Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df8d44ee-42a0-344b-8a6b-0dbe0ff8a3af.roa
File: df8d44ee-42a0-344b-8a6b-0dbe0ff8a3af.roa (raw, json)
Hash identifier: Y/Px0ytnpVsRyk+nlc3UiuKMApVKLKUSr5GCBx7XMe4=
Subject key identifier: DF:B2:31:96:A5:96:3C:AB:EC:1F:BC:DC:68:04:10:F3:EC:85:BC:66
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584016599CAF932D18A3770013C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df8d44ee-42a0-344b-8a6b-0dbe0ff8a3af.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.91.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:59:9c:af:93:2d:18:a3:77:00:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=cd69c0f7-eb72-47e5-b008-1c562ff4c288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:4d:e0:86:ce:c1:7b:69:cf:e5:c3:17:15:
5e:fb:f1:c2:46:1f:d6:f2:b8:80:33:19:cd:98:db:
3d:d5:56:9b:92:ed:7c:a0:10:74:49:fd:23:27:89:
21:36:94:fc:64:48:e3:3b:71:81:ed:96:f9:0d:71:
f8:dc:e7:37:03:74:71:76:89:ad:e7:ef:b7:42:29:
b8:d7:08:31:c4:9d:cf:34:2b:cf:71:68:0d:05:6d:
7b:7b:b8:ae:dc:00:32:a6:6e:68:8b:71:9d:27:11:
7b:a0:44:bf:e5:d9:bf:34:42:e5:4b:e4:33:8b:c2:
21:71:fb:83:60:df:c3:d0:65:0b:7e:b9:4c:43:18:
47:5f:75:8a:c3:0c:d8:2c:4c:33:64:3a:ed:19:8a:
d8:92:d6:8c:c4:1b:7e:37:35:e0:79:2f:d8:1b:92:
c4:db:25:38:7a:b7:86:08:70:1d:04:53:26:02:cb:
1a:cc:30:69:f2:ae:4c:70:5f:05:7b:7c:df:29:32:
34:c5:77:76:44:68:cf:ab:5d:aa:d4:43:7f:e0:82:
94:9d:58:d2:f2:72:9e:16:09:75:9c:71:a3:09:6f:
fe:2f:f3:9b:62:1b:c0:95:ed:a1:2b:23:db:65:7e:
19:25:fa:0d:a7:26:40:32:ff:ba:94:3d:87:36:3c:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B2:31:96:A5:96:3C:AB:EC:1F:BC:DC:68:04:10:F3:EC:85:BC:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df8d44ee-42a0-344b-8a6b-0dbe0ff8a3af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.91.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:e9:36:7b:12:f3:98:ed:df:95:1b:ea:4d:c8:1b:4e:d6:84:
a7:4b:58:14:44:86:06:42:c0:aa:3e:1b:a4:0c:24:59:1a:3f:
c4:1b:7c:77:bd:8e:4c:33:16:8a:ba:4c:88:bc:1c:a2:fe:f9:
54:53:b8:12:76:33:2f:c3:d1:47:be:37:8b:cb:17:23:a7:c1:
54:bc:1f:7b:35:2a:68:27:d3:b5:9a:d2:14:78:13:26:6b:d3:
27:18:3c:2a:e1:31:49:62:a4:e7:52:ba:cc:c6:25:27:b4:8e:
7d:b5:1e:2c:01:b0:98:08:f2:32:a1:65:ee:61:38:ce:b7:22:
14:54:fc:e8:2e:c1:cc:8b:f7:97:3e:55:b0:96:e3:41:b4:39:
2a:00:39:d4:a2:d5:62:5d:8a:ed:0d:28:b0:e5:37:0e:9d:78:
28:72:0b:52:ef:a3:b4:b6:4a:68:9b:28:e0:1c:76:b9:b1:3a:
5a:c8:a5:74:32:79:68:0d:a7:7a:99:7c:31:c1:50:11:6e:be:
96:19:64:97:8a:c4:b6:ea:0e:aa:1c:34:ba:42:ae:f1:6b:6a:
5e:61:0b:9a:66:6c:f8:cd:32:e6:bc:32:52:e8:16:3b:c9:21:
6d:46:fb:45:9d:de:df:5b:7f:e2:7d:2d:2e:30:75:69:9f:77:
de:3b:ae:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:45 2025 by rpki-client