Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d1aef11-6f7c-38e3-9d47-04fcf518603b.roa
File: 9d1aef11-6f7c-38e3-9d47-04fcf518603b.roa (raw, json)
Hash identifier: Djw8GUpY4AezlyGblss5i5X8JQD6ajmNTOw5MsQaRcU=
Subject key identifier: 45:7A:59:1A:44:6B:EA:62:7C:A9:AB:DF:AE:33:62:48:A3:37:8E:18
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5683B9A6FA057650A6312880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d1aef11-6f7c-38e3-9d47-04fcf518603b.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Thu 28 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:56:83:b9:a6:fa:05:76:50:a6:31:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Apr 28 04:00:00 2022 GMT
Subject: CN=0ccf6e94-2e2f-4600-85ef-0626e5b80466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e9:2e:c7:05:fe:24:9b:ff:91:a4:11:e8:e9:
b2:e8:90:52:3b:b7:2a:41:27:90:ed:d4:25:a2:0a:
26:73:d5:bd:c1:5b:e7:b3:3a:03:18:a4:ee:bd:13:
85:15:c1:8a:1d:48:1e:0b:c6:fb:3d:06:5a:3b:68:
1a:fd:c6:f4:59:7d:b5:b9:64:e8:ef:d7:6d:e0:94:
33:d3:ce:a4:f2:af:5a:22:38:66:88:b4:97:4c:f0:
b4:f7:00:25:f9:48:0e:88:1f:3a:37:ba:7c:79:2d:
a0:13:f9:a5:33:b6:93:8e:e2:66:bb:7e:3f:30:db:
4c:d9:86:04:21:18:30:50:bc:7d:71:13:fd:87:07:
ef:a0:fb:5f:1a:87:f1:7a:ce:e9:a4:6d:8b:f0:67:
15:f0:88:5f:05:84:76:da:b0:c5:65:6a:91:9b:83:
ff:42:fe:63:6b:92:97:1c:44:e3:46:be:f6:c2:2c:
22:3f:aa:4d:c5:fd:52:ed:4a:bd:e2:3c:96:f0:41:
be:5c:8c:94:9f:c8:0e:18:c0:a9:f5:ea:7e:33:7d:
9e:1b:17:9c:91:12:75:06:93:73:c1:c6:44:de:5a:
39:89:6b:dd:76:4a:b6:df:33:0a:82:16:41:12:af:
53:bf:4c:39:9c:27:d6:c5:79:b2:06:92:94:61:f1:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7A:59:1A:44:6B:EA:62:7C:A9:AB:DF:AE:33:62:48:A3:37:8E:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d1aef11-6f7c-38e3-9d47-04fcf518603b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:77:74:da:46:11:02:b8:a3:d0:58:44:49:c4:83:45:40:b7:
98:e4:05:4c:01:56:2b:14:43:0d:1f:f2:8f:23:ed:77:c5:b9:
11:54:96:b0:0d:77:ba:68:61:39:c7:13:ad:86:71:01:81:5b:
7d:64:40:b6:8f:dd:12:88:48:b8:8f:8c:2e:c4:3b:cf:7e:b1:
71:e6:80:52:81:7b:45:54:5c:30:65:f8:64:ce:9c:bb:4d:86:
a1:11:53:99:b3:7a:3e:a2:96:c4:d0:40:b8:40:30:2c:9c:e8:
3c:34:b7:52:2a:36:07:b6:42:7a:ab:85:0d:4d:8f:01:a6:f8:
16:38:43:e3:08:0c:66:fa:fc:9f:d8:c4:65:39:df:63:6a:be:
7d:29:ef:90:d1:27:7a:fc:ec:a0:93:63:4e:47:be:7f:5c:3f:
4a:1f:ba:87:43:83:aa:fd:00:d2:d8:47:df:3e:2f:fa:27:25:
34:1e:2d:94:f3:14:96:57:f5:cb:c9:1c:f6:bf:63:f9:f0:41:
ab:c0:92:fa:3e:6c:41:44:eb:7a:b1:09:f1:74:cc:b1:14:8b:
9c:ee:c8:87:04:b2:99:94:f7:9a:6b:ea:49:78:ea:ea:4a:2e:
9d:9f:e4:d5:4f:b1:9c:bf:0c:6d:65:9c:75:cb:36:71:34:30:
d6:1b:3f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:04:54 2025 by rpki-client