Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c58d1033-75de-38ca-8105-4d06f7875634.roa
File: c58d1033-75de-38ca-8105-4d06f7875634.roa (raw, json)
Hash identifier: NSNZCifdPdXYvpQxpDH5hKe4R/CpOqqNw2NQWwyPtLY=
Subject key identifier: CD:37:B1:D1:E6:21:E5:60:79:2F:4D:DE:C9:E5:6B:F1:71:02:F3:0C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D7D992E569E20C25E9B424B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c58d1033-75de-38ca-8105-4d06f7875634.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Thu 12 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.53.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:99:2e:56:9e:20:c2:5e:9b:42:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : May 12 04:00:00 2022 GMT
Subject: CN=56918b49-7842-4fbe-bacc-a89ffce2208b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:05:64:0e:ab:f6:34:74:9c:ff:23:e2:e9:
98:5a:63:b1:73:0d:8f:9d:a9:d7:68:8d:9d:03:08:
87:0d:15:18:6f:43:72:4c:1d:04:7c:e0:50:62:ce:
20:f2:92:b2:ec:88:7c:d9:1b:0f:26:5f:c1:67:05:
c3:06:4e:c6:84:09:ee:83:55:ba:9d:66:cc:16:e9:
50:e1:b3:7c:f3:7b:a7:8e:e8:37:0c:0f:9b:88:fb:
59:b1:ee:cf:d0:8d:7a:4b:97:30:a6:25:85:27:56:
7b:24:34:19:fc:f3:09:ff:4d:9d:14:23:78:fe:6d:
62:df:0d:24:99:e6:b4:2b:85:b3:e3:d9:fd:d2:33:
3c:dd:31:9b:49:00:87:fd:92:36:b8:5f:47:03:32:
b1:58:16:48:0c:4a:77:24:78:38:4d:40:a7:aa:1b:
b9:c7:52:85:16:6e:22:d5:29:b1:1e:f7:94:09:28:
8e:79:e2:cc:bc:93:76:39:ca:1c:f1:dc:2a:fa:b7:
96:0c:a6:ca:ab:50:ac:a9:be:7f:19:5c:fb:c4:c3:
2d:db:59:19:7b:68:54:2a:28:a0:1a:48:19:a0:ef:
43:1a:23:0f:89:4b:8f:05:f0:26:81:23:bb:26:73:
2f:72:a6:34:03:63:86:73:94:bb:4f:ad:4e:c2:85:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:37:B1:D1:E6:21:E5:60:79:2F:4D:DE:C9:E5:6B:F1:71:02:F3:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c58d1033-75de-38ca-8105-4d06f7875634.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.53.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:fa:d7:90:bb:9c:1a:5d:91:28:84:2d:96:6d:80:30:f9:27:
00:25:4c:42:88:d4:10:8e:ab:d5:d1:23:f4:51:7e:50:51:b4:
f0:d3:90:e0:df:9f:4e:2b:68:0c:6e:43:bb:49:ad:31:a3:cb:
14:d3:b3:be:d8:d4:a2:c9:ca:75:c6:1b:58:8a:8b:51:0c:71:
cb:75:29:c4:cc:b9:a0:c8:38:61:1d:50:c1:8d:9e:ff:aa:5a:
28:a8:e8:fa:03:6f:bc:d0:5e:91:b0:91:87:3c:60:50:b6:8c:
36:c1:f1:ba:75:c5:1b:15:19:99:7c:67:ec:81:04:f8:84:94:
19:b1:87:89:7c:bd:ec:b8:5f:81:1d:62:78:1b:69:17:3f:bc:
9e:e0:47:e2:39:3f:a3:e8:bf:76:53:2d:94:11:8e:4c:50:84:
17:c3:93:c6:69:6a:70:e8:f6:de:66:1d:2c:b3:3e:ce:19:ea:
93:40:16:03:79:01:cf:05:85:36:20:30:e4:a0:c9:ca:45:57:
8e:e0:01:ea:c0:7a:f7:07:c2:0d:35:23:09:a5:0d:96:2f:0e:
a8:88:f6:8d:32:18:c8:b0:0f:d5:81:17:d0:25:1a:39:93:4e:
07:b1:c2:f0:c5:90:c2:67:9c:a0:0f:59:9a:3f:5d:da:0b:be:
d3:e2:7b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:14 2025 by rpki-client