Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afe35304-6c87-317c-a9d3-7b7f2050460e.roa
File: afe35304-6c87-317c-a9d3-7b7f2050460e.roa (raw, json)
Hash identifier: JxLCt7kHFOIJ3qMNRHezYgDEBjsKATgd1vlkOIk7+7A=
Subject key identifier: 53:84:B5:E6:D6:0C:CC:A1:41:6A:72:A5:E3:6F:7F:C2:1C:C6:12:F4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D21877F18A477D667BAC8CBC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afe35304-6c87-317c-a9d3-7b7f2050460e.roa
Signing time: Sat 05 Mar 2022 05:00:00 +0000
ROA not before: Sat 05 Mar 2022 05:00:00 +0000
ROA not after: Sat 09 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.28.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:21:87:7f:18:a4:77:d6:67:ba:c8:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 5 05:00:00 2022 GMT
Not After : Apr 9 04:00:00 2022 GMT
Subject: CN=f318b535-ef68-4413-b334-0db88e616553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:90:e2:b4:56:52:77:5a:8d:b5:c5:e2:9b:3f:
39:8a:30:10:c5:c1:ce:4f:d0:08:0a:1f:da:c9:72:
89:e0:0a:14:df:0b:56:fc:c1:25:56:87:1f:bf:19:
f5:51:14:e0:da:f7:43:64:b8:07:d4:03:3a:21:33:
9a:49:24:c4:ef:c1:d1:3a:8e:2b:ad:1d:eb:6f:df:
12:fa:99:b4:28:c7:16:8f:34:19:30:60:b8:f8:17:
5a:80:28:7b:2b:cf:4b:5e:75:c3:49:cc:81:f5:14:
27:57:7f:c2:ea:78:73:1e:84:22:22:6e:c4:6d:39:
2e:76:7a:4a:a2:af:3c:b6:be:3e:fa:12:4e:3a:3f:
03:54:91:80:de:29:50:a0:31:1c:2a:3e:5e:eb:0a:
9b:39:6e:36:58:93:c5:cb:6b:16:b4:9d:9a:ff:f9:
e9:7b:f7:a9:92:fc:b9:46:3a:fe:16:be:57:89:51:
04:08:aa:12:41:ac:be:f9:56:af:90:75:cf:70:58:
70:db:da:35:98:56:52:86:19:ea:e5:0d:2a:bd:6f:
2d:2a:fd:a6:38:94:5d:e7:09:ca:b3:f5:80:8b:66:
5f:91:7d:6a:cf:a8:a8:03:bb:00:e7:f1:24:9c:9c:
ea:6a:40:e0:89:68:07:f1:ce:78:c2:92:64:45:01:
65:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:84:B5:E6:D6:0C:CC:A1:41:6A:72:A5:E3:6F:7F:C2:1C:C6:12:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afe35304-6c87-317c-a9d3-7b7f2050460e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.28.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:54:46:c1:be:5f:e0:16:cc:84:39:28:18:3e:fd:ef:eb:9e:
e2:44:77:f7:15:39:a0:af:9d:64:35:a5:5d:7f:fc:63:06:db:
47:d0:d3:25:8d:a2:de:28:54:a0:cb:18:e4:63:6f:1e:fe:56:
20:7b:16:8a:41:16:ea:3d:09:00:a6:df:2d:cc:4c:64:3a:85:
1c:16:91:81:bb:72:94:ae:bc:19:29:f1:b7:53:db:81:9d:71:
2f:51:81:c6:8f:74:f6:60:50:60:16:c4:1f:91:af:a8:db:b2:
fb:b6:cb:14:3e:8c:55:16:12:9d:52:77:7e:9c:a7:f8:40:6b:
d2:e0:d1:79:f4:ba:e9:fc:76:62:51:76:6c:75:cd:78:17:d8:
37:12:f6:ef:f2:b8:79:dd:65:a3:07:0c:92:3e:54:22:45:18:
9b:8e:59:1b:91:d1:ee:64:0c:45:87:83:05:ec:b2:07:61:91:
d1:0a:cf:85:27:a3:bb:61:92:97:5f:c2:c6:33:ff:05:f8:d6:
e5:91:d2:00:71:72:2e:16:38:d5:de:a0:3f:21:63:6f:cf:58:
fc:0a:29:39:10:eb:e9:b5:a2:28:22:2b:4d:21:3b:d4:f2:c6:
d9:df:15:d4:69:03:08:46:e8:0c:e2:d7:ea:53:f4:58:08:12:
41:a9:2c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:37 2025 by rpki-client