Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a937dc4c-ca11-347c-aa10-b69398678c4c.roa
File: a937dc4c-ca11-347c-aa10-b69398678c4c.roa (raw, json)
Hash identifier: oqrWj2E34DbVDSo8MH+Baiwoz7IgWKWSpiBF6sLz8k8=
Subject key identifier: CA:84:A3:E5:AA:00:F6:AF:9B:31:21:BA:05:4C:45:A6:17:01:94:ED
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E50FBFB3389F4A9C30E8EB180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a937dc4c-ca11-347c-aa10-b69398678c4c.roa
Signing time: Mon 20 Jun 2022 12:00:00 +0000
ROA not before: Mon 20 Jun 2022 12:00:00 +0000
ROA not after: Tue 26 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.74.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:50:fb:fb:33:89:f4:a9:c3:0e:8e:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 20 12:00:00 2022 GMT
Not After : Jul 26 04:00:00 2022 GMT
Subject: CN=89b292c1-20c1-4a23-aa7c-fceb4f408b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c8:9c:8a:1f:2e:41:f5:a5:94:79:8d:e0:5c:
11:74:13:ca:87:45:93:75:fb:0d:26:67:26:1b:25:
8e:f0:6b:95:d0:b2:62:fa:0e:4d:24:7e:9c:02:25:
53:73:f3:ef:8a:77:79:f0:f6:16:28:ad:1d:ad:1e:
dc:be:2d:e2:6a:a4:b7:8d:50:1a:99:56:ae:32:1e:
5d:e6:84:d5:28:b0:5f:d9:bd:ee:7b:cb:f5:ff:d2:
53:19:25:b3:b8:da:e2:e8:41:55:b7:2a:09:74:a1:
53:3c:b0:3b:0e:0b:41:6b:9b:ad:7b:94:3c:98:02:
bc:44:d3:4e:95:52:22:8d:6b:72:df:ca:ca:d0:15:
1c:0c:fb:b3:48:65:8b:34:38:86:98:77:41:63:0b:
ab:ed:af:70:4b:8a:82:e7:f0:aa:1f:30:c2:85:b5:
fc:79:64:1c:d4:d4:af:9e:39:da:de:15:3e:6f:d8:
ea:02:3c:ee:ec:6b:81:c4:d4:ac:82:92:27:57:b7:
87:dd:09:bd:cf:c9:42:f2:20:90:70:b3:13:60:0d:
3b:88:b7:65:e1:81:36:ea:c6:24:4a:cf:ab:d1:48:
77:df:ba:32:97:32:53:fb:a3:0d:d2:0b:f1:e4:38:
1e:59:fc:5e:07:ff:91:7b:fb:2d:84:39:73:cb:ac:
df:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:84:A3:E5:AA:00:F6:AF:9B:31:21:BA:05:4C:45:A6:17:01:94:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a937dc4c-ca11-347c-aa10-b69398678c4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.74.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:76:c3:ce:a6:e3:24:36:c8:13:70:76:e3:ec:7e:37:d6:40:
70:2a:30:26:36:57:39:ff:26:81:3f:64:b8:a6:37:86:f6:d6:
4f:34:4b:29:a3:ec:a5:32:66:4d:76:d3:53:59:bf:3c:ee:25:
8e:fc:92:d4:07:31:60:fe:d7:7c:b4:ac:08:eb:e7:76:48:6e:
14:76:47:46:be:52:47:81:13:c6:31:e4:fd:6b:ca:31:4c:4e:
bb:e6:8c:59:90:59:6e:1b:cd:44:01:79:3f:42:9e:1e:15:13:
3a:91:04:7b:6d:8d:3d:e5:ae:a1:16:3b:f7:2d:b8:af:d3:76:
25:67:51:e1:89:74:41:37:2d:0c:1d:61:dc:5d:ca:49:8f:ae:
3f:1f:ca:16:69:db:3f:56:e0:c9:1c:9d:4a:16:75:74:b8:04:
a3:48:eb:96:ba:1b:e3:5a:ad:be:41:60:7d:74:a8:9b:dc:b2:
0f:b5:4a:84:36:2c:ec:38:de:89:5f:16:da:ed:df:f3:de:bf:
f0:98:7d:41:b9:b3:f1:8d:d0:38:98:09:8f:f0:c9:2e:79:bf:
6d:41:1f:43:c1:ab:33:d7:0b:c0:9c:08:c4:c4:7c:b8:58:fc:
d2:80:7f:db:1e:eb:f3:e9:4e:91:ed:9a:79:8f:77:46:10:bb:
8a:0f:8b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 14:54:52 2025 by rpki-client