Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ddc723dc-7ac3-321b-9ade-a6ab4bbb598e.roa
File: ddc723dc-7ac3-321b-9ade-a6ab4bbb598e.roa (raw, json)
Hash identifier: srO7csmqb5piii1LQGxWI76VZbxEEY/GZU0XeDVmxzY=
Subject key identifier: 6C:EC:28:8B:76:1A:F4:EC:27:F2:D2:F5:35:AC:A2:F1:07:6E:6A:04
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F1476AD332716BF5C9BE3C440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ddc723dc-7ac3-321b-9ade-a6ab4bbb598e.roa
Signing time: Tue 30 Aug 2022 20:45:07 +0000
ROA not before: Tue 30 Aug 2022 20:45:07 +0000
ROA not after: Tue 04 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:14:76:ad:33:27:16:bf:5c:9b:e3:c4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 30 20:45:07 2022 GMT
Not After : Oct 4 04:00:00 2022 GMT
Subject: CN=0de5f79e-c58f-4032-9bb8-b038611d7fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e1:7d:72:05:24:4c:78:c8:5f:32:1b:26:7f:
52:25:f8:b2:1c:e0:1e:56:9d:4f:9a:b6:35:aa:93:
83:67:46:4f:cd:04:27:22:11:b7:57:f8:07:db:34:
56:bf:cf:9f:9f:10:19:cb:49:13:aa:b6:8b:66:bc:
07:a8:05:98:9c:4f:47:27:5d:02:a9:48:34:b5:d0:
ce:19:52:c6:a4:83:5e:d6:e1:d5:36:e5:62:e5:fd:
18:7d:b5:4f:0d:d7:4a:3d:e2:b2:9b:f8:b9:68:9e:
71:c6:18:bd:aa:4f:f5:4a:25:b0:85:c7:81:f7:7b:
df:a1:1b:eb:e3:e2:0a:32:54:bf:60:5d:b2:6b:0f:
3b:c6:73:e7:34:98:66:46:c5:5f:ba:9e:7e:aa:5c:
1a:43:76:2e:03:88:fb:42:7c:d1:3a:4b:71:cf:56:
33:89:bd:13:ac:35:77:27:91:5d:64:4b:2e:77:47:
5c:5a:9a:f4:9b:31:d8:0b:3b:07:81:68:96:a4:b8:
8d:14:bd:64:25:a7:44:ba:08:13:e0:ca:16:b2:3f:
19:8d:b5:14:09:e1:b6:92:62:f3:7d:4c:de:ae:8a:
d6:fd:77:31:7f:33:5f:07:3e:27:b4:55:bb:a0:e8:
62:32:f0:a7:16:39:e5:bf:c4:3a:8b:c1:69:c5:1d:
16:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EC:28:8B:76:1A:F4:EC:27:F2:D2:F5:35:AC:A2:F1:07:6E:6A:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ddc723dc-7ac3-321b-9ade-a6ab4bbb598e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:6d:77:78:c6:31:11:e9:7f:73:a7:e1:13:6e:9d:16:e7:9e:
82:4c:26:53:61:33:32:f2:d8:fc:dc:87:10:3c:15:6b:a2:b8:
6f:55:84:59:94:9f:58:f6:cf:b1:31:18:15:11:34:2b:32:6d:
40:31:1d:bf:b0:49:35:ac:f9:f6:b5:fa:8e:e2:ee:1b:c3:3a:
aa:0a:27:21:55:f2:98:74:e2:d6:3b:20:35:ac:6c:6f:ad:7a:
ea:8b:58:ed:a7:e7:c6:77:a4:c3:61:c6:4d:ae:e1:1c:de:82:
14:42:6d:35:7e:d5:41:e9:89:fd:bd:45:94:9f:20:3f:22:29:
ca:b1:58:0c:ee:c5:7e:23:04:66:62:28:45:2d:2b:c9:83:d9:
fe:f5:58:c3:8a:2a:3e:5c:8d:c0:36:9c:2c:1c:43:7b:3a:fb:
77:a2:b8:b6:78:2b:2d:24:67:0e:9d:b5:d5:e7:0f:2d:0b:a2:
88:8c:9f:b5:24:5b:42:92:e3:21:5e:8b:90:0e:09:b0:d1:02:
78:63:51:ce:8e:2b:97:9e:f1:8e:d3:56:8b:7a:f2:26:fe:bb:
46:22:59:ba:53:23:99:10:a6:00:33:a6:1d:95:dc:10:7e:6f:
e3:a0:bc:a3:b1:75:dc:a5:18:32:e0:76:52:40:25:81:07:63:
3a:51:2e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:22 2025 by rpki-client