Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2fc9daf-406d-3f67-a221-b4ec4da91e6e.roa
File: a2fc9daf-406d-3f67-a221-b4ec4da91e6e.roa (raw, json)
Hash identifier: HMcVY4yif7G4yWbkwL1aPouBfBBPLb7eeXgoNgj+/Ok=
Subject key identifier: AD:07:93:0A:30:56:D4:72:EE:0F:AE:68:E7:2F:FD:3C:1E:09:A9:44
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EF0854E23838A0DD95AD92F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2fc9daf-406d-3f67-a221-b4ec4da91e6e.roa
Signing time: Tue 16 Aug 2022 12:00:00 +0000
ROA not before: Tue 16 Aug 2022 12:00:00 +0000
ROA not after: Wed 21 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.144.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:f0:85:4e:23:83:8a:0d:d9:5a:d9:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 16 12:00:00 2022 GMT
Not After : Sep 21 04:00:00 2022 GMT
Subject: CN=bf6d9a70-4896-4e4b-87a7-4d3d8da239ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8c:9a:b4:09:88:8d:d1:04:d1:46:70:6f:32:
05:24:08:b6:61:6e:35:09:b4:50:50:bf:6c:4f:90:
15:43:eb:7c:e9:02:70:1e:6c:fe:d7:69:f8:66:2c:
5d:c6:df:b5:95:a9:7b:df:ae:f4:64:81:05:7b:74:
cf:f7:7e:ef:6b:33:e6:8e:b5:25:0e:39:1d:98:11:
c8:d1:7a:f0:d7:24:8b:a4:0d:b2:e0:58:ac:46:b6:
c0:d8:89:c3:9a:c3:1a:17:09:97:03:47:36:29:38:
32:c2:64:4f:57:59:e3:9a:26:14:91:10:73:9a:3a:
ff:bf:aa:61:7e:03:1e:ec:d1:ee:a5:1b:b8:21:c1:
0e:76:64:34:b3:a9:5b:e1:67:42:2e:53:90:af:a2:
dd:3c:1a:7b:b1:01:7e:4a:d7:d6:d0:56:0c:fc:cb:
56:c8:0a:ad:76:6c:00:f1:37:99:65:88:48:8a:8b:
d1:07:cd:6e:a6:cc:1e:aa:7c:5a:37:67:2e:e5:e8:
fd:00:e9:85:1e:e0:21:2b:62:c3:2a:d5:b4:ec:5c:
7c:22:a4:a1:f3:27:a2:33:32:be:66:b1:c9:a1:00:
de:cc:46:83:36:6d:ce:ba:69:97:ee:55:49:26:42:
ec:3a:27:c0:5a:e3:15:6f:d9:93:7c:f6:de:51:4b:
cb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:07:93:0A:30:56:D4:72:EE:0F:AE:68:E7:2F:FD:3C:1E:09:A9:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2fc9daf-406d-3f67-a221-b4ec4da91e6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.144.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:d4:43:e4:35:22:f6:87:d4:d1:4a:3e:6c:3a:b1:a0:18:08:
9e:38:72:4f:68:ac:44:14:d9:38:36:ae:9d:54:f7:c8:9a:84:
cf:4e:e2:ad:02:ec:fe:8a:32:84:46:d2:bd:cb:9c:79:7b:22:
9f:4f:94:c8:51:fb:b1:db:46:17:50:34:a3:e3:3e:f8:d6:88:
a9:ac:b8:33:cd:3d:78:a8:de:a7:4e:5f:a7:4d:ad:8f:4a:e1:
42:c6:a3:31:a6:11:3d:00:e2:44:a8:a4:7b:b3:b6:ed:53:50:
db:a8:1b:62:51:de:3a:2a:a9:44:3f:0a:82:0e:2c:d3:41:76:
eb:e3:07:8f:b4:47:b5:bd:00:38:59:c0:01:60:4b:8d:01:a4:
47:c8:22:20:08:a7:e2:79:2d:d3:8b:60:ad:23:3d:79:53:6f:
3d:6b:0a:7d:c2:35:f3:fd:9d:b8:d5:d0:66:bf:80:cc:21:73:
c3:c2:c1:30:5f:b8:52:85:fa:73:4f:5c:44:fb:35:4a:28:dc:
74:9d:bc:80:b1:e4:a6:44:2c:26:25:5f:6d:e5:94:c0:99:db:
25:80:77:58:de:13:dc:4b:58:dd:e3:cd:ce:50:72:bb:69:3d:
2d:4c:a7:3e:bb:db:c4:9e:2c:c5:47:8a:ac:a1:0f:0d:d3:ed:
a9:76:68:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:01 2025 by rpki-client