Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d640bce3-46fd-338a-9581-739c9f40e561.roa
File: d640bce3-46fd-338a-9581-739c9f40e561.roa (raw, json)
Hash identifier: VD2+mbG4lrkTWMpHZAI0KN1QQSVp3tqvBaMSdljEEu0=
Subject key identifier: B2:72:4D:2D:5A:98:80:43:53:1C:BA:54:A0:B2:CE:CF:DC:0B:F1:90
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBCCB340A3CCDC413CD387D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d640bce3-46fd-338a-9581-739c9f40e561.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.124.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:cb:34:0a:3c:cd:c4:13:cd:38:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=128263fb-afaf-4543-860e-5c0eff4e7f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:59:81:80:21:13:16:06:08:e1:30:9b:33:85:
ab:b2:31:90:bd:e2:f7:8e:9d:35:07:fa:5d:ac:08:
ab:10:32:24:6a:69:02:9c:0a:de:c3:a5:e1:14:70:
a7:7c:ac:66:67:0e:77:93:82:b0:56:3c:a4:a9:80:
4d:79:f1:fb:81:c3:c7:4a:4b:ec:57:70:d2:9b:60:
26:f3:f1:d9:fd:2c:cf:88:62:ee:19:d5:24:57:03:
1d:bf:ba:fc:0f:13:b2:f5:f2:db:b3:f3:1c:1f:ea:
5e:70:c0:c5:89:90:e3:66:cf:2d:31:68:8d:aa:75:
2b:1e:1d:2d:80:7c:c7:55:f1:35:ef:44:35:87:a0:
4b:bc:4c:06:5a:5f:46:1a:71:f4:51:1e:65:a0:3c:
cf:65:30:1a:28:5f:aa:da:6f:60:cd:f0:8f:ed:e9:
ce:c4:ca:2b:20:1f:72:23:d0:cb:c9:c0:5a:6e:0d:
60:d6:34:1e:ee:b7:a5:ad:65:23:de:da:32:6a:cc:
83:84:cb:dc:38:22:57:18:81:f4:62:f1:b9:d0:98:
3b:7a:b9:d0:26:8c:6c:1b:87:26:ac:96:1d:8c:8b:
0c:21:bb:68:69:46:2f:31:be:24:5e:0c:14:3c:85:
46:07:5c:10:dd:15:78:f3:ef:3e:d5:f5:75:a3:d3:
75:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:72:4D:2D:5A:98:80:43:53:1C:BA:54:A0:B2:CE:CF:DC:0B:F1:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d640bce3-46fd-338a-9581-739c9f40e561.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.124.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:00:63:80:5e:77:54:75:23:f7:f6:6e:b2:d4:90:11:b0:3c:
e2:75:e3:27:77:7f:e5:f6:0e:4a:c8:56:04:a1:4f:12:71:5a:
0d:68:a7:db:a1:d2:26:a4:c6:c4:65:cc:71:58:92:8f:6d:2b:
90:d8:e1:03:85:c2:86:0b:41:20:c8:83:70:bf:8b:5a:64:83:
e2:ef:9a:81:17:8e:24:07:5c:8a:ec:ff:7d:c9:43:60:09:8d:
8f:49:49:fd:9c:ab:d2:5b:0a:80:c9:98:fa:d4:11:8c:b4:c2:
50:e4:54:36:59:12:16:e7:5c:8a:d9:94:9a:71:2f:0c:05:f2:
8e:2f:42:0d:bc:6f:37:8e:bf:b5:c2:41:91:33:86:36:51:50:
01:84:f4:dd:ef:6b:0b:01:eb:48:ee:2c:e3:42:a6:b9:6a:dc:
89:48:6a:a2:54:5e:38:76:53:d7:66:b2:65:c8:e8:78:18:83:
47:76:d5:1d:92:25:06:28:89:a7:32:ba:67:54:6b:3d:3c:ef:
b2:fc:ac:4c:c0:92:c9:28:3f:a3:2e:81:b9:92:86:d8:6a:2e:
f0:35:6f:22:95:42:f2:04:b2:d7:62:a3:d9:10:fe:fa:c5:6c:
d1:5d:a2:65:04:78:cd:78:4d:a8:42:51:2a:ce:6d:79:ed:a8:
54:7c:94:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:33 2025 by rpki-client