Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df65401b-6dfc-3632-9e18-0986a3f5ecb9.roa
File: df65401b-6dfc-3632-9e18-0986a3f5ecb9.roa (raw, json)
Hash identifier: ktToyXlbSERRxRyA46Z5zQDlX3t7eWva9krtCSatC7w=
Subject key identifier: 12:15:E0:AE:E0:50:D3:80:CB:91:7D:55:F3:30:43:71:E9:1E:61:77
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DB46A0A090A2957665AAA2B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df65401b-6dfc-3632-9e18-0986a3f5ecb9.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 31 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:6a:0a:09:0a:29:57:66:5a:aa:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : May 31 04:00:00 2022 GMT
Subject: CN=eacdf837-acbf-4921-a7fc-0c56b59b02e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:5c:be:7a:f3:59:0a:d7:5e:b1:d6:32:0b:
87:32:46:52:81:4b:38:f9:91:ab:cd:30:31:22:56:
a1:14:6a:27:95:c1:16:72:d6:84:7e:8c:06:03:27:
8a:b8:e8:09:f5:52:67:fb:38:c7:10:7e:19:cc:70:
c0:a4:1d:b1:fd:7d:27:69:5c:be:d4:76:38:1c:fb:
9e:44:8c:25:23:1c:97:1d:1a:ac:a5:15:58:88:7c:
5b:c8:a1:e1:c1:67:c1:be:e2:f4:b6:5b:05:96:5a:
d0:de:e1:14:f7:1b:49:58:ea:47:81:44:ad:89:f7:
05:10:79:a6:ae:54:96:6b:96:10:2d:d1:64:20:a6:
9f:6e:f4:4c:92:df:e4:c0:dc:96:ab:9b:3e:a1:d7:
17:a1:a9:f6:1b:05:04:a4:64:f1:61:26:a4:5a:8e:
3c:ef:cd:5c:7d:d0:3a:78:4f:63:e4:8e:df:c9:d9:
ad:40:71:43:c6:6c:7a:1f:b8:b8:6d:eb:45:dc:cf:
44:35:b5:92:84:d7:78:e1:0c:ec:bd:48:b2:6a:26:
f7:b4:37:b7:9a:ae:6f:d1:06:ed:49:98:f4:90:02:
56:c3:18:c5:24:8d:02:9d:94:6e:fc:9c:c5:b2:b7:
02:6b:69:5e:94:25:86:bd:41:d8:ac:b7:a7:55:06:
de:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:15:E0:AE:E0:50:D3:80:CB:91:7D:55:F3:30:43:71:E9:1E:61:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df65401b-6dfc-3632-9e18-0986a3f5ecb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:0c:dd:71:b0:99:a4:5f:5f:9e:52:81:9c:80:8d:7e:06:d0:
7f:42:51:46:b5:f3:bf:70:f9:7a:55:e9:43:4b:fa:86:8a:60:
e7:82:c8:b5:7a:2a:f0:4f:c0:9f:17:1c:45:25:f0:0c:98:57:
2c:59:1f:65:12:72:2d:50:0a:b5:d1:c6:12:ee:5c:03:65:1e:
c6:09:b3:ac:c3:db:60:68:d8:56:84:6e:ff:51:d0:d7:93:5a:
01:ec:69:39:09:8a:fd:6b:7c:ee:8e:5c:0a:8d:92:ef:9a:b4:
3c:59:16:b1:d5:c5:e6:85:74:fc:70:e6:d9:cf:0b:e9:70:cf:
32:89:38:6d:0b:ac:04:1d:6f:04:83:b0:02:77:6c:2b:7f:9e:
68:c2:09:b8:93:b2:08:1f:43:ff:7f:cb:68:c6:4f:a0:c7:2f:
81:18:66:fa:0b:36:80:96:a4:7a:62:b5:ad:6f:4a:e8:eb:e5:
c8:fc:07:6e:0e:69:50:39:d9:4e:53:95:0a:04:b3:b2:8d:b1:
9f:ff:d7:07:a8:7d:e0:27:18:0e:57:fe:9f:2e:8b:22:ae:27:
89:4e:e5:ce:b9:f5:12:19:a0:63:bd:a1:63:8f:2b:6e:2b:d3:
6b:0e:14:e5:13:f4:1f:fb:cd:68:f4:e5:dc:8f:ed:14:1b:16:
01:ce:96:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:30 2025 by rpki-client