Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d991c509-7901-3264-8bc5-8075d5ee9814.roa
File: d991c509-7901-3264-8bc5-8075d5ee9814.roa (raw, json)
Hash identifier: oCdCLjWPwCldpmSF2I70jUxxm0qm6BPgT0CAhv8Ch0Q=
Subject key identifier: A6:72:23:C3:04:01:64:28:A5:A4:9E:C5:2F:89:68:E1:95:4E:AD:E9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6BDD32507659B144B716C480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d991c509-7901-3264-8bc5-8075d5ee9814.roa
Signing time: Thu 30 Dec 2021 05:00:00 +0000
ROA not before: Thu 30 Dec 2021 05:00:00 +0000
ROA not after: Thu 03 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.121.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6b:dd:32:50:76:59:b1:44:b7:16:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 30 05:00:00 2021 GMT
Not After : Feb 3 05:00:00 2022 GMT
Subject: CN=bd7ccc8a-449b-4697-aa8b-b8d7b7192dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:53:7c:26:28:da:3b:25:d7:25:fa:03:68:
bb:45:da:40:02:71:a5:4b:19:c3:dd:f8:1e:29:9a:
b2:be:d2:73:15:06:74:a6:6f:8a:a8:5d:5e:65:a3:
a5:4d:b8:44:2e:c0:2a:3b:76:0c:e5:36:85:8e:69:
99:a6:7e:f4:a2:bb:67:f1:d2:64:5c:17:b4:7b:43:
fd:57:fd:a9:98:5c:d6:eb:bd:8f:93:2b:a9:f7:51:
03:c5:01:33:a9:b0:28:b1:9b:39:10:3e:18:bb:05:
2f:86:6c:c0:90:9d:4b:2e:c3:88:c0:24:2b:30:de:
87:5b:2c:dd:09:f9:17:05:42:3a:da:84:d6:e1:ef:
63:da:67:1a:4b:33:5c:d1:53:47:24:fd:34:f4:14:
c9:b9:75:1a:25:74:71:ee:20:86:ab:b1:20:2c:da:
6b:4c:e4:33:66:d1:e4:f9:18:d2:b2:c8:36:fe:09:
54:47:77:96:a4:e3:e3:27:25:f6:8f:b2:83:52:6c:
95:4d:89:85:1f:59:09:c2:46:54:98:e4:81:a1:4e:
dc:26:56:c4:7a:69:c3:36:cf:0e:28:6d:29:48:8c:
83:05:86:be:69:92:bf:c6:72:d1:ed:81:19:30:44:
61:b6:b1:b0:2f:40:5b:c9:6d:15:67:9d:40:b9:4b:
04:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:72:23:C3:04:01:64:28:A5:A4:9E:C5:2F:89:68:E1:95:4E:AD:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d991c509-7901-3264-8bc5-8075d5ee9814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.121.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:0a:15:ef:e1:f7:f5:86:62:9b:a8:9e:1b:df:dd:68:76:98:
5d:42:81:01:f4:d8:0d:a8:cf:5d:39:6b:16:29:9c:35:40:37:
58:16:42:5b:8e:70:01:54:f3:2f:0a:93:3c:06:8a:a7:44:16:
b9:c7:1b:77:e6:20:57:eb:97:e1:39:ee:b2:ba:1c:21:2d:cb:
19:a5:bd:10:f4:90:4a:f2:9c:c8:62:a9:91:f0:20:2b:f8:60:
28:f5:04:53:de:ad:f8:23:1b:d1:bb:f0:6f:0d:7c:83:6e:9c:
8d:02:b3:50:6d:6a:e2:2c:bf:42:26:0b:ac:ee:d0:c9:8e:a4:
0d:7d:31:a6:7a:53:60:85:40:87:3a:de:ac:7e:3b:04:0c:a9:
cd:40:ac:73:81:de:cb:15:ee:7f:34:00:bf:5f:b8:07:d5:65:
5a:6e:db:dd:0e:25:a6:4c:0d:c1:27:11:98:49:c0:d1:ca:06:
07:9d:60:00:95:82:e0:3b:15:e6:6d:b4:e9:64:1c:72:93:97:
85:9d:9e:8f:75:cc:e0:f8:e7:f5:22:0b:cb:2d:c6:e2:10:ce:
2d:09:08:99:11:8d:72:5c:37:eb:aa:1d:2e:d3:de:92:aa:95:
25:e9:87:f1:6e:59:15:4c:17:05:7d:e0:4e:ef:f9:3b:2d:36:
0f:7c:8a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:31 2025 by rpki-client