Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4c1cfbc-344c-34c8-95f3-50fa3a2f3656.roa
File: c4c1cfbc-344c-34c8-95f3-50fa3a2f3656.roa (raw, json)
Hash identifier: NU/+/PmdeyrRGzxmCyOo53T+n8C5O1N6a9lEq2KuZOo=
Subject key identifier: 67:46:D7:5D:AB:66:57:5F:1C:72:71:16:B4:73:69:3F:54:C4:CF:92
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C92EB0302BBAB441D862881C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4c1cfbc-344c-34c8-95f3-50fa3a2f3656.roa
Signing time: Thu 13 Jan 2022 05:00:00 +0000
ROA not before: Thu 13 Jan 2022 05:00:00 +0000
ROA not after: Thu 17 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.31.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:92:eb:03:02:bb:ab:44:1d:86:28:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 13 05:00:00 2022 GMT
Not After : Feb 17 05:00:00 2022 GMT
Subject: CN=e709e39d-86e3-4bdb-9c05-9a661c4ebd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dd:c2:39:90:a4:1b:73:c8:e2:72:84:78:7d:
4c:eb:cc:fc:1b:0d:a4:8c:4c:20:c2:6f:eb:d3:88:
f5:b5:e5:56:bf:72:62:8b:50:07:b1:50:51:12:30:
17:17:f2:5e:8f:b3:3f:a9:4f:48:7d:2a:6a:63:a4:
77:50:b7:aa:51:bc:a9:a5:f6:cd:fd:b2:61:f5:5f:
26:18:f2:6f:76:71:a3:18:33:c1:0d:c2:f9:08:f0:
03:03:05:74:a7:68:eb:a7:3b:53:70:29:b8:fd:b3:
d5:c7:75:cd:1f:80:ca:1b:53:1e:46:da:1f:67:9f:
91:9d:3d:0e:16:0c:47:b6:5b:f6:49:57:76:44:d4:
f0:15:fe:2c:f8:97:d4:56:b5:c2:d7:71:d9:7f:a2:
48:65:3b:1e:54:4b:93:3f:3b:65:e0:46:ba:61:5a:
b8:47:12:80:fb:9b:71:a2:7b:41:b2:e9:ed:51:6c:
10:b4:78:8c:78:db:f8:a7:a5:73:3e:9a:41:c4:38:
49:9b:ff:fc:59:ed:7b:15:2e:8e:17:41:2f:5f:ac:
5a:54:da:93:95:ec:a9:c3:48:94:7b:10:f5:54:c2:
96:30:9a:38:41:86:77:de:c9:4c:83:ef:ee:40:02:
a6:b0:bb:61:80:95:d7:99:1c:fa:fe:09:40:e8:d3:
13:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:46:D7:5D:AB:66:57:5F:1C:72:71:16:B4:73:69:3F:54:C4:CF:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4c1cfbc-344c-34c8-95f3-50fa3a2f3656.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.31.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:a5:da:9c:8e:f6:0b:c8:c7:6a:a4:4c:3f:a3:76:e7:a7:0a:
f3:dd:e0:08:5c:26:55:3b:ae:5a:c9:0d:20:40:83:85:73:c6:
37:c7:be:70:0f:64:be:e6:38:c9:2d:73:6b:df:54:1a:84:a1:
b1:0b:3e:3e:ef:37:01:83:96:ee:cb:41:55:65:06:af:ad:2d:
c2:87:f8:4f:10:26:68:bc:e3:0d:57:a8:bf:ac:06:49:cb:21:
5f:ce:41:85:f7:49:8a:60:5e:d0:ed:4f:ab:f8:4f:8e:7e:44:
5e:0d:fa:fc:c7:13:0e:f9:bf:c0:90:a3:9f:a6:20:e4:03:7d:
f9:9e:14:dd:26:7a:fd:b7:ab:02:76:f1:00:87:84:67:f3:dc:
b1:e6:07:21:56:ca:cb:25:36:73:97:e0:da:d4:3b:e8:4e:7f:
86:a3:52:2f:27:a2:50:dc:c0:b5:f8:f6:06:9b:39:28:60:f2:
b0:91:72:21:dd:60:ff:45:07:13:aa:33:c6:23:7b:a4:60:ac:
aa:b4:f1:7b:94:d2:39:aa:76:16:6e:e4:b9:d8:cf:c0:7b:1c:
31:49:ba:d6:92:f1:1a:d6:8c:19:bd:e4:a2:7c:f1:5c:3e:a1:
fb:bf:be:a3:6f:9a:4e:52:1b:fa:21:f3:53:bf:e0:a7:66:8a:
18:9b:36:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:13:48 2025 by rpki-client