Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd3859a5-2bf9-3e9b-a696-30af0e3e5df3.roa
File: cd3859a5-2bf9-3e9b-a696-30af0e3e5df3.roa (raw, json)
Hash identifier: ARoUUKH/pclW/5XFFEL9g7xZ+1Mlad1VXdSAmdLJWNM=
Subject key identifier: 3E:1D:EB:CE:E9:2A:1F:0D:CF:DE:2D:32:D8:DE:A9:BC:27:9B:27:F6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401AE33DF7D474CBF88439BB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd3859a5-2bf9-3e9b-a696-30af0e3e5df3.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 50.16.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:e3:3d:f7:d4:74:cb:f8:84:39:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=ac0808ee-6cfc-4deb-b388-b75d072393f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:0a:a0:3e:34:2b:78:64:fd:e2:09:aa:33:
f1:2f:c4:ed:0c:90:9b:1e:c6:3e:f4:0a:a1:ea:97:
57:e1:53:c6:4b:ec:6b:a4:3e:2b:3c:ed:08:f1:37:
a1:7a:71:21:62:25:2a:94:ff:cc:ec:2c:15:43:bb:
62:e2:6b:23:d4:30:ae:47:21:8c:17:27:d5:c6:ad:
ad:3f:78:1d:09:24:95:13:75:66:55:81:27:43:ce:
a8:aa:95:5c:1d:31:bb:fa:62:81:e4:32:3d:46:d0:
08:19:f6:14:5a:e9:01:8a:f0:42:6a:ae:f9:6b:3e:
78:17:73:20:81:bc:af:6f:41:f1:44:ce:11:9a:3e:
66:c5:60:64:8e:8c:7a:23:dd:b0:c2:43:6b:47:a9:
e5:f7:b9:c9:46:7d:33:b1:6f:73:be:1b:4b:32:f6:
5a:ba:e0:ad:98:fc:44:ca:0f:71:2c:0b:d6:f2:19:
f5:cf:9d:92:3c:0d:7d:a7:74:3e:28:d5:3a:29:14:
4f:f6:06:dd:4a:90:05:b8:e2:c8:e4:db:a8:5e:ec:
2a:f3:1c:d9:a8:10:35:73:0a:d3:71:c2:84:5e:b5:
27:c8:8e:b0:37:68:80:d8:d9:5e:ec:8f:fa:73:21:
ab:93:6b:d9:36:58:95:71:85:e8:a8:7d:3d:f0:92:
e3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1D:EB:CE:E9:2A:1F:0D:CF:DE:2D:32:D8:DE:A9:BC:27:9B:27:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd3859a5-2bf9-3e9b-a696-30af0e3e5df3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
50.16.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:e7:4c:6d:a7:9c:fc:1e:a6:d1:9e:d0:8e:71:19:52:ba:57:
bb:54:27:39:3a:1e:22:0c:40:2f:b9:d2:8b:fd:6a:03:b1:95:
f2:d8:62:05:cc:2e:8c:94:91:8f:a3:79:6f:a0:b3:e2:89:3d:
f2:c3:49:fb:05:ea:5a:37:84:33:bf:f3:0f:1d:66:28:6a:57:
78:24:51:15:99:d1:aa:a8:12:2e:e4:04:96:06:e8:98:70:43:
f2:fe:4f:5b:da:83:b3:6c:a0:2e:18:ae:0a:2a:1b:9d:9e:d6:
2b:70:53:ab:a4:c2:46:e3:5a:57:9b:61:04:a6:e6:4b:ac:db:
50:69:21:62:fa:47:40:fe:94:34:c9:8c:1f:47:fd:cb:a6:eb:
c0:d5:75:a0:be:c1:ce:79:21:2f:77:8e:4a:69:ab:fd:e5:47:
bb:b9:17:3d:78:44:43:eb:81:24:65:79:06:24:3f:76:16:de:
89:b3:49:51:d9:20:39:59:4c:5c:35:cd:39:59:70:f5:be:d1:
93:a6:89:10:5f:9b:26:99:ef:b8:c3:eb:02:73:24:2d:02:86:
f9:af:ef:3b:25:73:0d:6f:bd:50:d1:60:27:59:8e:86:4b:ad:
5b:78:18:68:bc:62:59:f6:a3:59:1e:10:de:21:2e:76:19:49:
07:f8:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:58 2025 by rpki-client