Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9df853c-2dd1-3e4a-8dfb-d466908aa345.roa
File: c9df853c-2dd1-3e4a-8dfb-d466908aa345.roa (raw, json)
Hash identifier: j0JfmZXxZphjeLzgVbGbnLgQOBBt7kan9ETnqQXGt7c=
Subject key identifier: F7:34:CF:A3:16:78:C6:AD:77:4B:61:31:E6:3F:BE:BE:C6:C3:99:74
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DCBE1D2C5052BF061B733F252
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9df853c-2dd1-3e4a-8dfb-d466908aa345.roa
Signing time: Wed 04 May 2022 12:00:00 +0000
ROA not before: Wed 04 May 2022 12:00:00 +0000
ROA not after: Thu 09 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.101.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cb:e1:d2:c5:05:2b:f0:61:b7:33:f2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 4 12:00:00 2022 GMT
Not After : Jun 9 04:00:00 2022 GMT
Subject: CN=dbb05513-ef6f-408a-a0d4-ac3d93d5f1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:4d:f5:7e:f3:50:17:f1:df:b6:7e:af:5b:
42:fd:98:82:74:bc:2b:4d:16:bc:93:86:24:1d:2b:
2c:ef:d0:bc:ef:c7:ca:46:ff:fe:7c:02:3d:c1:29:
a4:06:6a:94:17:19:9f:53:e1:e3:22:b4:c4:c2:4a:
3e:87:37:38:b6:42:30:6a:70:f7:f4:29:c7:07:0d:
ec:8f:a6:8d:91:70:ef:8d:6f:e6:91:b3:a2:03:1e:
dd:1f:18:bd:42:ac:98:54:fd:5c:61:69:7e:57:6d:
e9:e9:0c:2b:9e:c5:97:ee:ad:51:15:25:94:06:66:
98:ac:ab:36:2a:b3:6d:42:a2:7d:77:b0:45:56:b2:
a9:36:07:5c:8d:82:c1:1c:46:84:f4:14:16:ca:3d:
f8:2f:0d:1b:72:d7:65:b6:d7:6d:4d:10:56:4f:b2:
8c:f4:e4:cf:0c:86:63:8d:8e:21:38:58:cb:d8:36:
ca:94:fa:1f:d4:1d:b5:5e:95:5a:52:95:61:c9:58:
6a:fc:6c:7b:0d:2d:b7:3e:90:8c:16:ad:db:a6:42:
ab:07:94:d4:23:e8:7b:82:97:6d:5c:30:bc:7c:84:
61:66:c6:cf:1c:0f:29:bd:f1:1c:fd:4d:3a:35:2e:
40:b1:e2:1a:a8:29:0b:31:ee:92:31:2f:00:52:51:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:34:CF:A3:16:78:C6:AD:77:4B:61:31:E6:3F:BE:BE:C6:C3:99:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9df853c-2dd1-3e4a-8dfb-d466908aa345.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.101.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:4d:55:47:8f:62:2d:03:64:1c:43:a7:dd:c8:d1:37:0b:3a:
81:74:a1:26:fb:79:73:37:ec:32:a0:e0:56:c2:8b:06:12:d6:
4c:27:0b:b6:ed:70:98:c6:07:42:0e:7b:24:6c:6a:12:20:5e:
66:4e:c2:d1:9a:c1:f9:86:36:c4:4d:3b:3b:30:9e:d1:5c:9f:
72:14:a4:38:aa:15:33:2d:bc:e8:d6:11:9d:83:ef:b6:bb:69:
72:18:67:24:00:4c:bd:00:9d:74:45:82:32:c2:62:b4:e8:27:
32:b1:59:b1:e3:bf:09:41:e7:01:8a:0d:6b:3b:8e:39:80:c8:
2f:f0:f9:bf:d2:89:82:7f:b0:c5:66:6d:11:10:08:b5:8e:51:
39:1a:15:6e:7e:9e:b3:74:5d:bb:c5:53:c7:95:e3:41:5d:b0:
fb:bb:a6:01:15:8b:92:64:92:de:7a:69:a3:4e:ea:66:3b:65:
36:d4:62:e6:34:b4:6d:a7:59:19:ae:c6:fc:d8:e4:72:e3:77:
a9:c8:db:f1:93:5a:13:b3:6c:e4:88:e6:3a:37:1b:a9:f6:b7:
f3:18:eb:34:51:3c:bf:5d:a5:5c:5b:71:b0:17:c3:85:55:8a:
c1:f4:7a:e6:e6:3a:18:69:34:0e:ae:5d:79:a9:76:5d:fe:e3:
5c:44:aa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:38 2025 by rpki-client