Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4fe5087-d57e-36d7-bac3-2ef4840fe280.roa
File: d4fe5087-d57e-36d7-bac3-2ef4840fe280.roa (raw, json)
Hash identifier: krshrRcGmMxONHc41uf5plLuiIj3PEuqj0gjE2UETW8=
Subject key identifier: 9F:43:7B:8B:31:1C:AA:9A:51:C2:C0:6D:D2:DA:EA:21:F1:2F:52:A3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2F5F63123BDCC5A6BAC67900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4fe5087-d57e-36d7-bac3-2ef4840fe280.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.29.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:5f:63:12:3b:dc:c5:a6:ba:c6:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=bc7edd11-4dbc-47eb-9595-3d935256cd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a9:85:59:d4:ff:be:d6:f9:7f:b6:07:5e:ee:
be:1c:7a:b2:3d:ba:6a:50:02:67:44:94:36:73:a2:
aa:6a:5c:dc:06:db:d0:64:5c:4f:6c:3d:25:96:2c:
2c:b6:6a:5c:83:7e:2f:e6:a6:cc:12:90:ff:6e:b2:
f0:5c:d0:72:a0:31:b9:ab:b5:ae:f7:86:5a:12:ad:
d5:ec:15:bb:50:f8:5a:de:4a:a3:3b:e8:59:cf:49:
b3:f5:af:b5:7a:86:c7:8d:60:98:f6:bf:e7:26:51:
ae:3e:db:ae:d5:6e:71:85:92:12:04:67:98:e2:1e:
59:a3:7b:01:3f:8f:16:af:36:d9:eb:70:6f:19:40:
bb:8d:2c:9a:0c:2e:c1:5d:38:1d:cb:ae:8d:7e:40:
58:c7:6b:e1:02:c4:02:ed:c9:c9:43:03:0b:d4:72:
bb:ce:e0:93:7a:4e:6a:b4:62:1b:83:39:2a:a7:de:
6a:e1:f7:27:2e:e7:33:21:e3:b2:70:a6:46:b1:1b:
c8:ba:50:7e:14:93:51:6a:19:d7:48:a5:1b:a9:b9:
f4:3d:ec:70:54:ca:45:a4:10:87:e4:e9:a4:ce:41:
3e:e4:db:39:e1:e7:61:37:2a:cf:b8:6b:31:be:6a:
78:9b:2e:f6:78:41:c0:e0:30:eb:c8:3f:92:32:89:
3c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:43:7B:8B:31:1C:AA:9A:51:C2:C0:6D:D2:DA:EA:21:F1:2F:52:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4fe5087-d57e-36d7-bac3-2ef4840fe280.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.29.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:1b:0f:35:63:08:18:65:2e:c7:94:e3:76:ba:eb:16:3b:c1:
dc:f8:e3:12:7b:8d:03:8f:2e:cc:db:6c:78:fe:c0:6a:9c:81:
e6:81:35:33:7d:1c:27:a4:94:57:59:df:dd:fe:d8:71:85:15:
28:d0:78:3e:b7:2c:e9:20:52:90:ad:d9:dd:84:92:26:d7:84:
cd:4e:e2:92:10:75:40:21:d0:ba:ee:f2:2b:4e:db:c4:39:de:
2b:64:e3:40:9f:84:b4:1d:c6:e3:4b:83:39:44:c3:b6:b6:8e:
cd:75:1b:aa:95:cf:1a:57:28:a0:2b:b5:c4:c8:a2:a9:fa:5a:
b6:64:f3:dd:18:a6:5a:20:57:ea:e2:60:a2:8c:b8:fa:61:6e:
ee:0c:dc:f6:6a:93:20:28:0e:79:e2:a7:21:60:11:34:19:0f:
3e:c5:2c:32:4f:0e:9b:e9:54:a1:f5:99:76:06:39:5b:c1:0e:
6e:94:9f:20:3b:fb:4b:9c:fd:6e:47:05:2e:78:9f:39:5b:1b:
ea:18:0d:10:7f:5c:a6:2d:11:c0:9f:67:26:b8:f8:c6:e3:58:
0a:be:81:dd:37:37:ef:ba:05:c3:15:d7:86:4e:40:14:e8:dd:
66:5c:90:47:b0:f7:b7:82:f2:55:83:f2:cc:0d:78:5d:f5:40:
59:15:0a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:52:20 2025 by rpki-client