Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f5372e4-8b01-32a9-b299-6b86ddf08932.roa
File: 9f5372e4-8b01-32a9-b299-6b86ddf08932.roa (raw, json)
Hash identifier: nw+UJ0HqCddBdi/PeNHc3HkmvoYzcxd3hvK6PnflVrg=
Subject key identifier: 0A:35:76:67:BA:B8:3D:63:7C:09:43:A6:82:E0:00:EE:69:EF:7F:BD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F12BF6C894536E0F8E4D5F6E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f5372e4-8b01-32a9-b299-6b86ddf08932.roa
Signing time: Mon 29 Aug 2022 12:00:00 +0000
ROA not before: Mon 29 Aug 2022 12:00:00 +0000
ROA not after: Tue 04 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.50.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:12:bf:6c:89:45:36:e0:f8:e4:d5:f6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 29 12:00:00 2022 GMT
Not After : Oct 4 04:00:00 2022 GMT
Subject: CN=77a710e9-803f-4085-82b6-400e92973991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:bd:c5:d0:d6:7e:f9:9a:58:d1:de:8c:f3:
cb:74:57:bd:12:d5:75:f8:0d:6b:76:5e:18:d2:93:
2f:a9:d8:04:dc:9f:58:02:a2:97:0a:8e:ab:83:bf:
80:8e:83:2a:95:42:0a:f3:03:58:c6:a2:5a:c8:70:
3f:a1:99:03:8f:a1:9f:5b:da:1b:60:80:fd:af:e7:
9c:28:73:03:58:76:0c:80:9e:c0:4f:e2:28:93:97:
55:f1:80:1a:e4:0b:31:f6:42:e3:e5:2c:61:29:9d:
fc:92:59:9f:ef:d6:82:ef:4e:5d:15:84:06:95:65:
81:49:16:9b:cf:8e:4d:ba:b8:da:ef:54:3b:33:84:
a1:4e:b9:f8:03:41:ce:44:9d:15:21:68:2a:12:d6:
03:06:6f:7a:0c:f5:fe:28:20:41:ab:08:c7:9a:33:
4d:5e:29:45:d1:99:7c:c0:25:5f:e1:76:b2:ea:d5:
47:07:2f:a7:34:48:28:15:ac:39:6b:59:94:b8:ad:
aa:e4:4d:81:6d:73:87:f7:15:2e:2a:99:b8:d8:cd:
63:b0:eb:24:23:01:87:1a:46:5a:1e:dd:0c:a8:a0:
30:dd:6b:40:e9:4c:96:4f:ef:6c:48:f0:c3:e9:7e:
5b:7f:5e:d7:5a:84:5b:a4:cb:ec:d8:49:48:fc:0c:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:35:76:67:BA:B8:3D:63:7C:09:43:A6:82:E0:00:EE:69:EF:7F:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f5372e4-8b01-32a9-b299-6b86ddf08932.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.50.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:01:a2:df:83:ea:7a:6c:06:f4:49:b7:a4:af:4f:54:ea:78:
50:18:4c:17:9f:61:e1:50:89:fa:36:77:d8:66:7e:b6:1b:4e:
ea:d8:82:a6:a8:8d:34:4b:e1:2c:3d:9e:62:2a:bd:33:2a:54:
a0:4f:4d:c7:45:a7:a1:0e:e3:a7:b2:ef:b6:10:cd:14:04:d0:
f9:d0:a0:18:56:c5:49:34:f8:f3:4c:0c:0d:49:12:5e:fc:7a:
e0:a7:5a:c7:e8:e0:ed:29:7f:62:83:be:27:54:d2:1b:89:49:
ea:3d:5f:63:45:d4:eb:83:7c:e0:95:fd:ac:8f:61:42:e9:c8:
b3:4f:0b:f7:fb:50:1e:78:59:00:9c:ef:bc:18:52:a2:4f:ad:
ad:c1:93:3a:8c:d6:dd:29:74:85:6d:35:87:b1:7e:47:be:13:
49:40:25:2b:4e:16:2b:ee:7d:54:db:a2:84:dd:25:00:9d:22:
f8:cb:58:55:4e:7a:05:e5:7c:2d:22:6d:ca:cc:f9:31:aa:11:
e4:0f:fb:35:4d:04:d3:fe:1e:90:3a:17:48:f4:8a:eb:57:7d:
77:86:d4:21:db:32:fe:0c:d7:a3:cc:e1:b5:72:fd:a5:db:09:
c1:39:92:f5:7a:19:59:6f:a7:8b:84:84:cc:5c:9c:29:24:9e:
91:f0:bd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:13 2025 by rpki-client