Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf97dd67-d434-392b-a41a-4869deeee12a.roa
File: cf97dd67-d434-392b-a41a-4869deeee12a.roa (raw, json)
Hash identifier: s6OR516lxuXP5s+QABknu5I4dySAjcJH+loNQbqyQ9s=
Subject key identifier: 36:4C:C7:A9:2B:BE:57:CA:D5:A6:63:CD:3A:82:4E:D8:95:11:C5:A8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F560A7D57B20C7D53CC0F4040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf97dd67-d434-392b-a41a-4869deeee12a.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:56:0a:7d:57:b2:0c:7d:53:cc:0f:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=3a2bf25a-039a-4666-a61c-330765782a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:21:8a:d7:ce:43:12:d8:19:c0:55:18:b3:
48:50:aa:81:40:90:4a:43:9d:05:1a:12:bd:65:5f:
d7:27:03:b0:3d:d7:dc:cd:20:d9:67:39:67:61:b1:
fc:ce:be:17:20:b2:9f:a5:68:f5:5d:77:15:be:3c:
cf:83:b9:cd:b7:d8:03:b8:d1:c4:f7:d3:58:a7:8a:
ab:1e:98:a7:bf:ad:8d:d3:80:d6:b1:72:86:d2:c9:
30:7b:52:c0:0f:ed:d5:c5:fe:a6:84:11:da:5c:a4:
f4:0b:50:00:a8:4e:52:88:f8:88:37:d5:4a:ef:03:
f5:37:7d:c2:e8:9c:62:21:80:2d:8d:f3:72:6e:ab:
d5:09:3f:4c:9e:79:aa:0b:6a:cd:8e:16:5e:bc:b5:
a6:0a:31:6e:a5:10:27:2a:49:cd:5d:b7:6d:a6:15:
5d:df:c1:7b:db:3f:2a:4d:ca:81:93:88:4c:f7:0a:
b9:cb:f0:e6:79:39:6a:a6:4b:2b:f9:05:52:cd:fc:
65:2c:84:c9:89:cf:91:d0:e2:34:4f:59:3b:d9:d2:
40:25:f5:88:33:db:71:9a:4b:c7:67:20:be:33:ec:
de:b7:b9:d5:9e:d0:38:88:52:64:a6:b4:ed:90:e1:
12:d9:71:82:1b:2c:7d:88:71:92:26:e2:d8:57:f9:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4C:C7:A9:2B:BE:57:CA:D5:A6:63:CD:3A:82:4E:D8:95:11:C5:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf97dd67-d434-392b-a41a-4869deeee12a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.58.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:cd:ba:8f:76:1e:48:be:69:7e:58:1d:3e:fe:2e:99:24:d3:
62:6c:0a:ac:e4:e6:75:4c:aa:2f:ba:67:35:24:93:b1:f9:39:
9b:dc:a3:91:d9:e4:28:33:1c:00:ee:a2:97:3f:d0:db:fa:71:
94:79:ad:d5:2d:87:f9:56:97:97:02:6b:07:74:ea:ea:fa:e2:
97:26:c7:65:72:70:6f:f0:a7:51:c7:ef:a5:3a:03:fb:e3:ec:
a1:1f:8e:54:fd:14:4f:a2:fc:88:e5:1d:f8:e5:34:cc:46:ab:
98:a4:43:79:c7:f5:3b:f4:a3:1e:b5:9b:0a:f7:b4:03:99:73:
be:de:c1:3e:c0:a3:a6:00:45:45:22:4a:65:b8:2e:95:ef:3f:
e4:bf:ef:a6:9d:8c:d3:16:1f:31:27:ad:30:79:3c:ca:95:ef:
2e:9b:5f:ae:bd:f5:31:9b:b2:4f:ea:65:cf:cb:cd:c0:e9:29:
e5:fa:19:c8:08:39:1a:9f:3b:53:97:26:de:e2:9b:12:f2:7a:
e2:f7:2b:8f:d0:13:9f:87:58:e7:61:a9:d4:3f:bb:75:aa:9c:
40:ab:30:aa:81:c9:a7:a3:e0:91:7a:38:4a:07:44:53:fe:5d:
2e:a9:fb:92:aa:11:c5:6c:40:c5:60:8a:e7:e8:07:2a:aa:d4:
03:d6:b5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:57 2025 by rpki-client