Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96ff4c16-7fb4-36e4-ad2a-01b79f640989.roa
File: 96ff4c16-7fb4-36e4-ad2a-01b79f640989.roa (raw, json)
Hash identifier: k8tJ1H9e5xMxOQJhQVHYiqYVDmhb7mwMAJsmtfkKJ/U=
Subject key identifier: 40:1C:80:FC:B8:C2:2C:30:4E:E2:33:59:72:05:E6:8A:4B:89:45:60
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D589B7CBE9252665852F7FC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96ff4c16-7fb4-36e4-ad2a-01b79f640989.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Thu 28 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.108.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:58:9b:7c:be:92:52:66:58:52:f7:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Apr 28 04:00:00 2022 GMT
Subject: CN=4b6c4e3a-0cb9-4dd7-bff1-d348bc998167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:84:4e:59:7d:6e:45:47:3f:aa:6e:ac:a2:
71:2d:a3:37:ff:dd:af:4d:20:70:45:ca:e9:b1:6e:
4c:07:42:2d:17:fa:25:1e:52:0d:bb:89:11:8b:bd:
90:4b:04:42:65:99:3d:bb:1a:e3:dd:06:92:50:f5:
27:d6:00:c0:da:c7:23:bc:ad:fb:72:35:b3:48:a2:
37:d8:8e:56:a5:2c:33:30:d5:d6:a3:e8:9e:df:d0:
76:4d:90:55:7d:95:1e:40:69:dc:5b:13:f9:70:dd:
da:ac:8e:79:72:f7:a9:56:40:08:8d:48:24:09:b4:
10:cc:8a:c9:dd:a5:4f:47:23:c0:a4:7b:90:e5:d4:
3a:ac:37:68:e6:a4:fb:ec:57:3e:6e:80:5c:a7:74:
9f:c2:53:4d:5e:e9:40:27:33:18:7c:7e:1e:c0:d5:
f9:fa:3c:e6:11:3d:9e:85:4c:93:71:b0:2d:b5:8b:
59:83:22:68:10:15:88:ae:05:88:88:fc:37:74:aa:
be:1c:ec:44:df:50:e9:e2:77:35:f8:83:9b:92:29:
62:19:27:06:df:3d:51:e2:35:e2:27:04:11:fa:42:
f0:2b:ba:e1:0b:3f:62:4f:50:4c:d6:bd:d1:28:50:
ee:92:40:77:57:ca:9f:a8:f5:05:75:f5:4c:79:69:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1C:80:FC:B8:C2:2C:30:4E:E2:33:59:72:05:E6:8A:4B:89:45:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96ff4c16-7fb4-36e4-ad2a-01b79f640989.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.108.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:9a:3b:f7:42:8b:76:ba:7b:a9:47:9d:b5:be:e0:83:16:b7:
4c:ea:3c:e0:be:3a:da:4d:71:04:b8:4c:77:cf:c3:ff:4c:1f:
df:4f:fb:dd:36:bd:e7:5d:0a:1c:48:8d:62:81:a3:88:98:eb:
0d:eb:19:1a:51:8d:21:fd:14:ca:50:98:ca:25:83:93:76:45:
90:2d:c3:e7:63:63:bf:33:e0:c2:10:c1:b8:d6:0f:e6:8a:a1:
c9:b2:3b:2e:75:63:a0:f0:7c:8e:7f:92:8c:1f:36:0f:25:48:
8c:26:c3:5e:7b:3c:ae:ed:a9:7b:22:6b:66:00:60:53:13:9a:
33:84:b1:b8:a4:fa:03:9d:3b:f6:dc:8d:14:9f:b2:a5:95:cd:
e2:0c:df:e9:bd:8d:4a:ca:dc:ae:7a:59:c8:ba:82:f8:da:cd:
11:89:30:d4:36:1e:25:e0:c4:e6:d9:e6:f8:b5:23:6f:62:14:
6b:ee:18:d7:4c:db:e4:7d:6d:7b:ee:46:b2:2c:f7:34:0a:3d:
e5:75:ce:59:2f:c7:5b:ce:00:8a:3c:85:7d:c6:72:00:0b:a6:
d7:e7:45:d8:8a:34:84:b9:be:7a:65:29:2d:9e:e1:56:af:d4:
dc:15:cf:13:88:c8:87:12:94:46:f6:5d:e4:d3:56:3e:a0:8e:
cf:6c:e1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:20:01 2025 by rpki-client