Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bacd1eac-41c1-35cd-8e3e-9517a839f6f1.roa
File: bacd1eac-41c1-35cd-8e3e-9517a839f6f1.roa (raw, json)
Hash identifier: bybPfv6ln+0Fm5XnA8ANcw2KTEwvjuiIip/Gbx0zJRU=
Subject key identifier: 42:2E:6C:EB:3A:B5:B9:B8:1E:20:88:17:A1:2E:CE:82:15:5A:60:D6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D7D3FE7248BB5C98EBB83C200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bacd1eac-41c1-35cd-8e3e-9517a839f6f1.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Thu 12 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.91.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:3f:e7:24:8b:b5:c9:8e:bb:83:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : May 12 04:00:00 2022 GMT
Subject: CN=539b671d-24c8-417f-ab86-85d94d68076b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:60:5f:2c:55:e5:01:b8:54:74:6b:ac:95:ed:
58:ee:0a:6f:69:48:fb:74:66:cd:80:9c:06:a7:32:
64:6f:91:ca:9a:b9:c9:80:fc:88:b7:35:12:7e:a7:
d2:07:11:c8:56:96:41:59:8a:ac:87:b3:b9:bd:5f:
86:34:53:ae:fe:10:a1:b3:cf:46:13:08:ff:e8:ef:
84:b8:ab:cc:c9:1d:da:3e:12:0a:42:db:4d:bd:69:
3f:22:79:2b:e4:39:0c:cf:d6:de:5a:f0:fc:9e:6e:
a5:55:24:aa:99:aa:2d:9a:98:e2:44:0b:6a:d6:db:
38:84:c0:45:be:0c:b9:b8:75:55:32:b9:46:a5:ff:
d0:33:d9:5d:a1:22:e6:ff:8a:1c:14:89:82:76:02:
54:27:59:9e:58:93:60:18:af:8a:ff:bf:4d:5f:20:
23:bd:94:a0:3c:ff:17:d0:3a:fb:21:6c:bb:36:1f:
98:97:ea:3d:b2:27:79:35:fa:20:1c:41:1a:45:9c:
71:24:df:2e:80:e4:46:8b:00:8e:5b:e1:15:4c:78:
e4:1e:33:d5:44:9d:47:9f:9d:d2:62:72:78:61:e5:
93:c5:05:8f:94:b0:a0:01:6e:5c:ea:65:f8:51:65:
3c:d8:6a:43:7b:1d:aa:47:f5:2a:0a:71:f0:28:69:
04:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2E:6C:EB:3A:B5:B9:B8:1E:20:88:17:A1:2E:CE:82:15:5A:60:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bacd1eac-41c1-35cd-8e3e-9517a839f6f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.91.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:96:5e:9f:9d:66:24:bd:f2:c9:b9:34:16:15:38:35:87:e6:
b4:a1:df:8e:29:e0:c3:1d:b2:5d:fe:86:7a:5a:47:cf:d9:33:
4c:5c:6d:a1:0a:1e:6b:56:f8:80:53:a6:0d:26:cb:72:12:d1:
f9:77:8d:56:6f:93:29:a3:08:7a:6f:2c:47:c2:f8:e2:8e:fe:
34:8c:e3:c2:07:eb:96:c5:6e:52:f1:b0:35:9b:77:8f:8e:67:
9a:a1:80:27:fe:fa:ab:1d:99:ae:ab:2f:18:4e:04:3e:23:b7:
6d:46:57:20:65:77:ad:df:b3:f2:27:f4:16:78:75:c1:82:9f:
fa:ef:20:6d:d1:ca:87:51:13:c3:14:ce:d7:20:c3:eb:d8:96:
a6:99:26:c5:0b:46:8e:a4:1a:3f:6d:9c:21:c4:c4:fd:73:77:
aa:38:6b:f2:14:d7:97:f8:b3:c0:ea:30:f1:f3:de:03:e1:d7:
76:db:6e:f9:01:f5:e0:46:2a:fb:7a:b2:4f:c8:fd:a6:56:56:
e7:b3:7f:8d:7c:1a:df:7d:09:00:ee:d4:4e:c1:6e:11:87:ba:
27:0f:7b:84:2a:be:af:38:f4:4e:cc:bb:5c:79:34:6f:8c:06:
d8:aa:4f:75:f4:1d:ac:85:2b:a7:0f:b4:7c:62:fa:11:02:c7:
62:18:8d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:54 2025 by rpki-client