Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baf9e4fe-f9f1-3cbf-9fa4-d5aa7e51f663.roa
File: baf9e4fe-f9f1-3cbf-9fa4-d5aa7e51f663.roa (raw, json)
Hash identifier: wVOruFZTmQjuSo3bJUAaOaXY9Ix8a1Fgq7RZ5H0/fAs=
Subject key identifier: AE:28:03:69:F3:B0:76:5E:46:65:59:F3:8A:DA:3F:97:A3:BC:3E:F5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F2BF61C0653E9F01BF6896580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baf9e4fe-f9f1-3cbf-9fa4-d5aa7e51f663.roa
Signing time: Wed 07 Sep 2022 12:00:00 +0000
ROA not before: Wed 07 Sep 2022 12:00:00 +0000
ROA not after: Thu 13 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.121.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2b:f6:1c:06:53:e9:f0:1b:f6:89:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 7 12:00:00 2022 GMT
Not After : Oct 13 04:00:00 2022 GMT
Subject: CN=6a9bfc6d-2326-4120-b2ad-91ab45f43b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ba:cf:65:f7:7b:9f:ea:cd:cb:d6:05:ac:9d:
db:40:21:86:99:db:2d:ef:4b:ef:4c:28:e7:74:08:
33:ca:c8:fe:2b:0f:cf:5d:cd:03:78:74:07:0b:d4:
cb:8d:00:25:08:b1:8d:08:36:c6:56:15:80:5f:5d:
c3:f9:e1:50:94:e8:e4:b6:1c:da:ae:1c:86:78:ce:
c7:3c:4b:c3:dd:8b:61:c8:7c:ec:d4:42:4c:3b:b8:
cc:5c:03:2e:4c:88:e5:8d:77:11:f3:b7:83:8f:c7:
44:bd:c2:db:4c:c8:14:c4:00:5e:4e:22:a6:f5:f6:
ac:d1:88:67:24:db:99:d1:4e:f5:96:cd:93:bc:78:
e0:c3:c6:91:3a:33:37:16:70:d5:ef:ca:36:47:fe:
21:ee:be:a3:36:48:f6:cb:5a:29:fd:31:d4:6b:8d:
78:50:10:ef:5f:57:48:25:9c:26:80:f8:a8:88:b8:
c0:83:48:b0:2f:28:fc:13:f9:53:98:ea:a5:a2:88:
11:4b:63:66:39:e0:4c:1c:af:7b:b6:dd:9b:16:24:
73:6d:46:9a:e2:9f:31:42:39:4d:c4:2b:75:42:68:
ae:ea:ec:99:ae:29:22:d2:d4:4c:80:e0:7a:3b:e6:
c1:cf:9f:38:c2:b1:10:1d:21:18:24:8a:13:ba:44:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:28:03:69:F3:B0:76:5E:46:65:59:F3:8A:DA:3F:97:A3:BC:3E:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baf9e4fe-f9f1-3cbf-9fa4-d5aa7e51f663.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.121.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:67:13:a9:94:d8:98:56:55:b6:71:11:e3:1a:ba:be:22:9f:
13:27:2d:2f:09:89:bd:a8:79:9b:55:87:a4:9a:f2:1a:b7:4c:
1b:a3:e9:35:1f:32:a7:02:02:ac:fc:db:9a:af:fa:56:fb:3d:
41:ad:dd:0b:08:5c:c6:69:c4:fe:0f:18:a8:cd:4b:16:ab:b9:
40:61:15:67:de:e3:c0:99:d6:5f:6d:bf:7e:c2:57:10:7a:fc:
53:d0:4b:4e:18:d9:73:7c:c0:dd:e4:78:ec:ab:58:36:f5:0a:
98:1f:cc:dc:b0:95:d6:de:34:b4:5a:8f:30:df:ed:46:e0:21:
9e:b8:b2:01:49:ff:04:9a:f8:81:86:d8:86:14:04:33:9f:1a:
9b:20:de:57:de:58:e9:13:dc:e4:64:a0:c9:b7:37:c8:54:96:
6b:5d:5f:b6:f4:6b:d9:db:0c:89:c6:3b:0d:ca:77:04:77:48:
d4:76:33:ad:bc:8a:48:75:e9:7b:ef:3b:3a:15:69:c7:cb:c1:
f0:6a:a1:03:ad:a0:3e:e4:ee:30:15:c4:42:9d:29:62:c0:0a:
4a:78:e3:c6:9a:10:cb:4f:b9:8d:c1:ea:46:fd:41:01:92:4f:
7e:3d:8c:d3:f7:98:7d:aa:5f:79:45:56:f5:99:4e:e2:42:09:
45:31:b5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:16 2025 by rpki-client