Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dac9360b-bec7-3166-81c1-77e598362e9b.roa
File: dac9360b-bec7-3166-81c1-77e598362e9b.roa (raw, json)
Hash identifier: rD4y6gI5Ar5BMVfIaasospL2fc/tvam1Zk9mxogVJ88=
Subject key identifier: 01:26:70:B7:68:F1:0F:4C:EC:C0:3E:F4:52:B1:5E:BA:E2:1C:77:00
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D7FD633D85B93F81038E61202
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dac9360b-bec7-3166-81c1-77e598362e9b.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Thu 12 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.89.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7f:d6:33:d8:5b:93:f8:10:38:e6:12:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : May 12 04:00:00 2022 GMT
Subject: CN=8473d2e0-de2c-4775-a8be-a608b6749f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a6:2e:cc:b8:11:e8:59:54:4e:45:bb:ef:b5:
c8:ba:cc:93:1a:0f:b8:57:d0:4e:d1:2a:57:82:d3:
99:b2:54:37:0e:62:6f:11:f4:15:d2:d2:06:fa:38:
32:d9:39:62:9e:c0:0b:5f:b8:3f:98:e9:06:fa:1d:
4b:4d:25:20:3f:ee:63:dc:54:4b:70:d1:ac:3f:5f:
5b:75:58:5a:82:3b:28:b6:28:ec:19:de:93:68:f6:
39:c2:1d:c9:1d:70:ff:f7:32:5d:75:c4:cf:72:d5:
e2:0e:b8:fe:76:bf:03:e4:6e:12:e5:81:31:42:dd:
17:c9:fb:bd:96:0f:a1:72:ef:85:77:24:52:66:0c:
3b:4b:56:39:c8:ea:3b:b1:d3:33:ba:ca:6c:74:60:
5b:1e:3c:3e:c7:35:5f:2a:07:12:3b:44:2d:95:90:
ad:51:68:7a:58:c3:dd:89:b3:28:03:70:93:c4:e9:
89:44:ac:9c:7b:fa:5c:b1:90:9a:6b:d6:b5:19:88:
6e:81:29:1d:88:e8:ff:ff:7b:29:5f:a0:c4:fa:10:
a8:62:3b:8a:91:c4:54:03:1f:f6:f1:40:7b:48:ba:
8b:9d:10:c7:df:41:6f:ef:d1:ac:fc:43:27:77:2a:
cd:35:01:12:03:51:e2:84:21:98:75:88:cb:a7:32:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:26:70:B7:68:F1:0F:4C:EC:C0:3E:F4:52:B1:5E:BA:E2:1C:77:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dac9360b-bec7-3166-81c1-77e598362e9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:27:db:82:cc:92:46:f1:90:79:f9:65:1a:db:31:44:5d:be:
99:3b:9a:fd:95:f7:94:d1:54:43:03:71:68:d2:56:56:81:e2:
9e:13:f0:62:de:42:b3:57:5c:11:1e:72:33:7e:73:c8:a0:a9:
94:88:04:68:3c:b8:54:43:ac:e1:f7:21:be:a5:e8:14:0a:a1:
88:49:d5:8c:de:e5:2b:e5:0d:e7:c2:73:d0:e3:07:7e:0d:94:
81:c1:47:7f:72:96:51:e1:72:91:00:24:c8:04:81:b1:67:86:
a7:0b:a0:c4:83:90:62:01:6e:51:f0:0f:f4:15:4f:0f:a3:84:
a6:09:c9:a5:1f:34:38:a9:84:a4:04:fe:f0:3b:57:1e:6a:1b:
ce:56:75:06:89:c1:c7:bb:7c:6e:ce:e7:fa:af:71:53:68:08:
10:b2:a0:90:10:1d:4d:4c:45:90:fb:ce:21:4e:1d:cf:bb:6b:
95:f4:15:94:0f:45:9d:22:ac:73:c2:99:53:06:25:9b:c6:06:
45:9f:cc:da:0d:3c:c6:2b:a5:04:ed:18:c1:91:be:d0:86:18:
4f:3f:0b:a5:fa:00:cd:99:77:5a:c6:a3:98:95:9c:cd:1e:ed:
26:bc:25:83:2b:34:79:a5:7b:15:d6:c6:11:96:7a:01:f3:25:
86:bb:18:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:44 2025 by rpki-client