Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a3fee18-fd97-301f-b77e-9f15f80c460c.roa
File: 9a3fee18-fd97-301f-b77e-9f15f80c460c.roa (raw, json)
Hash identifier: EXU1+nB3NlJ09uzCe/4bYcqbDgpjjnQrsF2DNWuUygo=
Subject key identifier: 4F:6B:01:0C:54:AA:69:49:42:45:E8:90:57:F5:71:8F:2C:86:1A:8F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DBE0A6F2B44ED900F058EEE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a3fee18-fd97-301f-b77e-9f15f80c460c.roa
Signing time: Fri 29 Apr 2022 12:00:00 +0000
ROA not before: Fri 29 Apr 2022 12:00:00 +0000
ROA not after: Sat 04 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.52.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:be:0a:6f:2b:44:ed:90:0f:05:8e:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 29 12:00:00 2022 GMT
Not After : Jun 4 04:00:00 2022 GMT
Subject: CN=c3e162af-01ac-47db-8a32-a3dc7d17c0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:a7:8a:8c:30:65:39:95:8d:09:85:6e:f2:
a1:4f:bd:19:7a:43:89:b5:f3:c5:26:56:4c:8f:6a:
60:86:29:03:a2:d0:9f:f2:58:5a:4d:5f:7f:46:92:
d0:7f:d7:4c:54:25:be:53:45:31:55:b5:5c:be:a6:
62:ae:5c:c6:be:50:0f:5c:c1:06:fb:99:4b:8a:57:
55:6b:53:9a:e9:f0:35:82:37:18:3b:e5:2b:5a:e0:
cc:9e:c5:f2:82:59:00:54:18:c0:76:f9:31:6b:b7:
44:bd:b5:29:94:cf:c3:5a:12:7a:4c:8b:c8:f3:61:
49:38:74:e9:f1:76:b6:9f:99:04:6f:51:6d:4a:48:
00:79:93:cf:6f:05:c7:9c:a0:6f:6a:fb:e4:07:e9:
53:d2:67:74:f3:06:ec:71:fd:a8:3a:58:03:49:e9:
26:c3:c0:52:e5:61:6d:14:bd:36:f7:09:2a:e5:21:
a7:a9:78:cc:a2:80:1c:f3:1d:15:0b:ff:5c:48:dc:
25:9a:cf:47:39:6d:69:4c:5f:71:d2:77:19:aa:71:
f9:09:9d:bf:51:33:93:9f:da:07:4a:73:86:e8:82:
59:b2:7e:d9:a7:8e:3a:c7:61:4f:3f:64:a7:27:20:
63:53:7e:11:b5:fc:61:74:ac:85:8a:93:64:a9:6c:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6B:01:0C:54:AA:69:49:42:45:E8:90:57:F5:71:8F:2C:86:1A:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a3fee18-fd97-301f-b77e-9f15f80c460c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.52.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:ed:23:d2:07:e1:1b:30:c8:45:0b:0a:e2:05:18:49:ea:28:
8c:1e:3b:22:76:8c:28:99:d1:5f:8a:2e:ca:e8:77:ca:bd:7e:
b5:e3:60:6b:ad:de:a6:54:ac:16:dd:1b:01:cc:9b:d7:3d:45:
77:7e:7d:01:5b:72:df:4f:f5:38:86:f2:a7:b5:64:c1:ff:3e:
40:cf:1d:6c:ef:70:55:23:c6:47:84:24:92:4f:53:70:7a:61:
78:ab:dd:15:fe:eb:24:ec:78:3d:ce:a1:7e:72:7f:55:e2:e7:
bd:53:4c:fd:5d:32:1a:6d:24:f3:f5:92:b5:8a:a1:4b:82:cf:
95:cb:cd:9a:10:78:7b:50:40:b2:8b:de:2b:96:cf:a7:80:b3:
c9:8f:b4:7f:71:9c:df:f1:84:52:d8:a7:1d:53:57:4d:02:1b:
dd:53:6f:e1:b4:f6:3f:f6:55:80:25:96:8c:49:08:9d:da:f2:
d4:77:49:91:f7:5f:62:55:7a:4f:02:63:03:3e:e3:b6:c1:6e:
9c:91:b8:55:0b:f4:44:36:b5:b3:42:70:ee:b3:7a:22:e8:bc:
5d:89:1a:dd:24:54:33:19:1b:5f:0c:cf:16:be:16:6f:a9:bd:
0e:3b:c3:59:29:ad:61:7e:52:05:bd:e7:a9:4c:55:37:7d:b0:
6b:98:dd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:15 2025 by rpki-client