Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5994b16-13ff-3353-a6c2-b783d99a5aa7.roa
File: a5994b16-13ff-3353-a6c2-b783d99a5aa7.roa (raw, json)
Hash identifier: rgovlF9EXAF+Cx2/n4LWYuZepNIrUyLnuZD55MyfxFg=
Subject key identifier: CD:5E:7D:5D:AC:AE:70:97:3B:6F:C1:A2:D0:9E:34:62:74:E4:B2:26
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CB9F1DE7782FE15E5AA585D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5994b16-13ff-3353-a6c2-b783d99a5aa7.roa
Signing time: Thu 27 Jan 2022 05:00:00 +0000
ROA not before: Thu 27 Jan 2022 05:00:00 +0000
ROA not after: Thu 03 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b9:f1:de:77:82:fe:15:e5:aa:58:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 27 05:00:00 2022 GMT
Not After : Mar 3 05:00:00 2022 GMT
Subject: CN=718e6339-cef0-4539-8eff-9a525206f651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6e:19:17:06:bb:1f:94:23:f5:e5:13:3e:d0:
e8:fb:c0:1d:e2:dd:2c:b5:13:ef:33:51:c1:c0:95:
ed:55:96:d4:0b:12:2e:41:13:e5:62:72:55:2e:ef:
b5:4c:23:6d:09:61:aa:11:fa:ab:70:06:9f:31:20:
7f:32:ed:66:d5:8a:73:cd:61:13:ed:02:41:c5:0b:
48:d1:1e:28:05:3d:88:06:33:83:37:29:f4:4e:cf:
a6:f1:a3:92:32:09:f8:71:96:c0:4b:cb:04:f9:bb:
e9:12:02:f8:86:92:6d:79:88:ec:9b:48:cd:a7:8f:
af:57:c8:12:f5:ac:e4:96:a0:06:8f:8e:d7:30:a3:
40:36:31:2e:64:bb:ed:a7:dd:78:85:ec:06:dd:33:
e0:a3:66:ff:0f:5b:99:45:3a:d1:48:3b:b3:49:1e:
d7:56:bc:52:be:b1:9a:b8:36:d9:f4:81:50:b4:60:
26:c2:f3:5a:14:43:1c:22:e7:bd:39:8f:c3:e2:80:
56:dc:e6:ba:c9:45:66:ab:1b:e2:e1:bc:7c:8b:bd:
90:bc:b0:6c:65:77:9b:f9:62:87:cf:67:23:ee:67:
c5:3c:01:b0:22:19:4f:bc:52:b2:87:2d:a4:0c:eb:
63:66:5e:dc:25:f3:9b:59:05:9f:40:ac:b4:6a:24:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5E:7D:5D:AC:AE:70:97:3B:6F:C1:A2:D0:9E:34:62:74:E4:B2:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5994b16-13ff-3353-a6c2-b783d99a5aa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:ec:be:4f:95:d8:77:37:b6:6c:38:7a:73:d2:b1:0e:6e:df:
79:b1:a0:15:f1:75:42:db:02:44:63:d2:78:79:99:fa:45:72:
f9:e3:60:e1:8b:a6:a5:23:a6:ed:12:60:3c:e7:a3:4b:16:74:
6e:8f:ee:08:a7:44:42:d3:b7:29:a5:80:d6:f8:41:5a:65:4f:
c5:ac:d8:e4:97:04:65:d2:92:71:d6:39:6d:2f:09:90:d7:80:
13:cc:3a:05:d6:05:35:eb:05:61:9d:06:7b:2e:95:43:e6:6f:
4f:c7:52:60:2e:40:f5:1e:f7:3d:e6:70:e1:17:38:b9:42:20:
44:41:bc:4a:72:d9:5e:02:aa:6e:e7:97:de:ae:c0:25:7d:83:
2b:20:a7:fc:1b:da:d8:58:8c:e3:42:bf:a4:72:22:f9:73:9c:
b0:b4:09:96:f2:3f:64:e5:71:5e:95:b5:4c:b7:53:3c:44:af:
de:a2:ff:d7:1d:ff:f1:cd:fc:eb:ad:b4:a0:ad:cb:2c:2a:7a:
7f:bc:f3:02:ee:e1:23:0e:34:43:45:9a:8a:51:b4:aa:c7:1d:
39:6d:25:5f:96:72:3c:b9:f4:52:ad:33:ff:58:89:35:e7:85:
d0:d1:94:82:ed:5a:bc:6b:96:f1:fd:98:f8:48:9a:01:74:86:
c7:16:76:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:35 2025 by rpki-client