Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd70b16e-787d-3867-be7c-0cba11f8a743.roa
File: cd70b16e-787d-3867-be7c-0cba11f8a743.roa (raw, json)
Hash identifier: cyz1I1hgMmuja2zD4RfFP7gBTP4hNxAffidcOU6R+qg=
Subject key identifier: 56:C1:7C:28:D6:05:D6:A2:1E:0F:C7:1B:E7:7A:05:54:4C:69:9F:2B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CA0EFAAD324AC449EAB8E9F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd70b16e-787d-3867-be7c-0cba11f8a743.roa
Signing time: Tue 18 Jan 2022 05:00:00 +0000
ROA not before: Tue 18 Jan 2022 05:00:00 +0000
ROA not after: Tue 22 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a0:ef:aa:d3:24:ac:44:9e:ab:8e:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 18 05:00:00 2022 GMT
Not After : Feb 22 05:00:00 2022 GMT
Subject: CN=1a33216f-ef2a-44b2-8e49-457bccda3e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:ab:59:44:fd:38:e1:37:74:8e:5e:f9:b9:
b9:44:69:21:38:2a:5a:df:47:75:e9:78:9a:bc:a6:
8a:ec:d7:58:42:ab:51:bf:66:c4:16:ee:17:e7:03:
35:77:f0:2d:1e:1c:d0:0c:23:1f:b4:73:f0:82:50:
6b:cd:46:0a:fd:55:e8:c2:d5:45:54:8c:e8:a1:8e:
e0:2f:30:29:b0:96:49:07:94:16:10:59:34:77:10:
df:ba:ed:a8:94:83:be:4a:85:e1:69:b2:39:c0:15:
d3:36:34:8a:e7:bf:8b:ae:ef:e1:c8:17:e5:f6:46:
d9:65:7f:26:d3:a3:52:8d:3e:7a:df:d2:f7:7a:ec:
48:74:0a:41:85:49:ad:99:60:b1:56:fc:c4:0a:f1:
31:6f:68:1e:5a:0b:7e:1f:a6:9f:a4:a8:c1:79:55:
55:a5:ed:cf:68:8c:69:ad:d8:09:19:bb:35:dd:38:
cd:8a:b6:c4:73:c3:fe:cc:ce:2d:29:e5:ea:69:22:
92:8d:9a:72:06:f7:ed:4f:20:a6:cb:5d:e1:35:4d:
0f:a7:7f:7e:46:af:d3:30:fd:d1:cd:b9:c3:61:b8:
31:0d:42:9a:8c:f3:4f:87:2c:44:a1:34:61:e5:a3:
fd:73:b6:36:d6:59:24:8d:5a:78:1c:66:7d:86:e7:
70:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C1:7C:28:D6:05:D6:A2:1E:0F:C7:1B:E7:7A:05:54:4C:69:9F:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd70b16e-787d-3867-be7c-0cba11f8a743.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:c0:a7:ae:bb:8e:c2:72:54:14:ea:3c:da:4f:f5:f2:8e:80:
ac:bf:c1:cc:87:d2:a3:2b:2d:d4:41:67:9e:39:a6:88:d8:56:
6c:2b:82:a1:9a:1f:c0:40:73:5f:48:11:b2:bc:37:e5:49:f2:
c0:f2:35:8b:8b:5c:99:33:75:76:c5:72:de:8e:ef:38:a6:79:
e1:66:7b:e9:3e:9e:61:1b:0b:45:92:29:dd:f6:be:71:d3:59:
85:69:9c:05:d1:9e:9a:a2:5a:76:1a:bf:37:05:88:60:f5:7e:
f2:b7:bb:82:14:19:84:4f:c8:51:90:9e:d5:23:43:88:3d:ae:
18:53:ca:2a:86:af:5c:a9:5a:fd:ad:00:0c:79:22:dd:6e:12:
dc:4d:92:cd:8c:3e:45:85:88:29:83:52:57:f6:d0:d3:8d:5f:
a6:ac:50:9e:54:d5:93:69:7b:43:a2:c2:cb:9e:83:e2:ad:22:
65:95:44:16:aa:58:6e:ee:77:5f:09:5b:0c:79:a5:17:6b:cd:
95:42:ab:11:a7:ef:a9:39:f8:7b:7d:e1:e9:0d:b7:a1:fe:76:
96:c0:4b:b2:5a:e6:fd:24:cb:78:19:74:82:55:8e:a5:da:ae:
12:6e:ec:3a:72:c9:3b:b8:22:84:81:0b:4f:7f:ac:02:8a:c8:
5e:24:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:08:23 2025 by rpki-client