Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e2e34b78-a99f-3454-9dbd-30fb39477acb.roa
File: e2e34b78-a99f-3454-9dbd-30fb39477acb.roa (raw, json)
Hash identifier: 48iY+j4aFGjsSmCsu5dduw2Knvp4vKGC4zNu6QAIVro=
Subject key identifier: DA:19:89:0A:69:21:2B:7E:16:2A:34:0E:67:4C:12:CB:AA:95:5F:67
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DAD58FA13A6F5DCBCD199C900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e2e34b78-a99f-3454-9dbd-30fb39477acb.roa
Signing time: Sat 23 Apr 2022 12:00:00 +0000
ROA not before: Sat 23 Apr 2022 12:00:00 +0000
ROA not after: Sun 29 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ad:58:fa:13:a6:f5:dc:bc:d1:99:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 23 12:00:00 2022 GMT
Not After : May 29 04:00:00 2022 GMT
Subject: CN=2f095537-08f5-421d-9c59-c29ba9505df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:84:57:d9:2a:dc:74:e2:12:5d:dc:fc:0f:
6e:fb:9c:59:5e:6a:2a:4e:87:e9:d0:e5:dc:6d:e6:
b4:ab:ef:ef:b7:10:da:76:1a:e0:ab:93:f8:3c:84:
e1:19:18:6b:72:3c:c6:15:d5:46:91:58:87:5d:f8:
50:3a:c6:8c:1e:b8:c7:8e:fa:ca:f6:96:96:e1:ad:
af:e5:e6:a3:f7:16:fc:95:0d:53:1b:d2:46:c2:bb:
f4:a2:78:41:5d:07:97:58:5d:61:f2:8d:6a:08:5a:
43:c4:11:16:af:1d:25:d9:00:92:1e:f1:25:da:d7:
53:e8:60:46:c6:83:2b:88:8a:48:50:90:5a:c5:45:
af:6a:d2:79:fa:77:ef:2f:8b:80:de:79:ec:ae:d8:
0f:99:5e:4b:d3:40:05:1b:f5:d3:c5:33:22:0b:08:
4a:a3:f6:b9:2f:5c:3f:c5:41:49:b2:0b:fe:9e:9c:
85:c0:0d:45:ea:ec:2a:e3:2c:14:6f:de:ff:0a:fd:
d1:a4:85:16:ec:09:23:5f:67:09:84:30:57:54:39:
93:d3:60:5e:63:ce:e6:8b:ac:a9:b4:dc:79:e6:33:
7f:3c:ea:c8:16:13:cf:ad:d0:45:7c:cc:c0:e3:29:
96:e3:bc:a9:a0:e6:dd:e7:d1:a0:53:4b:33:60:5c:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:19:89:0A:69:21:2B:7E:16:2A:34:0E:67:4C:12:CB:AA:95:5F:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e2e34b78-a99f-3454-9dbd-30fb39477acb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:8f:9f:78:a7:67:5c:5f:17:51:2e:c9:7b:9f:12:33:49:1a:
0f:29:bc:58:ad:a9:b4:50:44:e1:7c:2d:03:8b:18:76:e4:56:
33:52:86:d9:48:cc:5d:f1:f2:1b:74:95:cd:8a:14:33:69:f9:
47:aa:56:a6:5b:a6:73:f0:23:75:1b:e8:36:6d:ba:36:27:21:
d6:db:b1:64:f1:d7:23:8e:28:b4:fd:a5:5b:74:9c:a9:ab:f4:
f6:f4:36:08:09:c8:4a:ad:53:02:81:27:ba:bc:61:23:9f:25:
de:5a:df:05:d8:0d:05:15:f0:4a:13:6c:e6:68:fb:a4:4d:66:
cc:0a:d8:27:70:1c:f3:bf:95:84:97:3c:be:1c:1e:e4:51:23:
54:9e:94:e0:6e:df:ed:f2:00:c3:9f:a6:d6:45:0e:d9:e4:7f:
34:2d:ae:99:85:93:05:7d:0e:37:ca:ec:cd:e2:39:fb:86:15:
83:17:7a:c2:44:ea:fe:d8:ef:57:1b:a4:42:7a:a1:ee:de:17:
28:11:6d:6e:d3:09:50:98:b4:db:29:6d:64:c6:14:f6:f9:41:
b9:73:4b:1a:7b:d9:de:a7:33:b7:04:11:d9:20:d3:a5:03:d5:
4c:78:f4:ec:46:43:2c:cc:b0:2a:cd:39:53:b2:76:3f:e9:78:
eb:ed:31:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:42:46 2025 by rpki-client