Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2aef7a0-e1d0-3766-b400-d161e2280040.roa
File: a2aef7a0-e1d0-3766-b400-d161e2280040.roa (raw, json)
Hash identifier: kqiKm3twDVp3DYR513WafN3WuTrvPoXcyXj8/eiMksk=
Subject key identifier: 9C:78:E0:17:5B:7F:0D:E1:84:97:9E:4C:90:62:D1:1E:0C:60:07:9C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DA7880F4206DF49F4A5DD3F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2aef7a0-e1d0-3766-b400-d161e2280040.roa
Signing time: Thu 21 Apr 2022 12:00:00 +0000
ROA not before: Thu 21 Apr 2022 12:00:00 +0000
ROA not after: Fri 27 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a7:88:0f:42:06:df:49:f4:a5:dd:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 21 12:00:00 2022 GMT
Not After : May 27 04:00:00 2022 GMT
Subject: CN=20870f3e-5710-4ef3-85b7-8e56ec7b8f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:be:73:3b:b7:d6:cb:e4:d3:1b:ab:03:c7:
0b:b6:c5:17:bb:bb:39:a1:39:8f:ec:93:8a:b4:a8:
9e:f3:a1:09:f9:d5:31:4d:8e:b1:3d:71:ce:45:2d:
b0:de:37:32:57:7b:73:e5:2f:41:51:df:3e:f5:1a:
6f:03:e5:bd:50:05:78:e4:2a:b5:90:b9:b1:ba:7d:
9a:0a:87:45:60:53:97:b8:69:c3:58:76:8d:7a:6a:
70:93:1b:a7:77:8d:0f:48:aa:b0:2f:a5:42:d2:6b:
3a:51:72:b4:69:04:5a:ee:a7:d3:d3:3c:ba:86:e2:
ee:99:56:e0:9b:29:50:b1:e7:e3:6a:8b:eb:ac:9e:
84:a6:6a:c1:07:fa:3b:40:18:77:a1:a1:11:03:70:
46:92:5a:c5:c6:a0:11:5c:84:45:f4:63:05:d4:15:
bc:49:c1:1a:5d:63:29:6e:cf:2d:de:0b:62:50:4f:
f7:76:c9:fa:c5:07:00:ba:22:b6:d3:73:26:05:1a:
5f:cd:42:65:96:f7:37:2a:f1:c0:a5:c9:85:e5:0f:
92:a4:fb:b6:a0:dd:e1:d6:ab:52:05:82:d7:53:6b:
c3:bc:97:88:07:f6:6b:16:03:c8:79:79:e3:67:3a:
0e:03:be:bb:6c:5d:d5:56:dc:1b:f9:20:90:22:5c:
e4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:78:E0:17:5B:7F:0D:E1:84:97:9E:4C:90:62:D1:1E:0C:60:07:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2aef7a0-e1d0-3766-b400-d161e2280040.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:a4:4a:c6:be:86:4e:a0:1b:60:0c:7b:1c:8f:03:f8:17:ef:
0b:ef:5b:12:0f:21:df:4f:28:fd:1e:dc:46:43:c7:77:9c:2a:
98:47:1a:09:5f:19:58:29:f3:33:58:b0:e6:6c:12:b3:c1:9e:
79:a3:16:09:47:c0:06:23:cd:c7:b6:a8:16:89:48:d5:db:7f:
6e:a9:a6:b1:00:db:0c:be:7f:a8:10:cf:61:c9:04:b6:44:c7:
b3:06:5e:d1:ba:87:63:9a:d5:53:66:a7:10:43:ef:f7:5d:30:
4b:97:dc:5a:1c:06:26:c5:7d:9e:28:1c:da:2b:f0:4e:db:08:
39:29:dd:1e:fa:ac:0c:b0:a4:49:8b:5a:e6:66:19:2c:2d:92:
db:a3:08:b2:3d:15:38:ca:bb:83:f6:9a:94:4c:18:71:7e:5c:
58:3f:b6:f3:cd:1d:6c:17:20:fb:5d:ab:65:9d:88:b2:6d:9a:
a5:5f:79:6f:ed:2a:f8:6d:f5:b2:88:3d:42:ca:fd:20:df:ae:
bf:bb:b3:e7:0f:c5:0d:02:33:09:8b:ca:42:31:82:ba:f9:aa:
91:ef:fd:ad:b4:bc:f1:5b:b0:ef:3a:c0:45:41:79:4d:e4:d0:
5e:7f:04:1a:04:eb:fe:60:b3:34:08:7a:94:29:34:63:94:e3:
04:30:df:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:53:00 2025 by rpki-client