Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99202e0c-4fe3-32c1-aa34-0629ff94e6ce.roa
File: 99202e0c-4fe3-32c1-aa34-0629ff94e6ce.roa (raw, json)
Hash identifier: SR/JCWrsvVdbcF9as6NXN/kw6pciEs/7DCdeqsMjgPc=
Subject key identifier: 71:3F:7E:75:7C:D7:4F:2F:97:6E:A6:9E:8E:92:28:F9:18:63:3D:FC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DBDFB8EEB662D38CF62401400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99202e0c-4fe3-32c1-aa34-0629ff94e6ce.roa
Signing time: Fri 29 Apr 2022 12:00:00 +0000
ROA not before: Fri 29 Apr 2022 12:00:00 +0000
ROA not after: Sat 04 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.28.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:bd:fb:8e:eb:66:2d:38:cf:62:40:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 29 12:00:00 2022 GMT
Not After : Jun 4 04:00:00 2022 GMT
Subject: CN=317d4b74-7b27-49f8-8587-088ba0eafcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e4:c3:28:45:83:98:64:1a:ec:53:65:7d:c2:
4f:cc:d3:cc:44:28:2b:67:1a:f2:b5:bd:6b:3f:ba:
d0:89:25:d3:d1:3d:0d:1a:0a:a6:45:f8:91:b3:80:
37:83:96:db:88:0f:75:99:07:e2:de:c4:47:2c:50:
95:c5:40:26:c0:b5:0a:53:1e:63:a4:30:08:b4:87:
01:36:72:f6:a0:a0:a8:14:f8:0e:fd:ba:ec:92:f0:
b2:e8:27:68:f3:24:85:3b:8d:87:9d:2a:88:85:9d:
a5:50:79:76:eb:ec:75:b2:69:08:c4:1b:57:71:b4:
9c:c4:aa:ca:bb:54:6f:44:79:e3:08:ac:a5:92:87:
76:84:6f:2f:7e:e2:9e:bf:a3:77:12:fd:5f:e3:48:
32:c1:9d:21:1f:af:f7:7e:9c:1a:4d:6a:1d:3c:61:
22:70:28:09:57:56:72:14:77:2a:e5:75:48:15:ec:
d6:41:a5:19:67:ca:27:27:34:ca:2c:52:28:ef:f0:
e9:9b:23:fe:2f:38:26:4a:61:27:83:40:4d:fb:b3:
05:5c:a9:2d:85:ed:cc:61:3d:03:78:e1:3e:6f:36:
8f:95:23:69:17:61:b1:22:0d:13:e1:0d:25:f1:8b:
1a:e7:22:4a:da:48:81:01:67:ac:b3:8c:58:b9:14:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3F:7E:75:7C:D7:4F:2F:97:6E:A6:9E:8E:92:28:F9:18:63:3D:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99202e0c-4fe3-32c1-aa34-0629ff94e6ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.28.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:b9:64:eb:07:ff:bd:eb:3f:fb:9d:16:24:32:a4:0c:33:c4:
04:7c:cc:ae:d6:86:34:b7:05:03:a9:51:0e:af:29:47:c6:4d:
f8:8c:b4:ac:a2:21:fa:45:b8:68:ee:9f:15:3c:e2:cb:ff:61:
3b:38:d2:26:90:0f:0c:b0:d0:3c:2f:df:85:57:59:d0:1d:65:
7b:a9:74:3c:ff:e5:39:7d:6e:3c:c7:6a:d6:24:6c:8d:55:f7:
52:0f:85:d6:e7:ee:19:02:68:f9:9b:10:e7:81:78:3c:61:29:
75:f2:3c:1c:a2:88:f4:e9:3c:15:f0:d0:4a:7f:9d:54:84:cc:
3e:ad:32:0a:d5:31:59:bf:f6:ea:b6:72:47:ed:10:0c:c0:99:
41:1d:10:6a:87:c6:5e:d6:13:dd:bf:90:23:68:28:98:68:fb:
46:ce:53:57:a6:46:87:40:89:4f:b7:1b:07:5d:9f:fa:cf:32:
e8:58:b2:af:e4:25:3a:c9:85:9b:98:2e:f9:68:d2:4b:b5:b6:
d4:05:d8:e7:d2:b1:25:a9:34:84:48:5f:02:45:dc:b5:ba:b9:
66:60:f3:1e:0f:19:83:0e:22:0b:2e:99:98:d0:58:03:4b:dc:
da:10:be:d2:08:ad:49:ea:0e:bf:94:d5:f0:9e:e9:e0:e8:58:
18:cf:9d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:48 2025 by rpki-client