Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bcc852fa-ee3a-3438-b9db-50409ad37e2f.roa
File: bcc852fa-ee3a-3438-b9db-50409ad37e2f.roa (raw, json)
Hash identifier: rpiT+12Kl51OZesFtaqZpJOL7pGwTSne3V9WAzC8BEI=
Subject key identifier: 78:C5:53:3F:F3:E4:1A:45:E8:E4:11:D0:00:D1:35:C3:53:4A:B7:F6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EB9444CC0DE25381EB08D8E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bcc852fa-ee3a-3438-b9db-50409ad37e2f.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.124.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b9:44:4c:c0:de:25:38:1e:b0:8d:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=91f8ebba-93bc-42a4-8cb5-3443efc27cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:84:79:4c:cc:00:0c:4f:5a:82:ff:f1:9f:
d8:2b:68:64:78:e3:c0:33:90:3a:0c:89:23:be:e0:
cd:bf:9d:28:f9:75:27:33:9c:ab:c8:d1:e0:37:77:
d9:12:ff:3b:90:2f:c7:eb:74:09:6c:12:91:48:e0:
09:39:10:8b:5c:25:05:33:52:25:76:0e:5b:8f:e3:
2f:7a:12:b0:f3:c1:bc:26:2b:c5:6d:4a:84:62:05:
a2:11:18:3c:7f:4c:3c:a2:14:ba:6f:df:67:06:da:
eb:26:e9:12:21:c4:13:7c:60:a3:81:b1:43:3f:ff:
05:81:fc:9f:61:89:10:7a:8a:bc:a8:74:c1:27:66:
2d:9a:e8:88:68:0e:f7:37:cc:fb:67:b3:84:84:31:
1f:74:40:35:7a:9d:96:a2:ec:ee:93:5b:a7:a4:9c:
b5:b7:75:38:96:5b:72:86:36:f9:c8:a9:e4:9e:b6:
99:b5:28:f5:b2:a8:13:2d:ff:d9:29:b0:0b:59:3e:
0f:15:02:04:08:77:34:6c:82:81:19:5a:45:59:7c:
83:9e:ac:c0:fd:96:5c:ab:24:64:87:14:c6:c4:44:
e5:fd:ca:4d:e6:25:42:84:41:4a:a6:b4:9d:b2:cb:
b7:b1:a9:4a:82:6f:04:17:ad:99:d7:ea:ab:03:25:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C5:53:3F:F3:E4:1A:45:E8:E4:11:D0:00:D1:35:C3:53:4A:B7:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bcc852fa-ee3a-3438-b9db-50409ad37e2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.124.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:5e:8a:ca:8d:a3:e2:7e:ca:56:ad:13:d9:7f:a9:fc:c3:ad:
52:5d:d4:48:63:e5:2f:83:7e:5c:e0:cb:b0:5c:ac:9a:fd:de:
d8:62:e9:1f:65:e4:3d:0d:97:d0:21:f1:9a:4b:29:6e:fb:58:
6c:e2:f0:da:8c:4f:f8:77:97:0e:7a:e1:90:49:f9:cc:85:f3:
e1:68:6e:c1:8a:28:c8:21:8b:38:a9:2f:3e:2f:21:05:04:27:
b3:2d:f7:1b:c6:48:51:cc:c0:db:b6:d3:97:41:81:e5:ff:66:
cb:21:83:cc:e3:d4:33:f9:c7:b4:d1:c5:4a:af:ed:8d:71:bc:
49:b2:c5:23:0a:66:9c:af:5f:f7:76:ac:77:c0:13:cf:e3:6b:
2e:76:35:c6:2a:cb:27:22:cf:a5:c9:2a:3e:bc:89:ba:9e:8f:
37:eb:67:cd:6a:ff:87:66:3b:b2:63:c9:4d:b0:65:5b:0a:31:
c4:8b:d2:e7:ae:f6:12:1e:ab:16:61:74:38:b4:29:ac:11:dd:
13:c7:86:04:98:54:bc:51:bc:6d:a0:a0:5f:b3:5c:ed:43:76:
34:b5:35:8d:7d:d8:43:49:f0:a9:fa:87:8b:38:34:94:ee:98:
5c:21:ed:57:81:b5:68:f6:33:d8:df:a7:09:95:80:70:c0:35:
89:4d:c6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:58:18 2025 by rpki-client