Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4e74b50-edfd-3bfe-8009-907126feacb6.roa
File: d4e74b50-edfd-3bfe-8009-907126feacb6.roa (raw, json)
Hash identifier: imlxDlI0g9Za0YZwhpc30KC4pGVcL5xisBdjuLIkeN0=
Subject key identifier: 8E:0A:52:06:76:A7:3D:AC:5D:22:75:57:6F:3A:0C:B9:F1:02:39:76
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DA6CDE94796762784716F1080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4e74b50-edfd-3bfe-8009-907126feacb6.roa
Signing time: Wed 20 Apr 2022 12:00:00 +0000
ROA not before: Wed 20 Apr 2022 12:00:00 +0000
ROA not after: Thu 26 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a6:cd:e9:47:96:76:27:84:71:6f:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 20 12:00:00 2022 GMT
Not After : May 26 04:00:00 2022 GMT
Subject: CN=c54a1a63-ae67-41f8-b997-9b8e51810f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3a:f5:5f:ee:a0:00:82:cd:fa:b8:74:44:fd:
44:a2:21:3e:16:3c:79:4e:26:82:3a:b6:39:55:e3:
9b:f8:2b:87:d6:8c:1b:3c:4d:78:20:de:78:f8:6f:
dc:45:c6:84:63:aa:22:2f:b0:bd:da:5c:9a:4e:5e:
12:11:32:22:84:ef:18:0d:22:35:f9:dc:02:69:00:
5e:f6:26:7d:90:2b:a1:65:45:9c:68:db:4d:08:ad:
0a:6c:35:be:68:68:a5:1e:20:09:ba:e5:08:45:cf:
09:87:95:c3:c1:aa:fc:61:93:fe:87:65:4c:85:18:
e3:bd:1d:a9:a2:73:e5:70:c4:cb:c3:d8:cc:12:79:
3a:eb:d2:ca:e7:d7:5a:d7:a7:fa:93:97:fb:06:be:
24:a5:9d:ba:69:57:f3:be:75:a9:24:0d:d6:a5:f3:
ee:19:25:38:5b:fe:1e:f7:df:04:69:e9:1d:c0:08:
53:43:c9:fe:70:19:93:2a:62:28:36:a5:38:48:17:
f3:2b:43:7d:59:70:d4:5c:f8:69:17:12:b8:ed:12:
b2:80:43:ec:63:de:2a:21:bf:8c:58:1e:36:88:7d:
60:f8:46:11:e8:ca:0a:00:cf:53:1f:ac:d8:20:81:
fa:43:79:85:32:82:50:6a:b3:16:a8:cc:44:32:bb:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0A:52:06:76:A7:3D:AC:5D:22:75:57:6F:3A:0C:B9:F1:02:39:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4e74b50-edfd-3bfe-8009-907126feacb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:05:26:e6:2d:92:7b:85:84:88:be:55:42:e7:eb:17:e4:90:
51:77:e7:9b:12:52:dd:67:24:77:7d:3e:45:38:fa:4e:21:f5:
46:80:24:82:d2:8e:f2:6f:04:36:e9:f8:80:0d:02:15:3c:bb:
6b:08:66:7a:1a:49:07:ab:28:a4:60:be:47:30:53:1b:9c:0e:
82:5a:07:15:36:1e:62:4d:60:5c:77:03:ba:02:70:68:aa:56:
8c:e8:e3:02:7b:6b:96:6d:3e:d6:6c:a0:cd:e8:af:16:2d:62:
d8:ba:fb:4e:a1:7c:4a:2f:cf:b7:32:06:c6:e7:b7:81:5f:f1:
5d:ab:e6:31:42:4d:29:ff:c2:74:33:e2:38:57:4f:b1:87:05:
49:ff:7c:e1:fe:f3:12:21:fc:9e:70:2a:05:9d:66:72:3e:52:
2d:1e:a3:bd:52:33:9c:aa:26:0e:91:f8:88:be:59:11:70:00:
89:83:46:cd:11:a0:0e:1d:ae:71:4c:0a:d4:e2:a8:1b:2c:a2:
0c:5b:27:bb:e6:a6:7a:ca:b5:26:ab:7f:98:3e:b0:ad:3f:5a:
bf:e7:2b:77:1c:4a:d2:c6:d9:98:f2:2b:57:28:61:13:dd:bd:
20:6e:d0:0b:7a:40:73:0b:8e:a9:eb:8a:2d:2b:b7:8a:ce:6c:
6b:c4:af:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:56:25 2025 by rpki-client