Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98370a7c-a99e-3a91-910b-9548412cc76b.roa
File: 98370a7c-a99e-3a91-910b-9548412cc76b.roa (raw, json)
Hash identifier: Kyp8cy0ToD28jigV8Bh+E83D3+Wl77/MXXL4j/nH5YE=
Subject key identifier: 7F:E7:E0:67:22:11:15:92:B9:13:10:2F:38:CC:9A:D2:BB:D1:40:E3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC92444A717232EF7E19F8F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98370a7c-a99e-3a91-910b-9548412cc76b.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.122.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c9:24:44:a7:17:23:2e:f7:e1:9f:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=ba40737c-3905-420b-ac68-bfbce6314941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0e:04:9c:eb:64:ef:47:98:d6:28:d9:a6:a4:
23:3a:8f:d4:f5:e9:5d:e2:dc:80:5c:7b:1a:7d:1e:
f1:12:00:6e:b3:8e:f0:b7:14:eb:6f:da:7b:64:88:
b2:63:7a:c4:0e:c2:36:e5:66:8e:85:a3:8f:70:df:
2b:64:64:aa:68:94:8a:c8:d8:63:b3:02:43:1d:bf:
b4:f7:aa:71:9f:bb:04:df:7d:2a:73:f1:e7:71:a2:
21:9a:2a:79:a0:07:2a:6c:bc:05:ff:e6:7d:3d:51:
a4:5b:25:7d:97:64:4b:35:2c:a5:d6:c7:42:82:10:
63:4b:63:4c:70:b1:e7:1a:5c:74:7d:c0:37:32:62:
df:e0:3b:45:33:ab:f7:d5:5b:78:cf:d6:ba:0d:f6:
ab:9a:20:7d:6b:d2:a2:6f:49:67:ac:58:49:ce:ef:
13:89:1f:66:6f:d8:3d:18:4a:37:02:c0:03:9d:d9:
c7:55:fb:37:6c:1f:7b:b5:0a:cc:d5:14:11:a6:2c:
9b:61:4e:3f:32:4b:b7:76:2e:fe:c8:e8:bd:20:62:
61:1e:6e:c5:76:7a:1e:7d:f6:98:bb:0a:c6:17:89:
d3:a2:b1:73:47:b4:f4:89:2f:3f:42:88:f7:4e:a0:
01:b8:e9:31:15:60:67:47:3c:1b:b9:69:85:c4:7d:
92:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E7:E0:67:22:11:15:92:B9:13:10:2F:38:CC:9A:D2:BB:D1:40:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98370a7c-a99e-3a91-910b-9548412cc76b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.122.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:e8:11:67:a3:b0:67:79:4e:28:eb:6a:e1:33:88:f1:97:c0:
1f:03:34:88:fa:e9:6d:22:b9:06:f6:cb:05:0b:96:10:1d:36:
e0:53:24:5d:97:25:64:4b:35:09:61:cd:32:9d:e1:07:ce:3b:
5f:c5:b8:34:07:7c:45:e1:83:0e:c2:8e:27:44:61:ab:1a:a8:
af:fb:7f:68:b9:ae:2c:62:8e:c6:6b:ac:6b:dd:b3:f2:e9:81:
f2:6e:45:a4:be:16:69:1f:b3:8f:19:14:0e:31:e1:1e:03:eb:
f0:51:42:8e:7f:a8:fe:3f:89:8f:18:73:06:ea:6d:29:e6:fc:
bb:a9:3f:15:f8:37:35:b6:63:aa:67:15:60:9a:e9:8a:86:e7:
a3:9e:d6:ec:19:24:57:69:2d:82:3d:fb:c0:6b:98:ed:f1:7d:
bf:85:e6:34:ab:f1:6e:cf:cf:16:0c:ca:01:8a:c4:9c:86:1d:
48:59:d6:b7:6e:06:77:39:3e:31:c7:41:5c:4a:ee:33:d0:d8:
a6:58:6d:d3:7b:51:dd:b1:34:3f:c5:83:66:73:9c:49:af:05:
e5:95:e1:5f:27:f8:db:4e:58:d5:23:e5:a6:8d:52:06:01:26:
b7:7f:c4:6f:4b:8e:9b:1d:78:98:9f:c3:ce:6d:46:a9:a0:46:
11:15:e2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:11:44 2025 by rpki-client