Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7ffe9cc-38b8-3176-8081-dec087380ef2.roa
File: d7ffe9cc-38b8-3176-8081-dec087380ef2.roa (raw, json)
Hash identifier: mSd5T0TPOYfoZ/L8E7CTsV0upwdLAgXTebV6A8Yd8Ik=
Subject key identifier: 29:10:36:B8:73:50:1A:24:98:1E:6B:9E:4A:EF:4B:A8:07:70:FE:11
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DCC250648B8CD1BABEA316750
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7ffe9cc-38b8-3176-8081-dec087380ef2.roa
Signing time: Wed 04 May 2022 12:00:00 +0000
ROA not before: Wed 04 May 2022 12:00:00 +0000
ROA not after: Thu 09 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.23.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cc:25:06:48:b8:cd:1b:ab:ea:31:67:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 4 12:00:00 2022 GMT
Not After : Jun 9 04:00:00 2022 GMT
Subject: CN=a076337b-1cb0-4cde-a1fe-651bbb22e5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:31:b6:47:1a:24:b7:d9:47:c1:7e:e6:c9:
39:2e:c7:e3:49:f4:ff:25:65:03:5b:01:06:6b:2b:
2d:bc:62:c2:47:d4:51:2b:6c:75:a2:d8:5a:da:e1:
b6:10:cc:1d:76:2d:49:5b:44:d3:96:01:5d:0b:42:
00:66:93:d7:52:35:a2:f6:8f:9d:80:7f:5f:37:e4:
2b:5b:1d:8e:63:ab:af:e4:1a:e4:36:bc:ed:f2:f0:
a9:26:cc:14:af:ac:8d:47:05:ae:d9:5c:b2:c5:46:
43:70:08:20:06:32:42:8d:58:87:b6:a1:23:0e:90:
c8:f3:14:b7:38:87:2e:87:10:63:4a:f9:c2:a4:e8:
79:e1:08:29:16:9a:56:ff:6b:34:8e:ab:24:31:f9:
1e:4b:10:44:2b:e9:da:be:d6:10:40:07:a6:b6:a2:
bc:c9:f6:6f:78:59:c0:51:8f:41:a3:cc:77:9a:2c:
be:44:a9:b1:12:dd:14:71:5d:ff:a7:24:0d:37:fe:
39:64:54:64:56:22:bd:35:51:d6:3f:0c:40:9a:9a:
a4:d5:c4:96:5f:c1:3e:21:1b:9c:95:1e:bd:40:bf:
4c:90:0f:9f:d5:55:8b:52:f9:08:14:f2:82:36:b8:
9d:cd:12:07:3f:45:db:0d:37:23:ca:ce:56:30:83:
15:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:10:36:B8:73:50:1A:24:98:1E:6B:9E:4A:EF:4B:A8:07:70:FE:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7ffe9cc-38b8-3176-8081-dec087380ef2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.23.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:1c:64:1a:a0:eb:44:b6:ac:59:8b:0a:29:6b:a6:c1:19:6c:
b7:1c:94:29:f4:86:4d:97:6e:04:65:2f:fc:cb:a7:fa:d4:ec:
c1:ef:5d:4e:76:41:65:ed:99:c3:78:0d:cb:95:51:c1:f3:7c:
63:9e:05:63:85:6a:53:cf:14:45:4c:e2:ed:e6:50:52:76:c1:
ad:30:b1:19:5e:df:7d:d4:89:21:ce:bd:73:de:19:fe:e4:33:
dc:bd:81:d3:61:15:b5:87:b6:8d:93:38:c3:07:9c:f0:59:84:
fb:74:86:bf:53:89:93:3d:49:f1:87:84:39:f5:a9:25:c7:38:
50:73:d1:66:1b:ab:b6:c0:9a:cb:c8:e3:30:9a:ef:be:61:f9:
21:b9:f6:15:a2:96:d0:8d:c3:38:1c:79:55:29:b0:44:0a:b1:
05:53:db:86:7b:be:75:9f:8b:74:d0:24:85:b5:dd:16:eb:fb:
18:81:49:d5:49:51:7a:30:7f:91:5c:7d:90:c1:2c:48:e5:d6:
cd:e7:91:2a:c1:4c:71:35:ce:81:30:5e:36:d4:2e:fa:04:af:
09:25:e4:55:2d:ed:be:6e:4f:42:08:c0:af:5b:07:34:0f:e3:
d7:c1:d5:50:4b:af:b9:f6:22:5b:29:c5:7d:1d:5f:f1:67:04:
3c:f1:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:37 2025 by rpki-client