Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9c37df2-b99f-3344-9871-887cd8029c0d.roa
File: a9c37df2-b99f-3344-9871-887cd8029c0d.roa (raw, json)
Hash identifier: xQJ8Z3FQVg6RF4v9xeFlJ8VfkbHhb4Adwoay6U/0u3s=
Subject key identifier: 7B:BD:72:15:86:FA:B4:7F:9E:21:98:0A:C4:DF:34:80:71:61:A3:77
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBF2440C8D015E2915D818880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9c37df2-b99f-3344-9871-887cd8029c0d.roa
Signing time: Sat 30 Jul 2022 12:00:00 +0000
ROA not before: Sat 30 Jul 2022 12:00:00 +0000
ROA not after: Sun 04 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bf:24:40:c8:d0:15:e2:91:5d:81:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 30 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2022 GMT
Subject: CN=71c0c121-a5a5-483f-8bd8-1f4f028b6974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5d:04:3d:a7:30:ec:b0:bd:32:e6:42:04:59:
9a:26:4d:00:03:bb:ef:85:cd:d1:ac:98:b0:c3:18:
a4:32:54:40:bd:f8:e0:32:bf:0f:fe:f6:4e:f7:51:
51:1a:13:01:6e:ac:20:c4:c0:cb:63:49:aa:0f:63:
6e:21:44:eb:46:35:8c:d6:d2:31:e5:c2:51:89:22:
a4:68:e0:90:ba:f1:c7:5d:50:7c:5e:96:31:55:7a:
37:1a:48:f9:3c:9e:4e:e9:07:fd:3b:12:0e:d5:ab:
13:44:9a:28:24:16:36:9f:c9:bb:aa:a8:b9:7b:cd:
7c:aa:7b:cd:e5:ae:95:a2:c6:7c:92:af:c7:d3:da:
c3:82:b3:fb:89:c1:7c:50:e9:23:64:e9:1e:a9:1e:
84:9f:d3:64:15:e3:9a:89:28:df:bd:a3:90:07:6c:
cd:e6:82:5b:5b:68:45:ae:9e:0d:e1:33:f2:3d:a6:
1c:83:ef:db:7a:16:13:8c:97:d7:79:97:8f:94:4b:
7f:ef:32:01:70:be:b9:76:a8:2c:ee:c9:b8:79:ea:
ee:55:c1:6b:45:27:94:d3:a2:26:1a:d1:1a:ce:8d:
c3:40:43:59:95:e7:55:23:72:cc:6d:08:df:ea:8b:
00:bd:8f:94:8a:ce:3a:8e:0e:d5:a3:3c:9c:81:dc:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BD:72:15:86:FA:B4:7F:9E:21:98:0A:C4:DF:34:80:71:61:A3:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9c37df2-b99f-3344-9871-887cd8029c0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:0a:fb:fe:8c:6d:b7:92:2f:a3:e8:fa:55:39:33:db:99:f1:
45:e8:6a:89:5c:02:f2:71:b9:46:14:fe:70:1b:f6:2e:56:31:
76:d3:a5:a7:23:71:4a:85:9f:ce:14:ee:06:c0:6b:36:dc:94:
02:9b:88:b9:0a:0a:6a:3c:eb:f4:cf:f2:35:3f:48:00:fa:df:
4c:9e:2c:45:88:b6:ed:2d:b1:0e:27:66:44:aa:c3:2a:c0:c9:
6c:73:0f:a5:13:3d:04:ee:cd:8f:49:be:e7:a4:7e:0a:c5:c6:
eb:ee:b8:9a:a2:75:72:82:86:42:33:ee:6e:ec:93:2e:a4:50:
16:d5:ff:c2:d4:1e:7d:9a:6e:4d:80:59:e3:34:a5:47:7c:7a:
33:dc:b8:85:25:1d:f5:7f:5d:d0:ec:d9:49:16:8a:65:2b:5f:
8d:39:57:96:01:ec:1a:8e:eb:fc:94:ff:37:d0:eb:28:d8:ed:
2f:60:0d:1a:ca:17:91:a7:9f:57:37:de:05:3f:aa:20:b8:72:
03:25:62:a2:dd:ba:2c:2f:9a:30:56:81:eb:77:9c:22:3a:fc:
2f:c4:76:3d:29:f3:2e:31:aa:3f:20:4c:52:6a:e9:1d:62:7a:
b4:49:5f:58:8e:41:bf:c3:fb:45:55:ac:d1:88:6b:80:20:6a:
b1:99:e1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:31:57 2025 by rpki-client