Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2f42c6a-7c23-3a9f-8210-cfc612a75cd3.roa
File: c2f42c6a-7c23-3a9f-8210-cfc612a75cd3.roa (raw, json)
Hash identifier: uQbApnao0XRvwU9ciLqo89DiLWvx+bO69fq5WlBPYXA=
Subject key identifier: 3A:E7:7E:EA:10:7C:F5:D8:95:38:F7:81:D9:BF:C3:50:6D:CC:40:8B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D64AD04757941CE514733AB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2f42c6a-7c23-3a9f-8210-cfc612a75cd3.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 03 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.158.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:64:ad:04:75:79:41:ce:51:47:33:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : May 3 04:00:00 2022 GMT
Subject: CN=24224dd8-6f81-4639-97ce-96fcd3640bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:15:0e:e4:93:5f:dd:b5:4b:4a:4c:ff:07:
ac:ab:b5:36:b4:99:7b:fc:bd:5b:43:59:7d:87:1b:
4c:76:b6:86:0e:09:b6:df:e1:a2:04:6d:11:c4:35:
47:c7:fc:f5:3e:0a:49:87:22:b1:01:2b:ad:19:3f:
99:16:c9:97:5a:9c:cf:d5:58:d3:34:d4:97:4d:1b:
1a:e6:cc:68:9d:e9:da:ca:a7:cb:78:f1:c8:55:ec:
77:67:3e:4e:cb:a5:41:98:c3:47:14:a9:fe:a5:1c:
6e:3e:bd:5b:9f:7b:06:ff:bc:b7:fa:1d:44:ce:23:
31:92:7c:0f:e3:f9:45:9a:10:84:b8:e6:30:1c:5b:
9d:5a:08:1f:b0:2d:fc:25:35:93:fd:6f:6a:1e:68:
00:ff:b8:ae:d1:1c:77:1e:37:6a:a5:7d:cc:14:4e:
7c:28:e6:a7:37:5c:8c:62:11:63:69:18:ea:70:4a:
7a:f5:ad:59:1e:84:b6:00:95:af:33:80:57:27:a0:
87:9a:10:30:3c:d1:36:9a:91:fd:cf:e6:bb:8d:86:
4c:8e:bd:f8:0a:dd:86:3a:b5:c4:31:e8:ef:d7:ed:
21:f8:46:35:70:a9:a9:c9:77:dc:d5:ba:a2:87:eb:
db:d0:d9:e7:ac:76:d5:7f:82:65:04:61:e0:93:13:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E7:7E:EA:10:7C:F5:D8:95:38:F7:81:D9:BF:C3:50:6D:CC:40:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2f42c6a-7c23-3a9f-8210-cfc612a75cd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.158.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:a1:9c:87:a4:02:8f:e7:80:5f:7c:fe:e6:bd:0f:52:6a:63:
f9:e2:c4:bc:d9:be:90:ec:d4:a8:78:94:d4:32:74:12:4e:c7:
f5:b4:76:e6:88:8b:7d:91:0e:9f:d8:f4:cc:22:89:7b:94:7f:
30:39:57:53:7b:a6:76:a7:d6:a5:4d:24:76:7f:94:21:ee:10:
0d:38:5b:ac:47:74:58:2d:9e:77:a1:8b:fc:32:31:fe:be:e0:
9a:ee:a1:00:30:0d:7b:e0:76:40:ab:75:70:ff:13:5b:40:e3:
81:7a:2a:8f:c5:2f:fb:57:c5:25:14:19:a3:ca:0c:bd:25:20:
e2:9b:b5:0b:6a:31:27:b5:0a:e2:41:62:2f:b2:0c:b8:02:d0:
38:4d:1c:7a:61:9a:e0:20:b3:7f:2d:c9:ef:d8:d9:57:12:7c:
5d:3c:5a:4f:73:d2:4f:5c:53:da:1b:4d:2d:2e:3d:b4:c6:6c:
79:14:6e:dc:80:cc:e8:35:a4:19:dc:e9:86:bc:e4:15:74:86:
fa:d7:ce:cc:99:c5:ae:69:65:f6:98:7f:57:58:8e:0a:22:59:
bd:db:c3:4e:83:fd:59:07:f2:96:f2:e3:a7:68:78:6a:6b:06:
b4:1f:c9:2f:ad:21:01:26:a3:1a:1b:c5:61:30:74:16:41:24:
5d:62:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:42 2025 by rpki-client