Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d85e1301-5da1-368a-b052-25937a43944e.roa
File: d85e1301-5da1-368a-b052-25937a43944e.roa (raw, json)
Hash identifier: ZYdk2SbKHdmDWfMy5oshCL1fZgCtXWrq2RxwGEM8Pts=
Subject key identifier: 89:01:93:EE:43:71:CE:CA:C3:62:A8:6E:E2:1B:BD:A0:D2:75:F9:92
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CEF30B22E28E26B005458E180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d85e1301-5da1-368a-b052-25937a43944e.roa
Signing time: Tue 15 Feb 2022 05:00:00 +0000
ROA not before: Tue 15 Feb 2022 05:00:00 +0000
ROA not after: Tue 22 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.190.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ef:30:b2:2e:28:e2:6b:00:54:58:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 15 05:00:00 2022 GMT
Not After : Mar 22 04:00:00 2022 GMT
Subject: CN=376c70ed-ffe8-450e-9035-e0ea29ce3a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:aa:d2:61:9a:45:86:b3:08:8a:27:23:fa:
73:83:f8:ed:9d:3c:9a:9b:76:a1:dc:67:b3:68:6f:
88:b4:5b:70:65:4d:0b:bc:6f:61:cd:d6:1a:b9:04:
80:74:2a:45:c3:85:0b:9f:ef:16:a0:ee:ee:2d:e1:
da:0a:af:c3:18:6e:a2:37:b5:96:f1:eb:c6:61:8b:
88:1f:21:0a:e2:d7:4c:1b:25:e1:e4:6a:94:a8:1b:
c7:74:dd:45:ba:dc:e9:86:81:22:dc:91:e6:83:21:
d7:27:7f:83:43:7d:d1:5f:ec:61:27:fb:be:91:33:
94:41:e5:09:58:83:a6:4f:1d:95:fe:4e:9f:04:ae:
a5:1b:1a:eb:c9:fe:cc:54:71:bf:8c:6e:f2:7d:a8:
13:65:47:24:c5:6f:d1:c3:7d:5b:ec:d9:10:59:d7:
f7:76:30:34:e2:df:91:97:27:bf:bc:ef:53:cd:8f:
f0:39:0c:c3:ec:32:fa:c8:be:76:1e:d1:63:80:a2:
c8:85:8e:00:91:0d:66:83:f0:a1:6e:54:31:19:bb:
65:ba:c0:fe:e8:84:eb:49:6c:79:d9:a5:4f:e4:49:
13:0e:f6:58:f1:b5:05:e5:14:cb:5d:7b:d8:2d:ca:
74:98:d0:2f:a1:ee:8c:8d:11:26:01:ed:2f:aa:ac:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:01:93:EE:43:71:CE:CA:C3:62:A8:6E:E2:1B:BD:A0:D2:75:F9:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d85e1301-5da1-368a-b052-25937a43944e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.190.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:4e:d6:53:4e:2e:68:c1:7a:43:8f:6b:eb:25:95:22:d6:14:
1a:d4:b5:24:fc:95:bc:4b:38:f9:bf:4a:e2:55:6d:6f:23:6c:
96:c6:b7:82:ad:2f:d7:40:36:59:b2:2a:2a:f7:96:d7:65:2b:
f0:62:2c:33:12:29:c8:c1:fb:86:ab:d4:41:20:96:dc:e9:1d:
a9:64:b2:42:f9:a2:08:b3:9d:01:f0:af:38:ff:07:38:99:3c:
c2:99:2f:d6:fb:48:c1:64:a7:2c:d1:0c:37:30:11:bd:1b:cf:
fe:ee:e6:18:97:58:35:09:4e:38:2f:ae:75:ae:bb:41:e5:e1:
36:4f:d1:76:d6:06:5c:29:d3:e7:63:fe:36:65:58:df:7f:cc:
67:59:ad:d8:63:79:86:c1:24:8c:90:62:73:5b:2a:73:5e:00:
be:3e:85:7d:68:b4:a4:69:43:92:8b:14:16:94:cf:03:85:e2:
b0:92:e3:60:f3:15:44:0e:68:30:a5:26:fa:d0:07:30:c2:f2:
74:e5:3c:f5:ef:8a:c9:16:6a:24:b9:27:b7:a5:7e:c7:4f:af:
b8:8d:8c:30:af:30:76:2b:56:c7:06:0e:49:4c:d4:cc:80:19:
d4:9a:ef:26:c7:2c:b1:c1:4c:e9:b7:9e:1b:58:02:3a:e5:5b:
65:af:e3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:26 2025 by rpki-client