Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98040e38-1a98-3d93-a557-fca95a74b811.roa
File: 98040e38-1a98-3d93-a557-fca95a74b811.roa (raw, json)
Hash identifier: FXe9T7UgOI5L8hDomx1bv+T61nuTLRUPJpEeyvTuvYA=
Subject key identifier: A1:BF:67:38:A7:6D:13:88:4A:4F:75:00:54:BB:66:27:0A:85:D2:77
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E97E200142B89E7E5C379B240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98040e38-1a98-3d93-a557-fca95a74b811.roa
Signing time: Sat 16 Jul 2022 12:00:00 +0000
ROA not before: Sat 16 Jul 2022 12:00:00 +0000
ROA not after: Sun 21 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.214.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:97:e2:00:14:2b:89:e7:e5:c3:79:b2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 16 12:00:00 2022 GMT
Not After : Aug 21 04:00:00 2022 GMT
Subject: CN=d29f5ce6-e89c-4b0a-acae-086ad73be876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:26:8a:d9:27:43:c1:72:db:da:36:bc:a2:de:
7a:7b:7b:d6:29:53:73:ae:3f:a3:02:61:09:97:0c:
f8:14:ef:fe:ae:fa:d9:dc:20:53:18:5f:a3:f2:ab:
8d:53:f1:6e:e2:28:dd:cc:e9:bd:09:bb:30:c7:29:
64:ba:de:7a:1e:de:cb:0e:39:ea:96:05:19:4f:d1:
86:58:26:09:30:80:b6:c5:2b:44:9c:ce:b1:dc:ae:
10:40:72:d8:af:81:86:b9:e9:30:e1:62:50:0e:8a:
7b:40:04:1c:e4:18:10:2e:4b:d9:cb:1f:7a:90:b6:
ed:1b:04:19:d4:6e:3f:ce:0f:ff:22:34:61:42:57:
42:76:39:01:46:09:ff:bc:7a:89:1e:f9:6f:88:31:
38:57:3d:d6:ee:f5:9e:6e:62:41:48:30:cc:96:a4:
d9:dd:0e:fe:9b:ee:e5:17:fd:9d:e3:68:50:ae:62:
52:a1:7d:74:81:ed:bc:89:bb:99:32:bd:89:44:ad:
f9:c7:04:77:99:af:99:86:04:99:db:3f:ad:e5:bd:
07:3f:fd:55:45:98:9b:1e:74:2f:86:36:47:bc:67:
2f:46:19:51:b5:56:b0:ab:da:4c:53:44:ae:05:46:
1b:db:76:d5:05:5a:f5:11:2b:61:98:bc:68:7a:49:
4a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BF:67:38:A7:6D:13:88:4A:4F:75:00:54:BB:66:27:0A:85:D2:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98040e38-1a98-3d93-a557-fca95a74b811.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.214.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:de:da:1e:02:14:3c:eb:75:62:49:1f:ba:6b:65:e1:69:fa:
01:ce:14:01:2c:b6:3b:91:53:0b:52:b9:38:24:90:c8:e1:2f:
19:02:b5:5d:79:2c:66:6e:14:30:b8:fb:89:3f:35:10:47:71:
a5:c3:ed:3f:b2:7a:0e:a3:69:16:17:86:4a:a3:96:cb:4a:9e:
2f:60:e8:8f:fc:59:39:ee:f5:b8:35:be:c6:40:92:da:bf:36:
c7:46:dc:cb:76:25:5a:22:11:9a:7b:b2:37:1c:5a:a5:ec:07:
3c:cc:19:e9:e0:89:74:89:54:94:db:40:16:b9:a6:84:f8:b9:
dd:5d:e0:df:50:85:99:8b:65:5b:d9:cb:58:c1:14:35:cb:d6:
c7:c0:eb:5d:68:28:29:e0:d7:e8:43:84:2d:66:6f:12:2b:ba:
85:a9:9f:72:c1:29:75:5f:47:22:87:54:70:96:9e:ab:b3:11:
11:dd:31:3c:e1:08:8c:c1:a8:e4:47:6c:cb:a6:3c:05:75:4f:
73:45:5a:f2:08:e7:9b:37:e2:b8:d9:56:38:fc:9c:a2:c7:2d:
eb:4d:06:c4:82:8b:f5:36:20:d3:d9:d1:15:b9:0d:b3:b5:fb:
e5:f9:ae:47:82:bd:87:18:02:74:d1:b4:6e:34:3c:cc:71:46:
4a:fa:cd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:22:32 2025 by rpki-client