Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd64eebf-3795-31a2-b2d2-cbf7e8d4391c.roa
File: cd64eebf-3795-31a2-b2d2-cbf7e8d4391c.roa (raw, json)
Hash identifier: kaIWry6jPJX6VcTMNlZ9F9nmW9MvF8txxPQmI5JVpdc=
Subject key identifier: 10:27:2C:F0:11:3E:99:80:62:C4:CF:28:0B:06:FF:60:72:3F:CE:42
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC8FEDFFE0DB8BEAA6794D180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd64eebf-3795-31a2-b2d2-cbf7e8d4391c.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.53.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c8:fe:df:fe:0d:b8:be:aa:67:94:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=dfd96725-7737-4cc5-84fa-cdf7b4a547cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6f:22:05:91:c9:3e:a6:17:f5:1e:cd:8c:84:
d2:5e:ad:6b:2c:48:92:6b:82:ba:28:ee:0a:50:86:
fa:ed:89:32:14:60:ed:48:42:e6:56:0b:2f:45:6b:
a5:9d:e1:ba:33:6e:9b:1e:a2:d0:96:9c:b7:6a:51:
ac:86:59:2b:b7:4f:dd:6d:bf:80:db:23:4d:fc:ab:
6e:e7:91:f1:25:2a:ca:5b:02:b8:c2:73:60:63:04:
a6:30:e8:1d:ba:ee:99:86:22:00:a3:13:03:a7:f5:
94:02:ca:d4:1c:02:9e:cc:ba:52:f4:a3:62:a9:2b:
1f:b3:3c:79:29:82:10:f0:e7:af:45:ac:5f:06:da:
00:60:74:2b:64:70:78:7b:de:ab:bb:64:3e:10:e5:
80:e8:6a:00:d6:cb:a7:61:63:bd:e7:81:a3:8f:36:
00:11:ab:6f:16:85:79:18:2c:db:fb:d5:47:a6:37:
a4:91:dc:cf:47:29:92:4b:b7:cb:86:62:cb:24:87:
bb:dd:a2:2f:15:4a:39:48:12:07:c4:57:6d:8b:83:
0b:dd:a8:c6:ef:63:e2:e4:63:63:4b:72:2c:f8:d4:
cf:df:c2:4e:cd:c8:cd:39:38:39:76:a9:21:b9:4f:
66:c9:8f:84:96:39:25:c0:24:8a:9a:97:aa:48:90:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:27:2C:F0:11:3E:99:80:62:C4:CF:28:0B:06:FF:60:72:3F:CE:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd64eebf-3795-31a2-b2d2-cbf7e8d4391c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.53.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:63:67:d8:53:8b:be:ef:62:81:33:43:e5:65:d4:a0:37:2f:
11:68:99:3d:c7:21:7a:e3:b6:1e:d4:36:c1:60:df:9a:99:a6:
2f:27:2c:00:e7:2f:c0:55:87:3a:5d:d9:3d:00:33:54:24:11:
03:ed:33:59:88:b5:e8:b7:f3:55:b0:ae:93:3c:b5:a3:b0:2b:
e1:1e:eb:d6:a8:16:77:16:09:4a:57:c7:50:04:7f:f4:9b:dc:
f4:c2:6d:c7:93:4a:97:52:54:7b:3f:26:a8:04:ac:bf:17:c1:
76:30:d0:85:22:e4:6f:9b:49:2d:8a:7b:39:97:53:ed:de:06:
de:5d:ff:a5:ad:bf:55:64:34:7d:1f:e2:42:07:88:4b:fd:e8:
d5:62:55:84:85:8a:b1:4c:7f:d5:e9:a3:ac:ff:91:4d:5a:70:
d5:82:67:c3:c3:e9:7a:45:46:ad:70:4a:02:35:70:50:4e:ea:
79:15:f7:bc:08:1c:82:b4:a5:ae:6a:99:8a:01:ab:35:8c:e7:
9c:82:04:07:8d:94:9f:c6:58:43:9c:4a:a7:95:c5:7b:18:29:
2c:a4:e5:b1:58:ea:42:a9:e8:fe:6d:a0:0a:e6:57:15:ff:39:
c0:00:af:9e:37:1c:fc:c0:f6:30:f9:7d:c9:be:af:c9:e6:41:
40:17:04:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:49 2025 by rpki-client