Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad9a8cd2-18ad-3359-8aa5-23bcc4bf3c06.roa
File: ad9a8cd2-18ad-3359-8aa5-23bcc4bf3c06.roa (raw, json)
Hash identifier: ix/KGgoT7k3UVUqQ8zh0MgrrV2f3nsDbkSMRfqdbL9Q=
Subject key identifier: AD:46:6F:69:23:D5:D5:5C:93:D7:28:D9:1B:36:9F:DA:A5:09:EE:9E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE3358B51F6A7EAC842E12D70
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad9a8cd2-18ad-3359-8aa5-23bcc4bf3c06.roa
Signing time: Thu 10 Feb 2022 05:00:00 +0000
ROA not before: Thu 10 Feb 2022 05:00:00 +0000
ROA not after: Thu 17 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.71.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e3:35:8b:51:f6:a7:ea:c8:42:e1:2d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 10 05:00:00 2022 GMT
Not After : Mar 17 04:00:00 2022 GMT
Subject: CN=28c3574f-52ce-4846-a5a0-ece92908f73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:e1:9a:af:6e:3e:6d:93:cc:77:b7:3f:3e:
19:89:8d:0f:a8:f5:10:7e:d6:69:8c:5c:82:66:e3:
4c:52:15:7b:9a:8a:80:c5:96:d2:c3:11:4f:24:50:
76:a9:cf:2a:8e:28:79:5a:89:75:82:ab:66:cf:a9:
57:b3:f1:41:9b:0d:e9:eb:1a:e4:fb:d6:36:1b:47:
30:21:e6:2d:a5:5c:5c:f4:a0:78:9b:11:60:d2:2d:
e6:29:d9:b7:ae:72:6b:5d:fa:32:bf:b7:4a:44:ff:
33:e8:33:76:f8:33:4c:a8:06:81:0a:d9:89:fc:3e:
23:6a:6b:a9:94:c0:bd:af:9f:61:82:76:f4:84:3a:
f0:20:98:e7:0d:12:b2:6f:4a:af:e9:70:d3:b8:66:
1e:ed:12:7b:9e:49:2b:00:b4:1a:d2:9d:32:b9:fa:
78:fc:c5:96:a4:8a:ac:7e:53:30:9c:6a:96:bb:ca:
02:ff:04:8f:67:00:d0:c2:ea:cd:32:b4:5d:7c:6a:
62:4e:eb:de:db:ef:13:e1:2d:6f:e7:55:bb:ee:00:
8c:67:68:4e:04:00:f7:45:80:79:f4:8d:37:db:a1:
12:d6:d2:eb:0b:31:b2:78:13:9a:1c:ca:e1:ca:22:
e5:6e:95:3d:70:af:4d:74:36:69:f9:b7:0f:82:53:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:46:6F:69:23:D5:D5:5C:93:D7:28:D9:1B:36:9F:DA:A5:09:EE:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad9a8cd2-18ad-3359-8aa5-23bcc4bf3c06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:15:5a:85:fc:c6:a8:77:97:b2:9e:b7:74:6c:d3:fd:fd:3f:
f3:dc:fd:db:55:8d:66:65:eb:ff:0e:d6:bc:a4:c7:f4:41:f6:
49:18:36:80:1c:e3:35:0c:da:69:f3:55:17:9e:f5:78:e9:b6:
38:0c:30:c1:25:25:dc:32:ee:79:6f:44:31:8e:f7:89:40:a8:
23:f0:77:6f:d3:1d:4b:72:82:5b:5d:7d:27:17:19:32:3f:39:
21:73:48:7d:b9:e8:94:13:9d:c9:d0:2d:03:5f:03:ca:c1:cd:
fe:cf:3f:52:50:5f:26:9c:5a:f5:c6:c2:fb:68:96:57:13:62:
61:3d:6f:62:20:30:28:2b:bf:94:9c:78:c6:8f:fe:8e:9b:cb:
34:c3:3d:be:88:b7:49:52:73:d7:87:4f:58:f9:98:58:03:88:
77:ec:bb:31:1f:86:e9:a4:7f:f1:9a:2e:cd:a5:ef:c4:56:29:
e7:28:51:44:a9:ea:34:67:f0:d3:f8:4a:2e:d1:bd:bd:d5:c0:
61:6e:ec:a6:b7:26:5b:45:47:5c:b3:84:bb:fc:56:c7:1b:b4:
df:e1:cf:79:c8:13:dc:b2:95:8e:a5:d5:b9:25:13:8a:5d:bb:
45:3f:38:8a:da:23:99:b9:0f:50:06:7b:4a:0d:b5:83:54:86:
82:49:e1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:10 2025 by rpki-client