Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a4cca057-7291-360a-8436-6fb3de4b9df9.roa
File: a4cca057-7291-360a-8436-6fb3de4b9df9.roa (raw, json)
Hash identifier: hQNc/c1W1ZUFrx8z/Pie9H7y2EkixjHNznMlj8tgZGw=
Subject key identifier: 52:9D:C2:C5:FB:76:BE:2C:6A:44:42:1A:2E:65:34:3C:41:81:FE:67
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E70D3F4B18F779E0BCCE599C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a4cca057-7291-360a-8436-6fb3de4b9df9.roa
Signing time: Sat 02 Jul 2022 12:00:00 +0000
ROA not before: Sat 02 Jul 2022 12:00:00 +0000
ROA not after: Sun 07 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.168.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:d3:f4:b1:8f:77:9e:0b:cc:e5:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 2 12:00:00 2022 GMT
Not After : Aug 7 04:00:00 2022 GMT
Subject: CN=a62611ba-3c18-47a2-b101-49dcec7842f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:09:be:6f:62:b4:3d:42:13:c2:2b:7a:e4:
8f:db:69:0c:bf:c1:13:0a:ed:03:21:6b:f6:55:44:
53:2a:0d:02:21:e1:28:12:ad:2b:b9:7b:e7:d0:5e:
a4:5f:57:55:73:f2:a2:05:f3:2d:7d:5b:cb:77:ce:
70:ec:d1:01:8d:6e:10:2c:a0:d0:e2:ba:e2:7c:79:
de:c8:e7:ba:51:34:41:6c:67:35:86:35:44:79:2d:
c1:80:6e:8c:de:ef:4b:1d:d1:af:71:79:96:d4:31:
75:db:30:69:49:07:ba:06:da:2d:bf:fc:d5:1a:d1:
4b:63:91:79:c6:44:a2:2c:0b:03:12:a3:14:5d:80:
20:62:7b:0f:55:b7:f9:a8:14:d0:77:2b:90:d9:30:
fc:1b:2c:d0:7d:44:dc:2b:ff:70:88:de:cd:a7:e7:
b6:46:c3:a3:d8:75:2a:32:94:4e:e2:38:85:4f:81:
cc:48:c6:9e:7f:53:de:f7:be:7e:eb:72:e1:bb:8c:
24:0c:24:6f:0c:e4:35:ab:01:ca:f7:37:9a:8e:1f:
50:e7:02:79:fc:d1:99:4c:6e:f1:fe:f6:52:aa:fc:
fb:3e:30:5a:3c:44:b1:f2:d2:32:5d:f6:70:00:c2:
b1:d3:1a:2d:b9:e7:ae:5f:26:b9:55:2f:d7:a1:e6:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9D:C2:C5:FB:76:BE:2C:6A:44:42:1A:2E:65:34:3C:41:81:FE:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a4cca057-7291-360a-8436-6fb3de4b9df9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.168.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:f7:58:83:ff:a6:6e:e4:94:74:40:b6:a6:30:7b:6f:54:87:
68:a9:98:73:c5:75:a1:62:17:c5:a0:dc:82:04:1e:d4:a5:ee:
d0:a0:54:5f:c2:b3:d2:84:52:37:4b:f4:a8:02:d5:c5:5e:20:
45:28:37:f5:a0:db:3d:99:04:fa:5e:44:ea:8e:0a:cf:b3:d7:
6c:13:cc:f0:24:ac:e0:cf:e8:72:9f:c4:4b:01:ba:1c:33:80:
9f:0d:4c:95:35:2b:83:25:43:b7:4a:8f:f4:55:0e:af:b3:43:
bc:cc:5c:1f:20:17:31:33:ce:46:f4:48:f7:c6:c0:31:60:d5:
c4:76:52:09:a3:be:d8:f8:13:69:a8:9e:d5:ad:4c:54:9e:7a:
af:38:ab:ed:ff:6a:10:ee:18:fe:97:bd:26:a2:df:38:ca:d3:
6c:a9:a3:9b:e7:7e:5d:97:9e:17:49:1d:7c:e6:c9:ba:a4:13:
7c:37:8b:1b:2c:17:87:61:7b:77:2b:f2:ba:a2:4e:0a:42:c9:
da:b7:f1:81:ca:bb:fd:0d:53:9a:69:fa:e4:57:98:ea:f8:52:
01:0e:cb:0a:a7:72:15:d1:63:be:17:f2:46:f3:f9:5c:49:75:
41:e1:01:f2:b6:85:2c:5c:2c:1a:dd:53:c1:75:9c:2e:5f:f3:
1e:44:62:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:13 2025 by rpki-client