Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d956fef9-9987-38a9-9048-e2829e2608d7.roa
File: d956fef9-9987-38a9-9048-e2829e2608d7.roa (raw, json)
Hash identifier: MrfbX/yEGkyMFrlm22M1wGXLcnBZCauiWJYj3SUjKZg=
Subject key identifier: 63:17:36:77:25:84:CB:60:E0:97:38:73:99:2A:93:78:75:B7:BD:23
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CAC306F8910EC92F454115D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d956fef9-9987-38a9-9048-e2829e2608d7.roa
Signing time: Sat 22 Jan 2022 05:00:00 +0000
ROA not before: Sat 22 Jan 2022 05:00:00 +0000
ROA not after: Sat 26 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.28.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ac:30:6f:89:10:ec:92:f4:54:11:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 22 05:00:00 2022 GMT
Not After : Feb 26 05:00:00 2022 GMT
Subject: CN=eaa9acf4-6d1b-43a4-9630-f53180ee451a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2c:ba:ff:76:26:47:f2:f1:4c:5a:40:42:a1:
84:57:30:64:33:3e:0f:28:40:ca:cf:44:5c:49:81:
f1:9b:c2:ba:fb:75:71:ab:ae:e9:95:0e:4e:14:66:
95:f4:ff:1f:13:fd:ee:df:00:c0:c0:98:ae:0e:88:
d9:ab:6f:68:7c:af:73:4d:e4:da:62:79:9e:47:b0:
98:25:7a:b0:7b:22:af:34:79:8f:b5:ea:15:5a:49:
a1:4e:3e:7e:19:2d:4c:c7:9e:be:8f:f1:88:b7:50:
da:98:f3:f9:92:d2:a3:36:7d:f0:7f:da:e6:13:fd:
eb:7f:a0:ed:06:7d:e5:7a:34:16:c4:9a:af:36:ec:
74:83:d5:3e:b1:bf:df:fe:0b:be:6b:ef:4f:35:16:
8a:28:a3:b7:2f:06:83:56:63:ed:05:d5:62:d4:d7:
c7:76:a2:31:8b:1d:98:17:45:cc:e2:96:ab:ac:39:
87:11:e5:62:97:de:0c:1f:07:1a:f8:0a:d3:11:19:
1b:a1:4f:f1:d2:89:00:a3:87:63:9e:94:86:14:0a:
8b:7b:1f:9d:b4:00:d9:2f:61:3f:8f:e9:4f:58:8a:
f7:74:41:0b:27:ea:c7:04:0a:a7:62:7a:1e:c6:f7:
ec:ec:cd:48:8d:61:57:9f:73:fb:2c:58:97:ca:f5:
50:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:17:36:77:25:84:CB:60:E0:97:38:73:99:2A:93:78:75:B7:BD:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d956fef9-9987-38a9-9048-e2829e2608d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.28.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:a3:91:cd:81:32:f3:a9:15:9e:03:d9:61:f8:74:a7:cc:1d:
89:a6:3e:7b:da:e6:89:f3:f5:27:60:8c:df:55:5d:35:cc:e3:
91:a1:75:02:b8:95:ec:63:8f:bd:0c:d8:25:41:88:c8:12:f2:
be:8a:61:0f:b7:21:94:9d:5d:cc:8e:58:1f:58:6a:df:eb:7e:
c9:aa:dc:fb:38:57:01:bc:55:b1:4a:b0:c5:04:2b:20:65:45:
ea:a8:7a:90:5b:b9:4e:2e:ab:e6:69:4d:be:5f:f8:f6:39:a4:
25:68:9e:de:a6:3a:66:f4:63:e5:1e:44:f6:e4:8b:5d:de:59:
5a:de:a2:4e:f7:02:a7:56:10:74:04:f7:da:43:02:19:7a:98:
9f:59:46:de:9c:ad:0f:ed:ba:c3:06:13:ef:59:65:e0:0d:a2:
62:a2:98:44:f9:11:da:d8:45:26:06:65:3e:80:f8:d2:77:5b:
84:da:99:cc:74:08:bd:a3:23:4a:90:7b:0e:8c:49:23:8a:83:
06:8c:20:b7:8f:74:25:0a:68:6e:5d:ad:e9:0f:55:f8:3a:be:
7c:09:08:81:7e:a0:8b:1b:93:ef:09:8c:8a:9a:0c:ec:fc:0d:
f8:15:47:60:eb:37:1e:8a:39:ad:7c:e4:57:4b:10:f5:58:2d:
8e:3a:11:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:27 2025 by rpki-client