Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d34cc981-d1c2-3e1c-b829-432df489263a.roa
File: d34cc981-d1c2-3e1c-b829-432df489263a.roa (raw, json)
Hash identifier: dOXRYZl6te1l15trV0Sw9KNLDUp8y5NFr5T67Yhk8Is=
Subject key identifier: 75:68:40:FE:D3:49:E2:DA:BF:4E:F9:D9:38:D4:EB:88:33:A5:C7:69
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F60F2319362F0B1C5C7F5FD3F
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d34cc981-d1c2-3e1c-b829-432df489263a.roa
Signing time: Mon 26 Sep 2022 19:36:08 +0000
ROA not before: Mon 26 Sep 2022 19:36:08 +0000
ROA not after: Tue 01 Nov 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:60:f2:31:93:62:f0:b1:c5:c7:f5:fd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 26 19:36:08 2022 GMT
Not After : Nov 1 04:00:00 2022 GMT
Subject: CN=8054a6a6-d288-4d13-85fb-f289dd3a9a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:cc:31:77:4f:c0:97:7f:c3:06:78:76:d9:
75:7f:16:1c:19:d7:21:94:00:49:be:16:a8:e6:9a:
1b:30:d8:a3:4d:3c:65:9f:05:b5:d4:32:f1:db:df:
1f:e6:c4:80:13:2d:7e:11:27:a0:43:d7:70:39:30:
94:a5:5c:d4:9f:e0:e5:bf:30:3c:fa:67:a0:07:31:
8c:92:b3:b6:18:33:7d:26:79:ca:2a:2f:de:88:ca:
2c:08:35:2d:6e:be:65:d5:90:91:97:71:57:b1:79:
78:f0:20:93:b9:d1:9d:82:8e:ef:d7:7c:4a:8b:49:
2e:4a:89:68:da:23:9b:7c:52:60:a8:1d:37:1f:fc:
c8:a7:c6:2e:0c:95:0c:9a:05:6f:59:90:71:17:54:
f7:f2:63:2f:37:85:2d:3a:7e:71:bf:cf:35:bc:25:
7b:21:42:65:0e:bb:0c:50:86:e6:63:3d:a7:32:64:
e3:85:14:79:2d:92:87:16:9c:37:ca:ed:05:92:6b:
9d:bb:2b:4b:dc:86:57:2a:33:63:a1:40:03:2f:ac:
78:7c:60:6f:ee:60:cb:7a:68:df:cd:82:d7:a8:e6:
bf:b9:e5:34:ad:73:25:9f:77:2b:40:10:42:1f:f3:
78:58:7c:06:fe:e8:6f:12:2a:e8:e1:9e:5e:55:9c:
5c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:68:40:FE:D3:49:E2:DA:BF:4E:F9:D9:38:D4:EB:88:33:A5:C7:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d34cc981-d1c2-3e1c-b829-432df489263a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:3d:92:cb:2e:f5:83:16:d4:84:59:f1:92:d1:b7:ee:68:8f:
46:a0:b3:da:00:da:ae:de:49:83:98:c6:c4:b0:88:d6:02:ff:
74:69:07:8b:f6:fe:0b:b8:e8:1b:a4:3b:f3:a4:e6:70:b2:41:
15:ab:88:fb:5a:68:b3:0a:f4:ec:a8:0b:51:c1:f3:ac:b5:1c:
19:15:4a:a3:22:49:ac:95:0d:88:f3:83:c7:08:a0:25:5d:d9:
c7:18:2c:bf:fc:28:03:6a:5b:21:21:3a:e5:ec:e3:1c:e0:23:
26:4b:18:08:a9:31:3c:fb:58:1d:24:7c:01:5f:f1:01:9b:b1:
55:f7:43:b1:5e:03:be:97:ff:b2:0a:f3:c7:25:eb:00:67:bb:
dc:8b:2c:64:9d:3b:16:83:a9:c3:bc:9c:24:b3:c8:49:f0:e9:
df:c6:c9:c5:fc:8e:3e:33:50:46:e1:86:f2:48:1a:da:c5:85:
99:5f:17:e8:c2:24:a4:0d:f9:cc:8a:b7:c4:56:6b:47:70:ad:
6c:28:b8:6c:83:bb:af:e1:72:2e:66:b1:e2:df:38:63:ef:9a:
e4:88:81:3c:e4:c1:07:27:2e:29:b5:79:56:2a:18:4f:29:60:
a3:eb:02:5a:bc:e4:d4:fc:5d:1d:c8:ce:e9:ea:b3:07:91:22:
e9:42:b0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:09 2025 by rpki-client