Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a3b5f3be-7028-376b-b77b-b5c2120b1eeb.roa
File: a3b5f3be-7028-376b-b77b-b5c2120b1eeb.roa (raw, json)
Hash identifier: AgxWMG6PrP6QOpJAhkfDH7gclzDfzyYFeVReB8++xNY=
Subject key identifier: 04:1A:0A:26:3C:58:97:27:ED:14:99:7B:4E:72:53:3E:83:27:D9:99
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EDDAD060E9D7BE4FA01E5B780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a3b5f3be-7028-376b-b77b-b5c2120b1eeb.roa
Signing time: Wed 10 Aug 2022 12:00:00 +0000
ROA not before: Wed 10 Aug 2022 12:00:00 +0000
ROA not after: Thu 15 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:dd:ad:06:0e:9d:7b:e4:fa:01:e5:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 10 12:00:00 2022 GMT
Not After : Sep 15 04:00:00 2022 GMT
Subject: CN=1be86d46-8ae9-44e6-ad3c-c768ec9da0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:1d:11:8c:b5:15:42:4b:b0:ac:a3:93:68:
31:a0:f8:41:59:e8:29:8a:62:3a:99:28:7a:1a:45:
69:ca:63:0d:59:69:b3:ce:12:eb:87:e4:20:f2:ee:
73:e8:13:5c:a1:dc:54:9b:cb:2b:0a:64:bc:26:6b:
6c:39:d1:22:72:88:2c:95:34:71:af:1a:99:8f:b3:
c3:30:a8:c5:00:e7:94:b1:0b:4c:16:3e:77:0a:2c:
d1:80:4e:b0:87:cd:64:32:00:8d:97:8f:e4:c2:17:
5e:22:0a:5b:ce:67:04:76:4d:04:d5:07:4d:e8:3b:
78:27:60:3a:56:df:f7:56:8d:43:e8:1b:20:1e:75:
86:56:85:bc:25:29:34:16:3f:b7:51:65:3a:eb:e5:
42:33:c9:97:d9:7f:1f:34:ba:17:5e:f8:37:48:f2:
e8:2d:e6:cb:af:7e:6f:86:0e:bc:76:2f:2d:11:de:
49:e2:94:1a:52:19:92:00:c9:e9:7a:36:df:09:f4:
98:60:6e:f2:39:cf:5b:1b:9a:0f:9c:fe:47:89:88:
40:be:4d:cc:ea:07:93:52:8f:f0:49:2d:64:8c:e5:
ce:af:13:34:26:6e:bb:5a:4b:74:1c:1f:11:ed:77:
fb:e6:2a:ce:31:38:21:3e:0e:a2:e6:f8:24:f5:b4:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1A:0A:26:3C:58:97:27:ED:14:99:7B:4E:72:53:3E:83:27:D9:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a3b5f3be-7028-376b-b77b-b5c2120b1eeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:b8:2e:f9:10:d6:37:c8:0b:f9:e9:99:29:6c:ef:e1:a7:a6:
53:1b:fb:d2:72:56:cd:64:70:50:bf:9c:53:be:6b:33:55:2e:
b9:dc:41:ea:09:8f:b4:44:ba:86:db:9e:f4:aa:4b:95:7f:57:
67:ef:e0:c7:ec:ec:cb:45:9e:a8:62:c4:57:d2:3a:28:88:3a:
a1:f9:e5:22:b0:aa:b9:a7:7d:64:99:40:be:e8:3e:93:00:3a:
7d:0d:3a:ca:c5:f4:37:e3:ca:27:9a:d6:5d:35:3b:0f:71:78:
c4:37:79:31:4f:54:74:ed:74:85:6d:b8:db:2e:ac:d7:2d:c2:
42:b9:a3:f0:32:6d:fb:71:b3:1c:38:d7:32:78:a6:ff:9b:fa:
99:d3:cc:d4:c2:05:d3:13:e3:66:6b:de:30:1b:09:a6:f7:32:
68:34:95:ad:0c:d8:cd:b1:87:8e:0e:83:37:22:2c:01:82:91:
07:74:66:e2:07:2d:28:af:36:8d:5b:a9:53:e4:c7:af:89:95:
48:9a:0e:ac:3a:82:48:55:7e:cb:50:b1:f0:18:56:d0:34:21:
8c:24:27:12:78:80:85:5a:96:23:e2:fd:7a:2b:b1:52:5b:be:
f8:02:0c:81:e1:7d:ab:bf:94:2a:bb:fa:73:b0:c2:c5:68:96:
bf:23:35:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:11 2025 by rpki-client