Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96de71e6-ab92-3034-a676-8bb9c9f0a6f6.roa
File: 96de71e6-ab92-3034-a676-8bb9c9f0a6f6.roa (raw, json)
Hash identifier: VqdaFaT3D+/+M1WpH3Uxc6t2lMbwF/Or9ZasrSQYUu8=
Subject key identifier: 20:AF:BA:66:12:9D:42:0D:66:FE:0C:74:D8:27:6D:39:BD:97:80:20
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA1204F1AB0B9B2E3155F5380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96de71e6-ab92-3034-a676-8bb9c9f0a6f6.roa
Signing time: Wed 19 Oct 2022 12:00:00 +0000
ROA not before: Wed 19 Oct 2022 12:00:00 +0000
ROA not after: Thu 24 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a1:20:4f:1a:b0:b9:b2:e3:15:5f:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 19 12:00:00 2022 GMT
Not After : Nov 24 05:00:00 2022 GMT
Subject: CN=bc2fd63b-9823-4a72-841d-57ee66ec3b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:c5:3b:29:7b:00:75:d0:17:a5:b5:05:df:
04:a8:af:90:72:5a:5b:3b:11:a3:f4:a9:4b:29:e8:
73:78:43:14:f4:8f:11:b9:de:cb:1e:72:a5:7a:b7:
df:4f:71:f4:72:e7:35:f1:82:d2:d1:d7:92:5d:19:
e1:7c:49:be:01:d0:18:56:b0:a8:e3:43:1d:56:5f:
c6:a0:b3:49:f4:9c:ce:cf:df:96:6e:23:6b:6e:b9:
4e:a1:21:63:0a:32:cb:a8:90:83:b7:3f:61:d0:24:
e8:a1:88:c5:9e:a5:89:3b:31:38:5a:ae:ca:20:d0:
b3:bc:6a:01:e7:9c:03:ad:e2:e4:17:47:f5:6f:73:
51:29:a9:33:c2:0f:c4:94:86:8d:02:61:03:b3:d9:
6e:0e:c9:ec:f3:6a:76:b7:d0:46:75:71:c8:bc:11:
27:f0:6f:6c:6a:24:8c:ca:58:d7:a3:23:0f:d0:4e:
88:0a:d0:7d:b8:27:4e:45:4e:99:0a:ee:2e:97:fc:
c4:4b:44:20:dd:0d:80:96:5c:34:c8:db:2a:ee:b3:
76:ab:95:f2:15:40:26:1d:4c:e4:45:d4:59:10:ac:
ec:09:93:45:49:ad:1c:28:ed:82:3c:ad:de:a1:56:
b0:e7:66:75:51:94:75:29:40:44:74:30:dd:40:37:
44:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AF:BA:66:12:9D:42:0D:66:FE:0C:74:D8:27:6D:39:BD:97:80:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96de71e6-ab92-3034-a676-8bb9c9f0a6f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.22.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:78:c5:f5:f8:f4:db:37:d1:c5:b4:d8:f3:fa:b5:25:06:5c:
e7:a3:4f:d9:b9:41:f8:d3:56:d7:5f:33:3c:9b:98:f5:3d:c7:
ca:2f:f6:4c:d3:30:71:a6:50:28:6f:bb:b3:12:80:bc:5b:d8:
13:64:c8:16:dc:cb:bb:6a:3c:3e:eb:bf:bc:f5:88:5e:15:f6:
47:31:0c:89:c0:79:6d:76:f8:84:51:bc:40:b8:8b:9e:bd:dd:
d4:50:7c:5b:a2:3a:9b:b5:49:7c:b0:c1:ea:60:1c:61:df:9f:
4f:6f:1d:80:5d:4e:ff:53:8b:64:eb:49:97:e1:ec:cc:e7:e2:
7e:fe:87:0c:2b:f5:1a:60:13:b0:b1:77:30:27:e7:0b:76:1b:
45:06:4c:0d:9e:47:12:92:50:fa:91:91:a1:80:af:bb:90:33:
78:9d:95:e4:74:a4:18:2a:fc:8a:1d:6f:8f:69:89:70:39:ea:
c5:38:ac:8b:7c:cf:0e:67:5d:f1:0c:43:0e:10:47:b6:99:0f:
60:85:21:36:ae:f4:ee:91:52:c2:ef:de:d4:22:f8:d4:88:95:
2c:7c:a1:09:4e:8d:12:e2:a8:9f:ca:d1:8b:d1:0b:d2:b6:69:
1e:03:27:bb:6e:33:e3:0c:42:f4:bc:d6:07:7c:4d:a6:0d:01:
ad:da:f0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:10:26 2025 by rpki-client