Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb313228-c3ff-3da9-a4b9-dc6651a69122.roa
File: cb313228-c3ff-3da9-a4b9-dc6651a69122.roa (raw, json)
Hash identifier: Gsy6/fYKmN5TB+3BBiju1tORKbxQEDNURxAN/jR4rq0=
Subject key identifier: 72:50:96:95:B6:A8:48:02:17:A0:9A:DE:76:41:25:7F:14:63:2B:65
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D64AD30FC3441749F5ADDC300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb313228-c3ff-3da9-a4b9-dc6651a69122.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 03 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:64:ad:30:fc:34:41:74:9f:5a:dd:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : May 3 04:00:00 2022 GMT
Subject: CN=18fdce29-6eff-4d02-b616-333f748f989e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ca:43:7f:81:68:cd:6b:84:8e:ee:94:e9:db:
75:99:e9:ed:ba:75:ad:02:59:90:ca:f2:0b:8e:10:
b4:e3:17:a5:a0:55:da:02:77:5e:10:99:7e:23:19:
ab:a2:f5:26:d4:bf:b9:1a:53:b5:3a:f6:37:a1:17:
e3:44:7f:98:8c:96:b6:cd:f5:6d:e1:6b:25:8b:53:
48:4a:39:11:f8:3c:c3:af:f9:83:c0:f3:86:e6:38:
40:fe:a9:86:d4:14:18:7f:20:fa:a8:9e:90:e7:02:
d5:df:63:5e:bf:68:c8:be:0f:e1:0d:ad:82:7b:8c:
18:56:b3:57:bf:62:f6:3a:62:0d:23:d9:b0:e1:71:
11:ee:c0:ac:ea:89:79:44:8e:97:b1:cc:a3:41:3b:
58:0f:1b:95:01:98:64:7a:73:db:27:3c:a4:e9:c7:
27:a7:df:a5:3f:c1:bf:6d:aa:9d:55:df:13:55:b7:
ea:60:18:16:eb:28:88:aa:79:e8:b1:82:47:cf:6e:
cc:87:9c:20:c5:bc:e7:90:bc:32:72:6e:c8:fc:e3:
72:d8:bc:df:d9:cd:b7:a1:e3:9e:a3:64:49:67:aa:
2e:fb:1f:16:62:a0:be:87:36:de:24:98:ff:c2:9b:
19:95:ea:7d:0a:19:ad:df:a7:39:b6:69:f7:79:fb:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:50:96:95:B6:A8:48:02:17:A0:9A:DE:76:41:25:7F:14:63:2B:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb313228-c3ff-3da9-a4b9-dc6651a69122.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:db:79:27:66:e7:2a:8f:09:b7:fb:75:06:75:c2:f0:d2:06:
79:65:70:36:cd:97:68:53:5e:cd:35:8c:6a:df:6c:c7:6e:ca:
1e:dd:a6:10:8b:6f:c3:c6:64:00:17:86:ca:d2:14:05:2f:cd:
a1:81:a8:3c:23:1a:8b:f4:98:b6:a1:f0:bb:d6:f5:4c:d5:4e:
ad:9e:3b:7b:44:99:ae:e5:59:1c:29:95:aa:69:63:94:be:3e:
c8:96:ae:b8:7c:50:62:45:d8:68:66:ed:60:70:a3:8f:5c:c7:
6f:36:4e:06:f5:27:5a:d3:08:1f:e5:fd:2d:f6:e1:81:d3:54:
04:71:21:a4:91:9a:6c:8a:dc:58:f5:bb:7d:ef:ad:3b:55:17:
73:bc:8a:3e:36:2f:33:56:ae:82:64:fc:c5:2d:57:49:ab:80:
66:cc:e2:9c:e6:bc:a7:7a:2a:af:5d:48:54:d5:4e:a5:e7:e1:
ec:2a:0d:d1:6d:9c:75:a3:ee:e7:7f:83:cc:79:1f:99:c9:58:
0e:b7:b8:40:c6:c1:63:94:5a:cb:48:79:d0:16:ee:24:bb:6e:
ef:ff:a5:f0:e1:88:e3:7d:c4:21:f3:ec:45:17:14:48:c3:fc:
df:1d:70:21:91:f6:fe:8c:ca:86:8b:d8:0a:ac:85:d2:f6:9c:
f6:61:9c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:05 2025 by rpki-client