Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cbb2f81f-586a-3fb5-bc34-3e2baae2d315.roa
File: cbb2f81f-586a-3fb5-bc34-3e2baae2d315.roa (raw, json)
Hash identifier: u7KPW2q8rumKM8+PEXOUw5Svao+5iPa6TueNtyyOteI=
Subject key identifier: 02:4B:F1:56:72:00:9A:D9:7D:9E:F1:95:EE:24:9F:C9:7B:B8:7D:98
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F3A093EF34C05C0A96A4C4C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cbb2f81f-586a-3fb5-bc34-3e2baae2d315.roa
Signing time: Mon 12 Sep 2022 12:00:00 +0000
ROA not before: Mon 12 Sep 2022 12:00:00 +0000
ROA not after: Tue 18 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.158.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:3a:09:3e:f3:4c:05:c0:a9:6a:4c:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 12 12:00:00 2022 GMT
Not After : Oct 18 04:00:00 2022 GMT
Subject: CN=7b97e1ad-cec0-404c-8660-e173d2c6c48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:f1:0e:dd:83:5d:d8:4a:43:13:1c:47:9f:
71:13:10:cd:af:ff:d7:50:e6:b5:75:90:e7:5e:d8:
f8:aa:95:6a:a1:13:0e:63:a7:57:d6:4a:ce:a0:d0:
05:8c:ad:6d:99:79:77:8f:be:0a:86:b6:e6:a8:42:
9a:4a:9f:27:6c:8a:8c:d6:b1:7c:24:fb:f6:c7:ff:
d8:4f:2d:9e:99:06:5c:65:93:9e:17:c6:96:79:fc:
b3:ef:cb:c9:ee:52:1f:2a:29:ff:43:9b:7c:14:14:
4e:2d:b6:19:a0:cf:a0:62:49:ff:87:77:8d:fe:cb:
c7:0f:9d:59:ba:ba:05:0b:39:17:63:6b:5c:61:61:
82:fc:76:f3:ad:b6:b4:31:37:f3:6b:f5:a9:c1:9a:
20:15:aa:fb:c7:ee:f1:4e:4a:28:f4:73:97:8b:2f:
1b:1e:ee:b2:e9:ba:cd:2f:55:f9:93:97:4f:0e:f3:
65:a9:a5:e9:8e:d7:73:af:6f:d0:c8:6f:d0:f2:15:
40:1f:b8:34:ec:a0:a7:69:f9:48:7d:41:f5:c4:9e:
0e:ed:74:13:66:ff:be:f1:5e:3b:ba:3c:a0:db:15:
fc:c3:e7:59:84:64:30:9d:cd:7f:ba:11:b0:77:66:
d4:85:30:ce:44:1d:3f:50:c4:e9:29:cd:71:1e:c0:
97:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4B:F1:56:72:00:9A:D9:7D:9E:F1:95:EE:24:9F:C9:7B:B8:7D:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cbb2f81f-586a-3fb5-bc34-3e2baae2d315.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.158.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:2e:36:63:f9:be:ab:47:65:a0:c2:fa:57:cb:b8:a9:99:fe:
36:08:f7:ce:39:c9:de:c1:fa:8d:a6:cc:e5:d3:fa:d0:12:db:
b7:9f:7b:2a:b1:b0:b2:6c:d5:7e:dd:81:2b:1d:6f:7c:9d:f9:
d6:90:0e:57:af:3d:ff:7a:9a:f9:48:9b:12:fc:30:76:cf:06:
15:4d:73:e7:5a:13:28:94:d9:cb:bf:1b:8e:4f:d1:18:4a:4b:
58:fe:17:ef:cf:a3:a5:5f:ce:6c:3d:12:f6:e1:01:0a:e2:33:
61:63:f0:a5:a3:74:ea:f7:d8:bc:86:d6:b1:ea:37:df:a8:1a:
e2:fc:24:fe:de:5d:2d:12:2c:a6:77:e9:9c:8e:41:34:22:b4:
2c:b5:78:57:02:1e:6b:dc:5d:9c:a7:19:76:09:b1:a6:5a:a8:
e0:16:c1:6e:62:bb:17:aa:7a:4b:74:35:c3:9f:ac:12:1d:80:
50:2f:6a:d8:35:2b:aa:1b:04:d5:ac:44:70:9d:f4:91:a8:36:
46:b9:2a:8f:2e:82:b3:6a:94:57:41:f9:03:97:2f:48:ef:d1:
92:42:be:84:17:a3:ee:19:b2:23:58:5e:fa:01:93:de:52:3f:
73:a8:0d:2b:1c:72:bf:7c:a3:f8:b1:92:4d:c4:ed:3a:5a:70:
1b:99:ca:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:39 2025 by rpki-client