Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da678d8c-1455-3065-b78f-500068a50e57.roa
File: da678d8c-1455-3065-b78f-500068a50e57.roa (raw, json)
Hash identifier: nFFnW69ddpgC5weVrqixxoNCvJfYqyNzqz+iTQBlOk0=
Subject key identifier: 1B:67:34:9A:72:76:E7:68:2E:75:A4:81:D6:D4:F9:F5:78:88:57:DF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E7802C00902B437A0E4E43D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da678d8c-1455-3065-b78f-500068a50e57.roa
Signing time: Mon 04 Jul 2022 12:00:00 +0000
ROA not before: Mon 04 Jul 2022 12:00:00 +0000
ROA not after: Tue 09 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:78:02:c0:09:02:b4:37:a0:e4:e4:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 4 12:00:00 2022 GMT
Not After : Aug 9 04:00:00 2022 GMT
Subject: CN=4d821b43-4cb6-4d28-ad49-54993e70fd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:59:24:2d:33:cc:4c:48:9a:b3:ae:07:a3:
98:ea:78:3a:73:29:0b:79:96:c7:a3:9a:10:d0:0c:
34:0a:68:9e:25:c2:5b:b5:10:50:a4:b1:7b:e2:08:
80:2b:50:19:53:f8:3e:ea:54:a9:4c:b3:28:28:69:
48:ce:24:8d:79:cd:02:fc:f4:c6:63:ba:e6:fe:b3:
7b:14:83:14:0a:44:d8:2a:df:9f:7b:bd:49:72:4a:
2e:6d:1e:4c:bc:a3:45:53:33:38:9f:bb:8b:4b:7b:
ee:1f:aa:3b:a8:83:32:e6:f6:af:56:fa:48:62:4d:
13:b7:c0:4d:47:15:67:10:57:f7:31:cb:97:ec:0e:
3a:40:21:d5:00:1d:b5:2a:b4:a2:4c:ec:30:78:ff:
93:69:50:a2:56:a9:ae:26:fa:a7:48:22:db:08:75:
4e:ce:17:23:a4:d6:65:44:6e:42:86:3e:81:ab:2e:
0d:24:3d:7d:2d:f4:fd:ae:a7:74:57:d4:23:fd:09:
03:da:b1:a7:fb:dd:83:48:0d:14:65:57:60:d5:42:
52:4a:e3:f1:1f:1a:39:5b:27:74:95:17:8b:86:ad:
b6:ed:fe:30:7d:bf:7c:5d:cb:43:e2:e7:38:0c:e9:
6d:26:da:56:1e:83:17:2b:71:0e:4e:3e:1c:34:12:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:67:34:9A:72:76:E7:68:2E:75:A4:81:D6:D4:F9:F5:78:88:57:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da678d8c-1455-3065-b78f-500068a50e57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:87:b8:96:42:fd:4c:f3:e8:73:14:be:7e:59:ee:04:79:50:
e6:00:35:4a:80:a6:73:a2:80:cb:19:26:b3:b0:b4:09:91:9e:
94:b5:e9:a4:e3:b9:f0:8b:a1:84:96:39:82:6c:d8:2f:97:0b:
6b:76:dd:97:38:2a:60:5f:c2:52:a5:77:e6:59:4b:63:c5:b8:
11:67:e4:14:23:c4:87:a5:4b:29:9a:f1:f7:e4:79:03:d8:1f:
06:eb:ea:82:2d:ec:bf:cc:dc:1f:40:87:62:6e:40:7c:01:2c:
43:01:4c:7e:f1:78:64:a8:05:8c:8d:91:79:21:78:38:09:aa:
b3:a2:d7:19:c7:d2:22:8b:19:5c:b7:3e:ac:c4:8f:3f:35:c7:
e6:eb:3f:8a:f2:ff:b0:01:1f:c7:fb:0f:c4:20:8b:9c:de:5d:
b5:cf:8e:0a:b0:b5:c9:41:3f:6b:c5:ca:16:5b:20:a6:9a:5e:
91:3e:5e:25:f1:69:ce:fe:a4:70:46:41:3f:24:95:ab:d5:96:
be:ef:d3:23:28:b4:7f:32:84:5c:3f:26:26:75:56:e1:f3:1a:
6a:27:bd:3b:2c:65:b0:e2:bf:3d:28:68:f1:78:16:b7:82:68:
27:74:f3:8e:4b:86:70:f2:a3:55:53:ca:98:eb:bc:2d:cd:13:
7d:ef:b1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:19 2025 by rpki-client