Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b74dbaaa-e5f9-36d7-aaa8-aefabadc547b.roa
File: b74dbaaa-e5f9-36d7-aaa8-aefabadc547b.roa (raw, json)
Hash identifier: guY/OaAwAzKNxei4jxMPR4x+4DATGbCqWNU1riwLaGs=
Subject key identifier: 20:76:3C:CE:BD:B7:76:1C:33:A8:F6:AF:B1:42:2A:7C:80:78:D2:71
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D32315594F0C3F8A9FCEC7300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b74dbaaa-e5f9-36d7-aaa8-aefabadc547b.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.168.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:31:55:94:f0:c3:f8:a9:fc:ec:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=97150281-e373-40b1-b876-b3249ebcb733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f7:c5:7c:ef:03:c9:ca:88:d8:63:e3:4a:16:
2e:ae:b4:9c:95:16:06:96:1b:e2:fb:3b:2c:0a:ad:
1e:60:cb:02:f3:81:5c:95:5d:56:21:88:ad:9b:0a:
8e:8b:ec:78:cd:fd:8b:cf:40:f0:4d:c5:31:83:ff:
00:d0:e2:f1:13:97:6c:7a:d4:e2:68:e3:8b:be:aa:
5b:67:bf:07:46:9f:cd:77:64:67:10:1a:ac:ca:f8:
e4:30:a9:89:e6:c9:13:30:03:25:fe:c9:3e:6d:a0:
d2:60:61:90:76:83:ff:1d:c8:fa:66:cd:c2:a4:a2:
7e:76:8e:24:9f:1b:07:e8:60:dd:ef:e8:19:23:b3:
f1:ca:64:18:0e:27:b8:75:26:95:73:6c:da:f8:1d:
f7:3e:f0:f1:57:1f:e2:11:1c:af:ec:d0:31:26:23:
ce:cd:f2:b8:aa:6b:33:6c:6c:4f:d9:91:3f:07:98:
4d:f9:3c:2f:42:a7:fa:82:a8:c0:4a:6c:d9:00:7a:
29:18:70:e9:a8:88:bd:ba:0c:66:40:68:7f:bf:b7:
5f:bb:f1:de:d7:48:69:01:66:97:e9:65:da:51:28:
b5:da:3f:3a:aa:51:c7:05:01:5a:29:4e:41:0a:6b:
4f:47:f2:24:be:a3:24:79:ae:8f:5a:0b:a4:79:ea:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:76:3C:CE:BD:B7:76:1C:33:A8:F6:AF:B1:42:2A:7C:80:78:D2:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b74dbaaa-e5f9-36d7-aaa8-aefabadc547b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.168.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:1c:74:d9:84:98:53:06:bc:9c:e7:00:4e:8c:9b:e5:60:3f:
45:a7:53:09:92:be:8f:f3:4e:af:13:64:7f:1c:c5:be:e8:02:
9e:ac:a6:60:a6:eb:17:30:f5:ef:97:75:b6:6c:37:bd:52:2b:
5a:a3:14:b1:ab:c2:a0:98:93:92:eb:38:2b:22:81:49:31:69:
57:f9:d5:c8:65:d8:4c:15:f7:fc:d8:da:35:24:93:8d:3d:9b:
4a:09:4b:cd:2e:07:22:8b:44:c7:f7:24:63:94:31:5c:45:d9:
b3:aa:ee:a8:ea:9c:f9:92:41:18:4d:c7:18:4d:65:2c:fb:22:
b5:ef:4d:19:bb:7a:6d:6c:31:93:ee:d4:a2:78:f5:1f:b3:28:
40:2a:06:27:b6:87:ba:df:17:79:24:14:6e:1f:e0:39:fe:e0:
57:d7:25:a2:d3:51:1e:ee:a2:f0:19:48:c8:3e:4e:ac:62:52:
5a:62:af:19:81:84:ab:46:d2:a0:26:d6:16:2c:b1:79:6c:41:
c4:0c:09:c8:c5:b8:bf:1e:33:b1:27:ef:ed:54:30:f9:11:7e:
60:4b:54:37:2e:ae:a8:1e:5e:cd:a8:c9:9e:26:5e:c1:03:8c:
c8:d0:71:4a:0f:54:d1:a4:7c:7e:71:60:55:28:98:2a:0e:1d:
ef:f6:24:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:39 2025 by rpki-client