Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ccf4d2e2-cc7a-354e-945c-8c81e5ae011e.roa
File: ccf4d2e2-cc7a-354e-945c-8c81e5ae011e.roa (raw, json)
Hash identifier: 1V3fefZTa3u6WJyUOM6CACeT3FWRZjSXXUCnwzUi3Uc=
Subject key identifier: A9:12:76:F7:13:3E:14:69:AA:FB:98:2A:4E:B6:4E:B8:F7:EF:B2:B7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D805C613BC684E865578C8760
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ccf4d2e2-cc7a-354e-945c-8c81e5ae011e.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.128.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:5c:61:3b:c6:84:e8:65:57:8c:87:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=958fc696-a10d-49cd-b62a-ed042856f9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d8:8d:ec:21:8f:76:33:c8:f1:9d:f5:2f:db:
a0:9a:85:f0:b1:df:68:3c:8c:b9:c2:f4:1a:3d:c1:
72:99:ae:fe:b2:78:03:08:03:78:44:c5:3d:50:00:
66:12:c6:29:57:dd:47:a2:ec:c5:df:d5:e6:26:cd:
72:10:98:01:ab:8a:01:23:17:66:45:9b:f6:a4:fd:
a9:1d:63:d0:de:fb:76:87:c2:6c:00:e5:56:23:a8:
75:56:70:a9:b2:86:17:60:26:50:99:ab:ec:55:67:
96:fc:e6:16:b5:73:59:09:d9:5d:c9:34:0b:43:09:
9e:b9:4a:7d:a1:b0:66:f8:e4:c4:47:51:6f:4e:4b:
94:27:8b:7e:bc:8e:5c:71:ca:9e:f9:d3:9f:7b:85:
b3:60:ae:48:81:85:03:7e:91:6b:51:cd:c9:f9:fe:
c7:78:1c:85:50:34:27:a7:0b:c5:b1:d5:a6:89:9c:
b4:4e:f0:19:22:36:49:b9:1d:06:46:09:e1:d3:f6:
80:24:c6:8c:38:da:28:89:4c:34:c6:2f:2e:ec:68:
d2:6b:88:15:ca:ab:d2:a7:16:c5:83:22:a8:21:c3:
46:5b:0c:2a:30:71:6b:5b:1c:ba:04:a7:c8:9b:fb:
07:91:72:64:8d:6c:6d:12:df:e3:c7:10:44:ea:ff:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:12:76:F7:13:3E:14:69:AA:FB:98:2A:4E:B6:4E:B8:F7:EF:B2:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ccf4d2e2-cc7a-354e-945c-8c81e5ae011e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.128.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:15:79:7e:4d:1c:d5:ea:fa:41:d0:c0:72:6a:81:31:31:41:
e1:c7:b8:7f:2b:d1:b7:cd:4d:4d:3e:d1:80:d5:a2:27:0e:26:
4e:a9:46:1e:41:9b:69:97:b9:5f:be:86:11:cc:8c:fb:e9:6b:
01:40:39:bf:d1:01:f9:4e:ba:62:90:9a:3d:b3:57:e7:11:2f:
ac:90:fc:19:ce:0b:a7:59:22:19:f5:84:2b:61:de:52:59:64:
11:27:07:f5:61:b8:ae:53:99:3b:a2:1b:88:c8:89:94:55:82:
e8:ff:94:cd:c0:8e:65:d1:bf:74:01:f8:9c:b4:5d:fe:33:e3:
3e:90:d8:b3:49:6d:7d:8d:63:86:62:a4:94:73:db:74:5f:d1:
41:02:8b:21:30:cf:a8:65:a4:98:55:db:a5:d8:c7:e6:58:97:
64:8c:61:0a:a2:d3:8e:e2:a8:57:5e:42:0e:91:77:25:a1:ff:
26:5a:9a:d0:53:a5:a8:e2:77:85:2e:99:6b:92:13:00:5b:0a:
b1:34:61:4f:ed:2c:21:e7:91:7f:5b:84:e5:bd:76:2c:61:32:
0e:ee:4b:e2:44:3e:35:d7:89:54:c1:12:49:57:65:d3:9c:16:
6a:e7:01:36:bf:60:b7:7f:9b:b2:ed:2e:11:f4:a8:bb:6a:91:
fb:32:a9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:26 2025 by rpki-client