Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2afd7ba-1ec2-3c59-ae0a-dc58893ac1a4.roa
File: b2afd7ba-1ec2-3c59-ae0a-dc58893ac1a4.roa (raw, json)
Hash identifier: ptw1xipHLpr5SJi96Ek+0Zlu2BkZm4KuMgjxch4pxls=
Subject key identifier: C6:56:47:3F:53:21:54:34:32:3D:D8:43:0C:F1:A6:06:7D:CD:54:C3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CC80CAF656C6075A9E33BFBC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2afd7ba-1ec2-3c59-ae0a-dc58893ac1a4.roa
Signing time: Tue 01 Feb 2022 05:00:00 +0000
ROA not before: Tue 01 Feb 2022 05:00:00 +0000
ROA not after: Tue 08 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:c8:0c:af:65:6c:60:75:a9:e3:3b:fb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 05:00:00 2022 GMT
Not After : Mar 8 05:00:00 2022 GMT
Subject: CN=f052c08e-f2bf-49fb-a27b-cdc947113853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:50:da:75:0e:a8:b1:b7:b3:b0:ef:ee:81:
24:83:55:87:e4:dd:87:8b:c5:cf:d4:36:f1:30:21:
62:d8:c6:70:c0:f7:5a:3f:09:0b:43:29:a7:5f:54:
85:61:95:6a:49:2e:7d:04:2b:f0:f9:ce:00:e3:91:
bc:f5:49:72:a4:07:49:23:80:52:f3:51:28:3e:e8:
47:17:02:fe:9b:c4:d5:a1:0d:47:db:ce:7e:60:3e:
71:a2:2e:a0:87:4e:9c:7b:09:66:33:23:c0:58:cc:
6a:63:ca:81:14:9a:f7:a5:a7:11:c1:a0:36:d4:e4:
e3:eb:29:e9:95:46:0c:f0:78:09:cb:21:e7:4d:1b:
59:5a:63:ab:45:e2:80:ad:84:48:16:59:1f:df:b8:
0d:ab:48:00:0b:f0:c5:52:b1:dc:b2:aa:c4:92:dc:
bd:25:83:03:c1:c1:1d:28:b2:99:50:14:db:22:61:
76:a6:02:57:a8:f9:e6:0b:3a:0a:0e:99:a3:c2:20:
de:cd:61:e5:e3:e3:29:b0:c3:76:72:a4:52:9c:68:
cb:b1:8f:1e:1d:54:05:09:56:64:bb:43:1e:94:27:
13:c9:d7:53:5f:42:ed:4e:5d:49:c7:a6:97:65:20:
7e:db:56:b7:8e:60:f5:db:9c:3f:3c:0b:c2:94:14:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:56:47:3F:53:21:54:34:32:3D:D8:43:0C:F1:A6:06:7D:CD:54:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2afd7ba-1ec2-3c59-ae0a-dc58893ac1a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:a0:8e:9e:f4:c0:be:36:18:d8:c7:d6:67:43:e4:a3:d9:34:
3b:29:36:39:64:6a:ea:7b:4e:05:ce:e5:a2:45:16:7a:26:94:
c7:0c:db:a9:ff:2f:6a:dd:15:3f:99:d3:84:c9:b2:00:8a:5b:
da:05:20:f2:a4:47:8e:4d:08:17:8d:c1:37:4e:a8:ef:fe:23:
0c:b1:9c:38:69:24:fb:b4:cc:ae:12:d2:8d:d8:b5:a0:b1:69:
e1:6d:e7:35:67:ff:55:68:02:dd:48:8d:60:c8:e3:e1:5c:24:
ca:f3:71:31:c3:0f:58:bf:1a:5e:17:9d:4e:57:5b:7b:74:b1:
dc:a0:8a:64:20:ad:2d:22:cb:03:d1:33:37:55:e9:0e:a8:c4:
66:3b:55:14:38:01:fe:17:d8:15:c0:21:6c:b3:70:51:8c:5d:
85:a3:7a:5d:74:3e:a5:f6:3a:fa:29:63:9d:75:3e:f8:ce:3a:
84:96:4c:23:ea:2a:81:d8:2f:ca:37:99:13:2d:b8:7e:d2:74:
61:93:0b:29:a5:0f:f6:15:f0:54:8f:9d:af:fc:c4:11:1c:ae:
57:1f:7d:8e:f9:ee:91:39:f4:a5:f3:5e:ea:8d:54:50:2e:0b:
3e:fc:86:98:b7:86:62:0f:e4:cd:1d:ed:7a:bc:3e:49:c5:d5:
44:72:f2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:15 2025 by rpki-client