Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa2d851e-d3bc-35ad-9170-b304df8a1bcd.roa
File: aa2d851e-d3bc-35ad-9170-b304df8a1bcd.roa (raw, json)
Hash identifier: rekovFYqC40fScmge0zKPJg42pRd+nzZjpzrJF2DNwk=
Subject key identifier: D2:C0:1C:2A:56:E7:A5:24:61:4B:FD:2C:9D:EF:5C:8F:8E:BE:12:86
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E70E2A79E4BFF17BD5D423540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa2d851e-d3bc-35ad-9170-b304df8a1bcd.roa
Signing time: Sat 02 Jul 2022 12:00:00 +0000
ROA not before: Sat 02 Jul 2022 12:00:00 +0000
ROA not after: Sun 07 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:70:e2:a7:9e:4b:ff:17:bd:5d:42:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 2 12:00:00 2022 GMT
Not After : Aug 7 04:00:00 2022 GMT
Subject: CN=5c895017-e1ca-4a19-827a-cef3267008b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:3e:67:c6:bb:7f:14:f5:e2:77:d0:ce:c6:
5f:48:dc:7f:b5:ef:8c:a9:5c:c9:13:c9:ef:1f:e2:
45:b6:58:75:c3:b9:7a:a0:08:d9:ac:5d:94:68:7f:
04:ea:d9:db:df:d3:6c:56:eb:bc:4f:df:94:b5:53:
df:c5:94:5e:e4:c9:9d:c8:b1:3c:56:12:fb:88:dd:
46:0b:75:2d:25:33:38:b2:82:8d:8b:1e:60:79:cd:
14:23:c2:8f:8f:f5:52:26:60:4e:4d:0e:d2:7d:93:
e2:a5:f7:9f:69:2f:ee:53:f1:49:b4:9f:44:a1:c0:
c7:fe:4e:e1:bf:8e:cf:48:87:e8:18:9a:44:6e:79:
7e:a7:7f:b8:44:14:66:41:db:a7:a3:19:2b:56:58:
e4:17:e6:64:e6:9c:91:08:f8:be:8d:36:bf:93:ad:
b9:98:11:a0:2a:cf:da:ac:15:f2:16:51:dd:c3:a5:
95:a0:89:c3:98:a9:13:1e:fe:d3:2c:df:bc:47:7f:
79:78:09:8c:e9:f2:2d:43:75:93:89:49:a2:80:d5:
bd:d2:20:47:fe:9c:5f:f0:a7:45:7e:eb:b6:1b:a0:
c9:63:75:d4:8c:68:07:6e:79:21:a3:e2:f1:7d:67:
e9:9e:9f:f1:d9:51:44:53:1b:bf:4a:4d:80:17:23:
59:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C0:1C:2A:56:E7:A5:24:61:4B:FD:2C:9D:EF:5C:8F:8E:BE:12:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa2d851e-d3bc-35ad-9170-b304df8a1bcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:43:e4:43:a7:00:3f:3a:2e:62:28:0c:c9:d5:50:87:9d:c7:
74:c4:86:e0:f6:45:45:a4:40:74:62:28:5d:d1:c1:f8:c8:46:
e4:d7:0c:78:2d:81:14:4a:7c:45:46:25:e7:9c:bf:dc:5a:16:
c2:e5:45:73:86:9e:f2:e3:80:18:f4:53:7c:3b:31:cf:dd:82:
7a:a3:c4:32:d0:56:65:af:08:7a:b0:65:50:28:d0:ad:16:8e:
bd:52:ad:4c:9a:7d:a4:c7:78:cb:4d:cb:27:f7:c1:31:3e:5a:
ed:bf:61:d9:bb:e4:58:1d:78:e5:7e:35:58:b6:47:36:c7:69:
40:b1:89:ec:c3:95:ce:27:49:79:f8:93:93:22:36:39:3e:60:
a8:30:3f:ad:5e:d7:09:4f:53:bc:41:c2:d4:9a:12:55:79:62:
29:69:c9:ad:9c:32:7e:91:1a:e8:ba:3f:c8:a1:03:5a:5e:ec:
ca:ea:9e:e4:5f:3c:e3:ee:87:b0:be:cf:b1:c0:74:ca:f9:b2:
4a:69:0c:73:04:15:c9:66:95:af:fe:c9:aa:dc:dc:5b:98:0b:
c6:10:73:36:0a:6e:e2:17:bb:f8:90:aa:f2:34:af:90:ec:6c:
05:20:b4:dd:f0:6f:e2:48:56:80:5e:c5:ad:0a:5b:ad:86:de:
29:2e:4f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:15 2025 by rpki-client