Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2fe6fb8-af11-3a3c-a8ed-cae5123e5217.roa
File: b2fe6fb8-af11-3a3c-a8ed-cae5123e5217.roa (raw, json)
Hash identifier: j8cOaOBnWSWBchFVF4sb4/9DthHmh/Qm46XgLk4YO3Q=
Subject key identifier: B7:4D:1B:FD:11:A9:73:09:98:7D:C4:BE:35:8A:F0:A3:04:50:80:F1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F047109EE72DB0161D24F8A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2fe6fb8-af11-3a3c-a8ed-cae5123e5217.roa
Signing time: Wed 24 Aug 2022 12:00:00 +0000
ROA not before: Wed 24 Aug 2022 12:00:00 +0000
ROA not after: Thu 29 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:04:71:09:ee:72:db:01:61:d2:4f:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 24 12:00:00 2022 GMT
Not After : Sep 29 04:00:00 2022 GMT
Subject: CN=235007ec-635b-477d-a7ca-4fe10d44640a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d8:29:08:bc:73:40:95:0e:13:c1:1a:03:bb:
37:db:5d:c3:0f:f5:17:ab:61:25:3e:52:1a:10:4d:
75:44:a3:90:ad:4a:36:26:cd:4c:e5:79:ad:1c:8b:
6c:64:62:91:46:43:ea:d7:d8:32:44:c6:84:28:c7:
53:95:86:df:10:65:ec:7a:cb:33:7c:06:ef:20:15:
f2:66:e1:e6:52:4e:96:d9:ef:7c:ec:10:20:0a:e1:
67:ad:60:b7:62:28:9e:03:38:ef:a4:6e:2c:9e:5c:
91:78:08:9d:3b:d0:52:bb:f8:ae:5e:b5:89:e3:5d:
f1:0e:44:54:6b:5d:1d:c9:54:3f:68:f0:b5:2a:4b:
2d:8b:04:b0:b3:ba:41:4f:7d:37:e0:99:9c:d3:03:
e1:81:1e:5a:e0:8f:bc:66:84:b5:ba:4f:be:39:65:
5e:21:0a:68:c0:80:41:9b:9b:77:61:28:e8:c4:89:
b1:28:d0:9f:89:59:ce:67:96:de:66:e1:5d:17:d3:
e9:69:0d:5c:54:e4:a2:45:bb:57:38:8a:23:a0:2d:
80:c2:90:9c:8e:36:37:b5:b6:a3:ff:bd:4d:12:74:
db:a6:14:39:79:44:83:e1:a3:4f:c6:76:40:dd:ec:
db:ed:67:d8:6b:e4:5e:e7:f3:4a:47:01:ec:33:14:
8e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4D:1B:FD:11:A9:73:09:98:7D:C4:BE:35:8A:F0:A3:04:50:80:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2fe6fb8-af11-3a3c-a8ed-cae5123e5217.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:17:50:6f:1f:1e:16:83:db:51:28:4a:1c:27:cc:68:88:53:
ad:95:b4:3c:4c:95:b5:cd:e8:79:53:a0:58:ce:49:20:91:0e:
47:2d:2a:0c:98:88:15:a1:10:27:99:8a:40:0e:7d:4e:6d:cd:
0c:39:a5:4b:a1:57:d6:19:40:b6:44:ad:6b:97:b1:5f:59:66:
ee:2b:e0:c1:45:fa:df:2f:b5:3b:8f:42:62:0f:cb:ee:b0:fc:
01:a5:22:43:f3:02:95:f6:b0:6e:19:43:47:49:13:6d:3f:02:
c3:30:6b:cd:9a:77:37:c6:ac:09:ce:2b:d2:9d:7c:e0:8f:f5:
e8:15:12:ac:bc:dd:0d:e0:b5:42:f3:8f:65:43:ad:32:28:26:
04:36:63:2b:df:a8:46:bb:87:2b:3a:f3:f7:05:67:39:3f:2c:
d9:ac:8f:38:2d:c8:31:c7:3d:dd:df:4a:56:39:2a:5c:a0:d0:
d4:bb:24:2c:ce:58:29:6e:35:ae:65:1f:c5:b2:f6:ca:99:22:
1e:19:bf:7c:44:d1:39:53:de:d4:64:30:95:f8:54:13:e4:55:
6c:a2:7a:db:4c:c2:9b:bf:fe:0a:24:60:ed:18:a0:2a:b0:3a:
93:ce:29:8c:ff:2b:33:6a:a5:dd:ec:05:ed:26:af:c4:17:35:
96:85:a6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:45:08 2025 by rpki-client