Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/def16821-d9a8-3941-8949-928ab4acc5e7.roa
File: def16821-d9a8-3941-8949-928ab4acc5e7.roa (raw, json)
Hash identifier: w6KiZF/IEG4gCSZH4gwBmj8088z4RE/dvXOQQs4zeHw=
Subject key identifier: B5:EF:85:17:44:03:48:F5:75:BE:0C:1D:9E:C5:1B:AC:32:2F:00:A3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3D6376D7C825F2D81FA8FFC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/def16821-d9a8-3941-8949-928ab4acc5e7.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 19 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3d:63:76:d7:c8:25:f2:d8:1f:a8:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Apr 19 04:00:00 2022 GMT
Subject: CN=d4b722d7-bbef-41a9-a67a-25451316b38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:fb:41:5b:7a:21:4e:98:65:45:e7:93:76:
61:b6:1b:a6:e7:55:46:f3:c1:f2:e6:ae:a6:d4:5a:
ed:96:31:aa:fc:56:fb:37:be:90:e4:a9:48:89:15:
3e:09:7c:a6:d7:3f:23:cb:4f:86:88:2b:c4:8e:07:
e6:68:bb:71:a2:33:4b:ae:84:e4:d1:6d:54:d9:60:
fc:47:a4:a5:21:9e:d9:67:9f:41:d6:d6:f5:80:a1:
36:59:79:69:8a:89:61:8e:b2:f6:e5:5d:c2:01:bd:
6b:be:7d:ff:fa:4e:90:48:2b:31:18:df:28:1a:6a:
6f:c2:42:ae:3a:66:9b:38:8a:1b:4e:7a:08:7e:d8:
96:dc:23:3c:e6:fa:96:ec:5a:51:d9:e1:80:f4:99:
e7:18:e3:a9:9c:ad:be:e2:2c:47:2f:fe:d6:10:b2:
74:fa:3f:65:52:74:b2:97:a3:13:8d:24:96:ed:00:
4d:24:21:bd:16:fd:85:f4:10:39:4d:f4:3f:be:46:
ea:f1:ff:78:16:47:41:6e:8b:aa:15:10:6a:c5:d1:
b8:b6:d2:51:a6:da:97:6f:05:eb:82:c7:7c:f8:ce:
69:75:3f:db:c1:43:22:ca:4e:3c:bb:f9:dc:14:bb:
2d:78:a9:13:53:85:6c:0e:b8:93:12:d2:82:ca:61:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EF:85:17:44:03:48:F5:75:BE:0C:1D:9E:C5:1B:AC:32:2F:00:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/def16821-d9a8-3941-8949-928ab4acc5e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:c6:92:16:50:b9:cb:ac:51:b7:69:af:39:2d:3c:fa:b9:d9:
84:3b:c5:d8:ed:7e:b7:08:b4:bb:7d:3c:d0:2d:c5:da:0d:e6:
c9:25:ef:83:ad:64:ee:bf:9e:d1:a9:f7:e9:51:fa:14:71:b7:
d7:2e:41:07:07:d5:84:88:df:a9:95:8c:57:ef:62:ca:30:63:
fd:c9:64:8b:c3:63:ec:fb:a2:58:27:3d:57:57:44:d4:f8:97:
ce:72:f4:6d:94:cd:8f:26:e0:8b:ce:cd:b1:58:9e:44:9e:00:
34:9b:dd:62:54:86:40:f2:56:b6:14:f0:eb:01:a0:10:1e:74:
36:fc:50:ae:2f:dc:8f:e0:bb:eb:b5:82:f3:d8:b8:b2:0b:c9:
2d:0f:39:40:3c:6b:c0:f8:4c:33:82:01:a9:06:9d:13:98:ef:
4b:b6:15:3d:0a:d7:80:c5:ff:d3:d3:14:db:91:85:24:97:0c:
59:44:1f:cd:8f:5a:ef:cc:01:ba:3c:5b:02:0c:ac:e3:87:5e:
c6:6f:17:41:ac:1b:50:52:5c:f2:5a:7f:77:b7:67:ba:63:7f:
b8:dd:5a:0d:38:5e:91:f0:f3:8a:51:6f:cb:1c:e7:6e:56:6a:
03:bd:2e:11:08:ae:b3:9a:ba:1b:81:96:c0:15:02:c1:fe:e2:
c1:d9:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:26 2025 by rpki-client