Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e24228e2-b6ec-3263-be4d-b4bf4a76a4c5.roa
File: e24228e2-b6ec-3263-be4d-b4bf4a76a4c5.roa (raw, json)
Hash identifier: L71eOhlqikDbTohEp5DDorV8u8frXYlJZNJsfc+m/+I=
Subject key identifier: D4:6C:D6:A2:6F:06:F2:13:38:79:C4:02:AB:30:A5:07:BD:69:5A:22
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DA46BDE3C815B2FC5151889C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e24228e2-b6ec-3263-be4d-b4bf4a76a4c5.roa
Signing time: Wed 20 Apr 2022 12:00:00 +0000
ROA not before: Wed 20 Apr 2022 12:00:00 +0000
ROA not after: Thu 26 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a4:6b:de:3c:81:5b:2f:c5:15:18:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 20 12:00:00 2022 GMT
Not After : May 26 04:00:00 2022 GMT
Subject: CN=5ed40bd0-d5bc-4d66-ad11-26012fd07121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:9a:9c:5f:27:51:6e:35:91:ee:3f:21:29:
f6:46:be:ca:91:a2:95:e5:c6:da:78:ee:9e:45:ee:
f1:a1:39:c5:57:11:b7:e9:3c:50:31:d0:f6:c6:db:
b3:e6:ec:8b:09:07:73:a3:cc:e2:f7:4f:55:37:17:
73:1f:79:1e:64:d5:68:f9:ce:4a:9f:10:a6:3d:11:
83:0d:40:e2:f8:35:1d:70:ab:7f:dc:2d:bc:c0:17:
0f:f5:27:7f:12:70:a2:a3:ee:4e:77:30:75:4e:04:
bc:7d:ff:de:bb:4d:db:ea:e7:3e:db:5e:25:8f:fa:
3d:53:1a:00:22:81:92:79:42:e9:a2:14:e5:73:6d:
fb:3d:78:a4:6a:fe:4c:45:0c:d1:64:55:6c:dd:ae:
c9:72:8b:89:7a:a1:31:5f:65:91:1e:2c:41:2e:bb:
fa:7c:8e:35:87:ef:15:db:49:5b:38:3d:44:af:6c:
b9:c7:16:27:2b:70:a4:31:ff:44:78:98:c8:83:98:
65:a7:84:ab:cb:08:26:4d:25:9d:46:ad:9d:b3:c8:
05:38:87:ee:38:e9:1b:e0:ad:22:da:55:87:e2:ec:
30:b0:0f:14:e1:e3:45:a6:7a:ff:a3:65:c8:4b:37:
70:39:55:01:31:61:9f:2b:3c:8b:35:ac:c4:49:19:
8f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6C:D6:A2:6F:06:F2:13:38:79:C4:02:AB:30:A5:07:BD:69:5A:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e24228e2-b6ec-3263-be4d-b4bf4a76a4c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:91:e1:20:6d:bb:74:40:01:65:01:ea:d1:4b:4f:ee:45:41:
48:64:c5:c3:86:e9:51:33:db:0c:59:6b:ec:4a:97:ce:77:fb:
a4:21:4a:77:c0:56:22:83:1f:33:d9:ca:6b:f8:fd:86:ff:93:
5c:eb:f7:ef:c6:82:ae:5c:3f:b3:5a:96:8a:c4:0a:cb:29:e8:
87:28:47:aa:cb:db:e8:b5:40:93:af:c9:04:90:91:e7:02:ae:
69:8a:19:ad:92:9b:d6:d3:47:a3:60:84:94:57:b7:89:06:8c:
93:db:05:f0:78:1a:99:6e:ad:06:58:57:ee:ba:df:65:4b:d8:
90:e3:cc:39:9d:33:27:c1:48:18:06:9c:fa:23:1c:71:bb:cb:
9a:e3:f9:74:6b:96:4a:05:20:73:d1:65:09:e6:37:f2:cb:31:
e6:ed:cb:6b:6e:c4:a3:89:63:29:3f:7d:da:ec:a1:c0:c8:4f:
35:84:72:17:56:9a:ac:f1:36:13:dc:2f:c3:1e:75:d1:ad:41:
8d:9d:e7:3e:2d:ae:22:61:a7:ee:0c:08:74:ca:76:48:59:ca:
ea:c7:bf:37:a1:81:d9:c8:3f:61:da:74:04:ca:bd:ab:b4:3a:
9d:93:8e:dd:bc:f6:30:92:3f:b6:7d:9d:db:65:b5:ee:f3:f3:
8e:e4:67:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:56 2025 by rpki-client