Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9141e64f-7ff7-3ed8-91b3-9df0c3653748.roa
File: 9141e64f-7ff7-3ed8-91b3-9df0c3653748.roa (raw, json)
Hash identifier: rtsScrB8sW6j71eZDfB8HCiyZmXFwqKuo+ubQi2lEmE=
Subject key identifier: F7:1D:F2:C3:3A:62:55:8A:D0:D6:BD:1D:94:97:19:2C:DA:FC:64:0A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF382F54504716FF23C9E8E10
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9141e64f-7ff7-3ed8-91b3-9df0c3653748.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.128.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f3:82:f5:45:04:71:6f:f2:3c:9e:8e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=9704277c-1212-46ed-a6ff-4acb6e667e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d5:85:07:8c:fd:ed:a7:aa:ad:35:13:e1:5f:
71:b1:7a:26:47:88:c3:64:1f:f8:99:96:e4:ee:0f:
57:8e:09:85:0c:37:71:4a:0c:d4:9c:6b:b8:fd:f6:
5d:d6:d7:4e:20:86:f8:74:9a:4a:c5:6e:5a:e6:e4:
e4:74:da:1b:10:91:ab:2e:cb:0c:bc:c8:9e:b5:b2:
41:bd:69:8d:fe:fd:9f:62:70:e1:3a:69:46:bb:15:
f2:ba:1a:9c:5b:39:f3:b2:d9:7a:2f:5f:b2:c0:a3:
df:cb:d7:23:fb:f0:4c:6f:32:76:bf:ee:e6:49:1b:
cf:1f:9e:8e:6d:cd:e6:8f:75:36:37:75:41:7f:7c:
1c:32:52:ba:03:97:87:a5:01:8f:1c:0d:94:20:ca:
a6:f5:ae:7a:f2:25:0e:ea:09:87:6a:b3:51:73:fe:
c8:31:d5:9d:b6:1d:b9:c2:ae:e0:fa:4f:09:e3:ce:
7e:79:93:d3:8b:f7:8d:d6:9a:a3:1d:bc:25:e3:cd:
d1:66:84:7f:60:f9:3a:10:b0:20:ed:76:88:f8:07:
cf:75:34:c7:49:6d:c7:59:76:eb:be:19:df:37:ac:
94:60:98:78:57:fd:3a:53:ee:34:95:89:52:81:0b:
78:87:d9:28:fc:43:16:a8:e6:65:82:fd:0a:db:2f:
d5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1D:F2:C3:3A:62:55:8A:D0:D6:BD:1D:94:97:19:2C:DA:FC:64:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9141e64f-7ff7-3ed8-91b3-9df0c3653748.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.128.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:76:5f:4a:62:03:b9:c2:37:d8:50:ba:30:56:79:26:93:39:
4c:e6:f5:32:c4:e3:33:91:48:d6:94:2c:1e:9a:5a:ba:41:a9:
80:0b:0b:98:6a:15:cd:3a:6e:38:6a:ca:12:25:31:39:57:08:
1c:3e:39:bd:61:c0:07:b9:36:50:c0:c5:34:86:47:86:a3:03:
d8:53:83:87:e0:73:bf:3a:21:0e:7f:b1:8a:da:68:a5:cd:c9:
87:11:d5:90:6b:28:78:e2:6a:31:e9:66:cf:3c:72:ed:39:6b:
92:85:19:08:79:52:ef:5f:00:65:a4:b9:04:a7:81:a2:46:ed:
29:94:8d:46:dc:85:92:18:2b:35:d8:dc:67:b9:ac:6d:b4:2d:
bc:c2:16:fa:bf:77:e0:93:59:dc:43:84:0a:27:97:72:83:b3:
71:07:6e:d4:af:1e:9c:27:7d:72:5a:fa:64:05:0e:a1:26:3a:
96:3a:a6:1f:12:05:75:37:cb:b5:d3:c2:5c:8a:63:37:cb:d2:
34:ed:a7:a1:d8:68:c5:d4:6b:2d:16:e5:47:74:5a:a6:e2:6c:
a6:c2:51:88:f6:2e:e5:b2:e8:f7:95:51:ab:b6:b9:02:58:25:
e8:82:85:fe:f4:ab:c6:32:cb:f6:c7:be:55:67:98:4e:0c:90:
de:f8:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:04 2025 by rpki-client