Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c8c2780a-cfe2-3bb9-be17-e7fa3671da66.roa
File: c8c2780a-cfe2-3bb9-be17-e7fa3671da66.roa (raw, json)
Hash identifier: epyDmO2B8El1iJfWsXMBKbIwLJ61dhslyDPwViYd9No=
Subject key identifier: EC:20:32:CF:08:D2:BA:58:C3:35:C5:EC:0A:BD:F6:1A:8A:95:7D:5D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D805C9E78D261FD4382B6DC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c8c2780a-cfe2-3bb9-be17-e7fa3671da66.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:5c:9e:78:d2:61:fd:43:82:b6:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=8ea4f697-d514-445b-ac02-6aa01e7e781a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:38:47:54:ce:6b:db:87:a8:f9:19:76:12:
a5:52:fc:21:fa:40:b4:fd:b1:8c:c0:43:2d:28:47:
3e:28:7a:9a:56:53:4c:9f:e7:42:5c:1a:92:8e:84:
7f:dc:91:2e:38:e2:46:22:be:6b:e7:ba:d0:be:1f:
23:ec:df:10:4a:fd:12:cd:ba:d6:c9:97:9e:40:e8:
9e:1b:6b:23:f7:ca:29:4d:60:59:da:2a:5e:a4:ef:
40:63:5d:40:9c:00:c5:e0:d1:b8:86:08:b9:e1:40:
d3:dc:a9:18:cd:05:5b:40:a1:01:33:b8:9d:4c:cc:
61:a1:26:ae:10:38:f7:c3:09:31:4e:06:e0:b8:69:
4c:11:b4:cd:f8:47:b7:26:aa:66:a0:0d:8e:9b:04:
c1:a0:08:80:8b:4e:fa:23:d7:0a:b8:c6:4a:fa:52:
c2:ce:ae:bc:9d:c3:d8:5d:f1:12:bc:0e:8b:b4:d0:
af:bf:0c:b8:54:20:92:27:7d:89:2f:8a:55:9f:d3:
d3:31:12:27:fc:59:1a:79:62:8e:ed:1e:23:f9:6b:
a2:9e:b5:5f:28:30:96:5a:87:5c:07:05:17:8e:93:
c0:da:6f:b9:78:33:2d:6b:3a:52:aa:17:68:cd:f6:
e0:94:a8:4d:8e:8d:23:a4:03:53:3f:b5:d9:d5:81:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:20:32:CF:08:D2:BA:58:C3:35:C5:EC:0A:BD:F6:1A:8A:95:7D:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c8c2780a-cfe2-3bb9-be17-e7fa3671da66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:02:d5:13:eb:37:d7:3e:97:36:ec:69:67:cd:4b:69:51:d7:
f2:5a:95:39:d9:0e:2d:f7:6b:88:63:c0:0a:2d:b1:08:72:8a:
e9:a2:cc:35:c6:82:6d:87:47:7a:b8:11:6f:95:b4:0f:c3:5b:
0b:34:bb:fa:52:ac:c3:d7:09:59:23:4f:bd:85:9b:6f:99:c1:
9c:91:f3:4e:e3:f8:4c:b9:aa:e5:28:99:3d:fa:37:13:ec:1e:
35:aa:4d:0e:64:46:c6:f5:a4:39:a9:b8:5f:b3:ee:70:43:00:
36:e0:22:4b:f6:de:40:4e:82:2a:cb:64:87:f6:d1:b1:5c:d5:
02:0b:4c:d5:e9:e8:f7:dd:15:95:23:d3:bb:3f:10:94:a3:27:
c2:63:db:d7:c0:ae:46:8b:84:79:13:0b:11:77:ae:27:64:e8:
cb:cf:44:61:1e:1e:4e:63:9e:2f:88:98:f5:a1:bc:75:3a:97:
f4:cf:7c:76:87:18:98:ec:8d:db:09:cb:b7:f5:97:70:06:fc:
f6:6e:16:31:e4:c5:f0:8d:6e:94:3f:9b:54:a6:43:88:b0:da:
93:90:f0:f4:30:a1:f6:8c:32:2c:1c:0f:4f:67:7c:e4:30:dd:
1b:d2:25:68:e3:72:69:dc:19:e2:6b:db:31:e1:02:a2:03:f3:
e1:39:4a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:21 2025 by rpki-client