Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a3cda9e8-b953-3c60-b8f0-92675c96f761.roa
File: a3cda9e8-b953-3c60-b8f0-92675c96f761.roa (raw, json)
Hash identifier: xsK4NNpvu1NAiJp+SaqWhBe9xvRPK2BeSBwqqPIHcrU=
Subject key identifier: 02:5B:49:25:52:80:85:92:EE:22:C3:8A:44:97:9D:2A:16:BF:14:E2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EB8BE44D711D1C330B753D680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a3cda9e8-b953-3c60-b8f0-92675c96f761.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.89.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b8:be:44:d7:11:d1:c3:30:b7:53:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=bec0829c-a958-46a3-a1bb-40f91a298f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:2a:8c:e3:26:f1:0a:cd:c6:28:cb:49:79:
a9:fa:a1:fb:3b:62:ae:93:d9:77:f5:8f:d0:92:b8:
68:c5:08:66:a2:77:c7:0d:98:16:4d:fb:97:ff:c2:
cf:e2:63:8b:e6:75:5b:39:17:71:f1:0d:e6:5d:5d:
96:72:a8:ce:bc:fe:f6:15:63:91:13:09:a1:b9:4b:
18:5a:e4:9d:74:f0:f4:58:a0:a1:09:65:b5:a7:43:
52:02:40:0c:51:36:99:28:37:dd:b5:f6:ca:e6:c6:
6a:12:cd:c7:76:cf:ef:08:fa:68:03:35:ad:89:fa:
f3:cc:39:1b:18:51:2e:50:bf:34:61:89:0d:3b:76:
e8:b9:d0:97:b8:03:7b:2d:74:73:5f:63:ad:e1:85:
c1:4b:a9:47:15:0a:96:5a:e8:1a:d4:5d:21:6b:9a:
ae:cc:6d:a9:e5:fe:c6:29:5c:2f:0c:ad:ac:5e:a4:
ae:19:5f:e9:c0:42:2a:92:ca:e9:8a:d0:3d:18:66:
3f:46:f2:6d:e8:eb:7f:89:85:3d:07:5c:19:d5:67:
cd:37:94:39:60:bb:6e:08:a1:ea:04:41:72:27:f3:
6c:12:ec:d1:71:5d:e8:2b:7b:62:6d:11:28:98:c2:
c3:62:0a:7d:08:1c:f1:22:48:c3:f1:0f:2b:dc:cc:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5B:49:25:52:80:85:92:EE:22:C3:8A:44:97:9D:2A:16:BF:14:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a3cda9e8-b953-3c60-b8f0-92675c96f761.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:1e:df:69:f1:18:39:41:57:19:61:c4:b7:b2:5b:0a:cd:ea:
83:ba:8b:19:93:3b:00:34:6f:d8:4c:0b:d0:66:35:c5:20:ef:
7d:3b:82:0f:e4:08:c3:04:5d:10:45:60:bf:0b:08:24:be:8a:
9a:1d:af:6a:0c:50:f3:df:f2:24:ae:e8:3d:44:86:b9:76:49:
21:ba:04:0f:67:ad:a3:b5:6c:ca:f1:ff:1a:7f:a4:ae:e9:56:
e7:b2:f3:57:d5:59:f3:63:d5:bb:06:63:db:83:df:51:5a:c1:
45:f5:25:ae:a9:82:90:7b:ec:ca:2a:8c:97:56:c8:53:71:7f:
ed:a5:cd:c9:88:be:99:1b:8b:90:bf:f8:86:98:36:bc:83:92:
17:1a:01:ce:e5:62:61:54:e2:f6:db:06:99:cc:48:1c:16:bf:
18:f9:19:30:33:07:55:ba:73:64:4e:d3:ed:ba:53:eb:80:4b:
d6:d7:0f:a6:ea:29:5e:2c:b4:b1:a5:dd:02:8e:78:ab:3b:bd:
5c:2e:35:eb:54:e2:92:ff:11:95:68:fe:57:9a:0c:a6:69:d9:
1b:71:26:84:74:96:c9:51:3a:35:c6:f0:77:71:d2:d4:04:33:
66:32:3a:d7:1f:a8:2b:3a:b8:ce:9f:00:5c:c8:ec:6a:ab:36:
a2:b7:fc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 19:57:35 2025 by rpki-client