Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c890b7db-5f69-3483-b68d-14423ee71e7e.roa
File: c890b7db-5f69-3483-b68d-14423ee71e7e.roa (raw, json)
Hash identifier: yAMHZkX/dQ3d5GE98jguiae60K04K5xZpjPhC2Afwpg=
Subject key identifier: 1F:2D:4C:B0:EF:A3:2D:C6:9E:AC:8B:63:D4:20:1E:8B:6E:48:4B:6B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D167301395514C028511F8A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c890b7db-5f69-3483-b68d-14423ee71e7e.roa
Signing time: Tue 01 Mar 2022 05:00:00 +0000
ROA not before: Tue 01 Mar 2022 05:00:00 +0000
ROA not after: Tue 05 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.158.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:16:73:01:39:55:14:c0:28:51:1f:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 1 05:00:00 2022 GMT
Not After : Apr 5 04:00:00 2022 GMT
Subject: CN=b3edc667-9e64-44c3-a972-a12e8e6310f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b1:9c:ad:d6:97:d6:07:6f:b0:7b:9f:aa:25:
ef:8b:fa:22:f9:ac:57:ac:3f:57:00:60:23:d7:b2:
e2:9d:26:1c:f7:0a:ce:3a:0c:58:1b:6b:a3:fc:bc:
58:19:e4:dd:f5:49:7a:13:39:1f:16:d1:b9:72:3f:
14:23:67:06:9b:22:90:1c:2c:03:70:ba:e7:ec:fa:
52:95:95:8f:78:2f:ea:7e:83:5e:2b:7a:50:ea:d5:
1e:37:02:24:44:78:ce:b7:6d:f1:19:43:d6:97:26:
7d:ad:21:fa:90:71:5e:32:79:9c:4c:f0:d6:ea:e0:
be:25:f7:1a:44:48:e3:d4:88:f8:51:cb:c7:0d:bc:
9b:97:70:b9:ee:d4:e2:6b:f0:0a:5e:2e:28:f4:a1:
d6:65:09:db:57:16:db:5e:c2:78:1e:95:c1:f1:23:
13:46:55:ee:71:c6:e1:c8:fc:83:95:af:59:59:43:
64:a6:3e:6f:80:b5:56:24:be:fd:b6:07:24:ea:6d:
21:76:81:df:4d:6e:c9:45:4b:51:0a:d1:bf:49:30:
c1:29:be:26:f1:9e:ed:a3:cd:a9:25:fb:d8:e2:06:
fc:b8:e5:c3:a2:1d:67:36:d8:72:34:32:25:92:04:
87:09:3e:11:99:9c:60:06:d4:c3:87:7d:ff:27:ef:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2D:4C:B0:EF:A3:2D:C6:9E:AC:8B:63:D4:20:1E:8B:6E:48:4B:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c890b7db-5f69-3483-b68d-14423ee71e7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.158.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:ad:09:4e:e8:a9:3c:e0:d5:47:6a:26:f6:eb:56:00:1e:0d:
25:0b:2c:5a:3e:da:d4:85:8e:20:13:7e:f1:bb:60:3c:0c:90:
9f:20:83:bd:b5:e6:f9:48:32:75:04:37:3c:af:5e:89:8b:5b:
5c:46:c9:f6:c2:db:cf:ab:f0:43:e4:0c:a3:7b:d8:28:2d:3f:
d2:13:67:f5:1c:be:b3:e9:be:18:ef:fe:ac:46:76:7d:ce:d8:
19:f9:0e:71:aa:62:ca:8a:fe:02:07:f7:77:99:1d:87:ed:1d:
d8:7a:66:7f:1f:5a:9e:5b:c2:bd:3b:d6:8b:63:b2:e1:f5:d9:
c8:3f:3d:3c:66:f6:93:71:8e:b7:53:ed:49:e5:c9:8d:0f:37:
e9:e4:0e:3b:b4:ab:9e:23:e7:c4:6f:0c:11:4c:72:3f:d7:83:
db:b2:86:b6:20:38:bc:70:e8:85:67:e9:97:8e:ae:98:93:62:
4c:ff:ec:b5:c7:93:9b:66:02:34:ba:07:45:4e:b4:38:5d:45:
93:a6:c4:3d:fe:fb:f1:c7:7b:c6:e8:eb:f1:ff:c8:ff:9d:39:
3c:d3:f9:a5:83:f8:0c:ba:77:d2:5b:b1:eb:3c:2f:fb:d0:9a:
f7:55:3c:9a:8a:12:eb:3e:54:e6:59:a6:c3:75:8b:1d:d4:6d:
b4:32:c1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:06:49 2025 by rpki-client