Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da70ba5d-b94d-3ad7-bbe4-c9afaa13dfac.roa
File: da70ba5d-b94d-3ad7-bbe4-c9afaa13dfac.roa (raw, json)
Hash identifier: ErT4Om9sn5YZp/KQ5d0HmBRUo7qFMLKfOuqx6E3oyA0=
Subject key identifier: 99:67:12:97:3A:08:52:7D:0E:B4:56:D9:42:91:45:6D:BC:05:7C:08
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E764B65D89FEB09865AD00BE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da70ba5d-b94d-3ad7-bbe4-c9afaa13dfac.roa
Signing time: Mon 04 Jul 2022 12:00:00 +0000
ROA not before: Mon 04 Jul 2022 12:00:00 +0000
ROA not after: Tue 09 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.50.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:76:4b:65:d8:9f:eb:09:86:5a:d0:0b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 4 12:00:00 2022 GMT
Not After : Aug 9 04:00:00 2022 GMT
Subject: CN=37315a41-7507-4cda-bf08-56d890ffdf03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:9e:49:bf:ad:b5:36:79:83:7c:b4:8b:5e:
7c:02:6b:5c:f1:80:6e:98:26:b6:a0:e0:1b:1c:dc:
b4:23:0e:7d:f8:ff:41:7e:82:5c:18:c5:45:26:a5:
71:38:07:de:10:3c:f8:0c:db:8f:17:11:02:68:77:
6f:91:14:be:3b:25:11:93:de:37:42:c3:e9:73:76:
20:40:f2:9a:22:c1:ec:46:ff:92:bb:4c:a1:fc:9f:
ff:7d:c5:d2:8d:7c:3a:2d:9a:af:23:54:48:59:d1:
e9:23:49:88:c4:1a:e8:80:2c:1a:76:3e:08:2d:06:
30:00:35:b1:41:9c:29:40:35:f8:77:82:c7:e4:fb:
60:f5:7b:ea:db:d0:9d:92:42:6f:af:4f:57:bb:ae:
9b:e8:cf:7e:f5:23:77:76:46:dd:70:b7:6c:b3:5d:
03:70:0b:a5:17:2a:72:17:75:27:5d:ba:e1:30:18:
37:9e:e0:3a:64:44:b6:5a:b5:bd:d6:d0:57:19:ef:
96:46:11:77:62:27:c7:bd:2b:8d:b1:9f:ab:25:5c:
b2:e9:12:ef:5e:53:09:8e:25:4e:b9:f5:d7:04:8e:
72:f5:03:96:42:25:38:59:7a:df:c2:95:69:4d:e8:
f5:45:68:5e:75:6b:d2:4a:63:74:26:7e:d2:31:4b:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:67:12:97:3A:08:52:7D:0E:B4:56:D9:42:91:45:6D:BC:05:7C:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da70ba5d-b94d-3ad7-bbe4-c9afaa13dfac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.50.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:78:c2:0b:5c:ad:de:d6:f9:9f:d5:3a:28:12:8e:ed:be:f3:
76:b6:ad:33:c6:f2:eb:5c:39:ed:0b:74:30:dc:2b:ed:3d:8c:
50:d0:81:0e:45:4b:2a:f9:b8:dc:b4:5f:db:90:8a:c0:df:df:
e6:1a:8c:11:2c:01:bb:0e:76:18:e2:e6:a8:86:4b:c9:db:e0:
7c:a8:b7:74:9d:6f:e0:4e:4c:dc:02:b9:49:a3:3c:ce:6c:dd:
fa:01:43:c7:82:46:a4:d1:38:e1:92:1d:79:9f:d7:35:40:f0:
fd:4d:74:3f:d9:66:b0:0b:02:0d:27:77:b6:23:24:f1:e0:b6:
85:05:ac:65:2e:60:15:8d:bc:b4:95:89:7e:92:23:fe:28:04:
7a:82:ea:58:28:f0:a6:9a:ea:7e:34:c3:2e:53:01:46:4b:c0:
e2:0b:36:e3:f1:89:d8:f9:f8:bf:e8:ba:54:d4:79:be:50:ec:
64:7b:c5:93:12:30:85:3b:43:b4:a2:f4:c6:07:92:48:9e:c2:
de:b5:01:c6:8e:d5:5d:ad:c7:5b:d8:72:b5:78:77:07:dc:7a:
0b:6a:93:68:3f:8c:f3:c9:e4:ee:e0:91:f6:ab:67:10:01:67:
87:5a:b9:13:15:c0:b5:df:d3:9d:da:a2:a2:99:20:5a:a7:25:
b0:8e:84:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:36:41 2025 by rpki-client