Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c7dbaee2-c669-3740-8fb3-efd85adae287.roa
File: c7dbaee2-c669-3740-8fb3-efd85adae287.roa (raw, json)
Hash identifier: /8URznG9d0nb09D6okyynX0wnA+Y0+CIWsOTJQsbAQo=
Subject key identifier: F0:68:1A:03:05:3E:A0:8E:72:DD:2A:AC:94:39:B8:4A:DF:A4:2D:60
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF813FFD08DC3B0C55E322C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c7dbaee2-c669-3740-8fb3-efd85adae287.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:13:ff:d0:8d:c3:b0:c5:5e:32:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=0cf310a9-ba8d-41af-a901-3a23d0780a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:69:0e:36:27:d7:2b:a7:21:6c:4a:4e:9c:9f:
b7:8c:d4:a9:1c:79:d3:71:de:52:b6:c6:e6:ed:5a:
35:e6:05:50:29:33:d6:4f:41:b3:1d:65:bb:1e:12:
2c:22:d9:42:96:97:c7:5a:bc:85:59:76:f9:6a:61:
d8:a3:1e:99:e1:da:95:93:ea:ca:94:b7:98:52:a6:
05:52:81:f0:80:0d:45:a2:83:f9:22:ab:e7:58:c8:
7e:5e:08:8d:81:f0:ae:3f:8c:bd:39:e5:3b:b7:73:
8c:c8:3c:d3:de:51:0d:8a:eb:f2:44:fb:7d:1e:06:
4a:31:cb:52:e3:fd:66:db:f6:42:f1:90:70:e2:4a:
ee:95:26:9a:78:b6:f1:08:bd:b7:50:d8:4c:67:94:
f9:f5:2f:c8:a5:63:91:7d:c1:83:ef:23:df:61:63:
69:96:04:05:df:8f:41:4c:e0:0a:2e:b1:05:04:0f:
28:ec:c8:e0:f0:d8:b9:1c:30:21:b5:f5:2f:24:80:
31:33:4c:d7:80:96:85:c0:06:24:28:ec:0c:95:75:
bd:ae:c9:43:62:bd:cc:b8:6d:dc:f6:b4:93:22:a4:
f3:39:2f:22:bc:c8:b1:5f:42:62:73:a3:23:db:b1:
0c:02:d7:b7:e9:32:66:61:fc:ac:18:b4:0b:d3:57:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:68:1A:03:05:3E:A0:8E:72:DD:2A:AC:94:39:B8:4A:DF:A4:2D:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c7dbaee2-c669-3740-8fb3-efd85adae287.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:d0:75:f0:67:e2:58:3b:d7:fb:64:d9:e6:c7:a8:9c:aa:66:
92:92:35:ed:83:a3:ee:93:e4:91:ff:df:aa:3f:fd:2a:c0:bd:
42:64:7c:5a:ab:79:6f:f0:ce:45:61:a4:2d:cc:2f:3c:ee:38:
21:05:e9:3c:20:17:14:43:7b:52:3a:a8:69:02:7a:7d:77:8e:
d1:c1:c6:c3:12:24:ce:04:5d:dc:7a:c1:12:95:4f:d9:e9:19:
09:5f:e0:d3:0b:7b:23:2f:7c:3d:df:5d:19:e9:62:68:a4:82:
e2:3b:bb:aa:5f:ec:e3:83:25:78:59:14:a9:1f:0a:26:8b:94:
fd:d3:dd:b7:4e:9f:cc:43:f5:3d:74:35:68:10:18:23:03:df:
fd:2e:1c:08:a8:ca:f6:11:4e:79:f6:7d:70:51:d8:e6:96:51:
8e:f6:51:16:42:9e:1a:a5:9c:e5:8b:b0:b7:5b:b5:53:7e:94:
94:53:a5:98:b8:2e:39:5b:41:34:a3:34:f7:1b:b3:af:c2:09:
76:2b:dc:50:1c:b3:6c:47:76:17:83:09:f7:47:d6:d7:12:fb:
36:31:a2:b8:3e:21:c7:61:3a:0a:9d:a4:5a:b0:0f:27:31:06:
20:73:f2:16:d3:2c:ef:90:0c:0b:ca:14:b4:1d:63:f0:06:b6:
67:e5:02:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:49 2025 by rpki-client