Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c84d41d9-d8d2-34ea-88e1-395db3a011c0.roa
File: c84d41d9-d8d2-34ea-88e1-395db3a011c0.roa (raw, json)
Hash identifier: a3+yLxtjNqCk8U88XmJE8Jj3RVTwgMm43xpj3RsYfjk=
Subject key identifier: 8D:8D:F3:77:82:F2:8F:31:EB:24:CD:08:46:43:97:DA:6B:18:25:BD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F87E28F97125C0F9A20883C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c84d41d9-d8d2-34ea-88e1-395db3a011c0.roa
Signing time: Mon 10 Oct 2022 15:51:07 +0000
ROA not before: Mon 10 Oct 2022 15:51:07 +0000
ROA not after: Tue 15 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:87:e2:8f:97:12:5c:0f:9a:20:88:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 10 15:51:07 2022 GMT
Not After : Nov 15 05:00:00 2022 GMT
Subject: CN=c27236b0-6cd4-42fd-9020-e0536d0dc355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7d:36:a5:35:96:f3:93:e5:d0:24:d7:9e:4a:
56:70:ba:3f:2f:54:d3:33:e3:3d:2c:25:81:6d:f7:
ac:28:01:b6:a8:d5:ef:a1:73:4f:ea:7b:71:4a:63:
65:6b:bb:bf:d2:5d:16:98:0e:b4:9a:77:39:30:57:
f6:c9:40:31:85:db:80:01:14:a5:ab:ee:17:47:d0:
0f:f5:df:d3:22:40:8b:5c:24:9c:2c:5b:c0:d7:41:
55:81:fa:55:82:7f:4a:5b:a2:d0:94:c8:4f:77:30:
c3:3e:50:8d:fb:5b:57:7e:dc:cc:63:76:82:20:ad:
8d:de:58:96:4a:58:4e:aa:b5:83:fd:95:6a:4f:e7:
3b:f2:72:f7:e6:d7:7e:df:7a:85:c5:3e:48:7b:a5:
b0:f6:f5:bf:40:73:aa:04:f5:49:a4:47:7f:ac:39:
70:1d:db:19:13:b5:61:f8:f3:27:98:00:e7:09:64:
a5:a3:40:0e:00:f8:2f:b1:a0:c1:58:7f:a8:15:3c:
76:e7:df:8f:f9:82:ac:94:fa:09:be:b4:0d:f8:ce:
d9:06:d5:e4:81:95:90:1c:6f:33:2a:f3:76:7b:f9:
61:db:31:58:c5:67:e3:fc:70:46:e0:4d:fa:7e:fb:
9d:08:67:7e:61:a3:f7:2a:89:17:5d:27:bd:c2:f3:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8D:F3:77:82:F2:8F:31:EB:24:CD:08:46:43:97:DA:6B:18:25:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c84d41d9-d8d2-34ea-88e1-395db3a011c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:bb:34:3a:6d:41:0e:7f:7b:7f:de:54:e2:6d:72:16:84:f3:
02:89:38:50:45:6e:c1:d0:29:f6:bb:64:f7:89:22:00:36:90:
1a:af:60:bf:d0:9c:c0:51:32:ff:0e:b0:18:36:ae:b1:b2:6c:
d0:13:96:b2:16:02:80:96:85:b5:a0:84:20:cc:55:6e:67:61:
1b:61:10:f2:4e:3c:9b:c0:67:ba:d5:bf:81:dd:3d:94:f0:f3:
7f:92:c6:f3:56:1c:8e:52:ca:21:a0:f8:70:c9:a1:cb:77:41:
91:24:78:e2:86:d1:f5:ec:a7:cc:9a:14:d1:38:ab:cf:3f:19:
c8:0f:33:61:2e:f3:4b:f0:00:b0:af:1d:5d:b9:a7:f7:23:9e:
76:ba:09:e5:fe:ce:25:59:6f:66:f3:ac:a4:1a:5a:c9:52:ff:
d0:98:0f:ac:68:b7:de:28:32:a1:eb:e7:6d:a4:d2:b9:f7:fe:
b6:34:50:ba:09:0a:24:53:93:0a:f3:e2:e9:55:67:44:08:10:
3e:34:4f:66:0a:db:b6:2f:1f:25:e6:d0:26:f5:df:e7:32:cb:
b8:45:e9:1b:bf:2f:f3:70:4a:2f:50:04:ad:10:64:3f:75:64:
35:1a:0c:54:91:38:df:4d:a5:f8:f0:8b:04:30:0a:c6:dd:fd:
22:0f:66:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:41 2025 by rpki-client