0f:33:a8:5f:4d:56:b9:63:
40:48:79:69:76:f8:32:f9:7f:4a:d6:56:98:ad:9d:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FE:40:F0:8C:03:41:D7:BD:33:DF:42:0F:C1:09:55:DC:22:EB:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ce5d764-7706-3385-80e3-e79e2449eea1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:96:6d:8f:83:17:d3:e7:ab:e7:14:c1:4b:d5:fe:94:00:60:
3d:1e:a5:35:98:26:f5:f1:4c:d5:72:e0:bc:3f:01:b5:31:c3:
6e:45:67:f1:26:62:2f:08:55:08:b9:57:14:43:a4:75:d4:50:
8e:d2:e0:b9:15:5b:0d:1e:9c:51:e3:09:1e:18:c9:00:f2:c5:
85:48:23:43:3a:43:2a:a8:62:aa:3c:a0:58:ac:bb:2f:d6:6a:
5b:23:80:d8:9f:5e:55:fe:75:9c:7c:ba:06:b1:67:91:ac:8e:
df:28:b9:15:09:6e:92:8e:bd:14:78:e2:95:33:ed:29:10:1b:
3a:55:87:91:d7:e8:c7:29:27:f9:cb:7f:2a:96:34:0c:ff:89:
06:74:15:99:da:fc:93:05:5f:3c:84:5b:c6:be:ad:84:12:c1:
e3:30:a0:e3:58:b5:cc:d6:18:bc:7b:5b:cf:06:dd:19:ed:b6:
84:bb:03:e3:93:e2:a4:86:83:62:d5:3a:19:ae:bf:ef:71:5b:
b8:80:60:fd:13:ca:fc:a7:8b:a4:49:5b:b4:9f:57:24:5e:3c:
97:7d:cc:da:06:6f:84:70:7b:5e:4e:2d:1e:84:83:ba:82:35:
70:01:93:d0:3d:ff:e2:ac:a3:99:17:87:ed:09:86:39:9d:97:
62:3a:83:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:55 2025 by rpki-client