Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/953ad5c7-a795-30cb-aabd-76ea2e53a54c.roa
File: 953ad5c7-a795-30cb-aabd-76ea2e53a54c.roa (raw, json)
Hash identifier: dSM+jPUHojVVWJigrSi8MyI7gPmH0TZYXLHxMylQy6U=
Subject key identifier: ED:2D:5E:EF:32:E6:D9:CC:12:12:6B:BF:D5:71:67:0C:85:6E:2A:C6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5666919D6DE56A011F7AB280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/953ad5c7-a795-30cb-aabd-76ea2e53a54c.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Thu 28 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.23.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:56:66:91:9d:6d:e5:6a:01:1f:7a:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Apr 28 04:00:00 2022 GMT
Subject: CN=2a6b4808-618c-4a4a-9882-5c31eeb4b832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:a8:b3:b5:3f:90:0e:4d:35:9c:d1:bd:c2:
26:75:dd:b5:8d:eb:0d:64:89:30:a2:0b:71:d7:02:
b8:1f:fc:dc:c8:3c:64:f2:90:ab:9c:bc:53:b2:a1:
db:51:04:82:32:e0:61:3f:59:17:27:6e:6a:90:84:
40:92:a4:56:f9:23:60:41:55:e1:35:ad:4f:c2:cb:
af:9f:e8:28:aa:11:26:3d:7b:6a:5c:b4:42:fc:e3:
23:7a:99:93:ed:53:60:f6:93:f4:42:e0:09:94:db:
0b:15:ac:cd:20:0a:65:02:42:79:c5:10:c7:f3:48:
2d:9b:f5:8a:5e:e0:0a:42:9a:f4:2a:f0:5a:84:86:
50:b7:2e:b1:60:ad:f5:eb:7b:6d:6b:dc:d7:44:99:
b1:67:92:84:e1:7e:c1:ad:e9:ed:41:5f:d0:ae:6f:
d1:89:b8:06:5b:0c:d6:42:e7:09:3b:db:ab:76:6f:
cf:18:24:fc:3f:b0:fc:f4:f6:2d:80:bc:d7:60:84:
9e:47:2a:07:7a:0c:62:61:d2:8d:db:fb:49:80:64:
44:bc:c6:06:7a:12:89:39:40:b9:08:5c:c1:d1:10:
04:60:bd:56:26:f6:d8:4e:65:2e:91:ad:4d:5d:f6:
c3:26:2a:48:1e:31:e4:e4:98:9d:b1:80:f9:4d:d7:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2D:5E:EF:32:E6:D9:CC:12:12:6B:BF:D5:71:67:0C:85:6E:2A:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/953ad5c7-a795-30cb-aabd-76ea2e53a54c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.23.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:6f:40:d2:1b:5a:a6:48:8c:d9:11:1f:78:88:0c:bc:31:2e:
5f:2f:1f:33:35:81:3e:03:4b:a2:31:6f:da:ce:f2:9b:6e:b3:
96:b0:75:2d:68:35:c1:25:f1:17:58:98:44:d3:4a:19:2c:04:
5c:e2:93:bd:53:3a:56:a4:8a:2f:90:96:cb:e4:db:6e:1a:13:
d7:d4:d6:4f:ad:52:a4:8f:d8:ba:0e:a5:da:90:12:04:8c:78:
9b:26:2a:71:fd:62:51:8e:4e:05:51:b5:c4:dc:6b:02:3b:1a:
86:fb:92:f8:b6:dc:0a:48:c7:66:57:58:61:1a:e4:8d:04:65:
a7:7e:cf:6e:24:6b:30:60:98:6c:53:33:34:4b:52:d6:c7:64:
fa:eb:b4:63:1f:7d:e0:36:bf:d9:d9:43:1b:bb:d2:5e:bc:89:
fa:24:f9:06:2a:0d:c8:9e:96:58:65:40:d4:7e:a4:9c:04:6d:
6e:dc:b8:d0:dc:c4:34:03:1c:bc:ec:ec:8a:b8:e6:54:43:8b:
c4:1a:ce:e2:a4:bf:8c:54:89:7c:4e:b4:63:10:40:05:f0:cc:
6b:6b:f6:2b:54:9a:de:e9:f0:f5:2b:4c:8d:e9:c5:31:f1:5b:
c7:1c:f9:5c:73:1d:27:df:9f:fe:58:75:ef:08:16:c9:75:4f:
8f:ef:3d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:01:55 2025 by rpki-client