Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca749dc6-dc00-32cd-b7a7-3d2097aca245.roa
File: ca749dc6-dc00-32cd-b7a7-3d2097aca245.roa (raw, json)
Hash identifier: QBluUr6Ome5MR7Hx+j/6SjM5KAdrl6DGsHpMSyVCoX8=
Subject key identifier: CB:01:4E:08:69:07:20:6B:69:E3:3F:AA:78:56:25:93:D1:BE:6D:4C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E435FC06B18546E7E721BE000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca749dc6-dc00-32cd-b7a7-3d2097aca245.roa
Signing time: Wed 15 Jun 2022 12:00:00 +0000
ROA not before: Wed 15 Jun 2022 12:00:00 +0000
ROA not after: Thu 21 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:43:5f:c0:6b:18:54:6e:7e:72:1b:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 15 12:00:00 2022 GMT
Not After : Jul 21 04:00:00 2022 GMT
Subject: CN=9f4cd9f7-a437-4631-81ec-4ad4127d648d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:18:78:99:56:cb:f2:51:c7:36:a1:d0:ed:
05:47:d7:9e:df:da:02:c0:8b:0d:46:ef:b1:84:57:
ab:36:94:45:5f:d6:06:18:c4:ee:0d:a9:fb:8c:d4:
16:0a:b1:13:9e:ee:ee:b4:be:70:0e:fe:61:7b:dd:
98:59:5d:97:99:fa:cb:ae:66:ee:c8:1b:2d:42:4e:
1c:b2:49:ca:a2:1c:02:a5:b6:f2:5a:44:0d:17:a0:
cc:af:24:02:1f:70:ca:b9:08:30:43:38:2b:4c:32:
98:80:29:41:2b:75:32:63:aa:a3:09:62:41:d8:7f:
c0:1f:ce:e4:36:0f:e2:e4:db:24:0c:c9:01:1e:e8:
a8:d7:1c:9e:f4:2b:0f:51:98:4b:c2:06:29:e0:b5:
76:ae:07:83:08:b2:fe:0d:07:61:8d:0c:c1:82:2c:
ac:d8:7e:d7:ec:7a:fb:32:a8:43:a3:b1:b8:07:d1:
19:18:77:b1:af:a7:b2:e6:71:0c:6f:39:fd:8d:d7:
8c:4c:59:e1:42:36:40:35:f0:7e:6c:c0:2d:f4:dd:
c8:95:50:db:67:b5:c6:32:a9:b2:ec:84:02:01:a8:
6b:0e:8d:9d:73:23:19:1a:5d:40:77:11:df:89:24:
6a:9c:03:05:b8:25:d7:26:37:13:bc:98:11:d6:c3:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:01:4E:08:69:07:20:6B:69:E3:3F:AA:78:56:25:93:D1:BE:6D:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca749dc6-dc00-32cd-b7a7-3d2097aca245.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:b5:26:30:ca:37:3d:32:c3:e4:15:6b:cc:84:d6:57:f3:7e:
06:82:ca:10:21:61:5a:55:aa:93:36:cf:f9:8c:4f:92:d0:d1:
01:77:25:51:55:75:10:88:c1:cc:05:d3:e5:67:4d:0e:73:ad:
22:a3:40:52:18:e3:14:78:18:1a:61:5c:19:b2:2e:40:f8:a4:
7b:a3:8f:cd:af:15:8f:9c:d4:a5:45:57:2e:ea:bb:6d:87:d5:
81:68:4b:93:08:b6:cf:84:6e:5f:d9:e4:36:df:69:8a:ac:a5:
19:6f:5d:1f:8c:d8:92:d7:19:00:b1:85:24:a6:7c:ce:a5:ad:
4a:48:32:42:44:43:c4:03:65:2c:8f:91:bd:b2:4c:5c:07:22:
93:cf:bd:7e:93:4e:0f:3c:7e:4d:4d:04:05:71:af:48:01:60:
82:3d:20:5c:6b:d2:fa:44:db:af:a3:86:2b:bf:00:06:29:c1:
ef:05:81:9e:de:77:41:52:21:83:6b:76:fc:fa:b7:48:d6:d5:
3e:31:ba:69:d5:58:b6:b2:75:86:78:66:d2:8e:9b:7e:c8:30:
13:bd:78:02:51:dc:2c:d5:6f:76:73:bc:ff:fc:28:c3:dc:06:
5e:5f:b9:b9:36:c1:06:48:34:00:ba:04:87:91:e5:47:64:a4:
a6:5e:d7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:35 2025 by rpki-client