Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e38fd7e9-d42e-3a49-bb3a-876e402403e8.roa
File: e38fd7e9-d42e-3a49-bb3a-876e402403e8.roa (raw, json)
Hash identifier: IrfLcpsygNYfXl95Uj9w6+KK+QQp2z2B6T9/lbpf92I=
Subject key identifier: 92:39:85:FC:1F:76:A3:DA:30:04:0B:25:F6:1F:D4:56:7C:12:C0:69
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D805C9A960F0F69F0CA95DF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e38fd7e9-d42e-3a49-bb3a-876e402403e8.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:5c:9a:96:0f:0f:69:f0:ca:95:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=41974ee3-3e5d-4048-9055-90899d8e5391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:05:a2:14:70:d3:09:62:72:5a:2b:c4:46:5a:
1d:b6:df:0a:97:a2:3a:8f:fb:a4:ff:9d:36:ea:31:
c2:35:06:7a:e1:37:fc:ad:47:e5:a4:3b:03:f4:f3:
61:70:76:d9:e1:1a:58:3a:69:5c:0c:81:6a:b5:f4:
85:e0:a8:fb:88:5f:7a:dd:74:9f:e5:d3:e7:7e:15:
6b:97:b4:45:5b:8e:6e:e6:d8:da:3d:b3:93:ef:72:
a3:45:c4:19:33:7a:bd:00:49:b9:98:c6:ad:ba:50:
43:c8:e1:9c:d0:4c:81:01:df:da:ea:9e:da:6e:a2:
49:df:bb:b5:1c:f3:a5:e2:81:79:a1:17:b5:be:1f:
b7:e8:46:92:f3:1e:0f:e7:91:28:09:3b:e7:df:f6:
43:74:00:3a:a6:d2:11:c5:96:28:ab:b2:33:b5:df:
c7:97:e7:4c:1f:3d:f1:17:c1:6c:09:03:86:f4:c9:
ce:a3:22:de:7f:1f:65:f2:ac:c0:a9:f2:20:b7:36:
f5:23:66:47:98:7e:70:14:54:e0:72:e3:f5:08:95:
a3:da:d7:ee:6d:1b:09:00:e9:f8:28:e4:92:55:e8:
be:e6:70:e7:cd:57:df:be:ce:62:72:e6:da:04:05:
e9:85:93:f9:b6:b8:78:0d:50:60:64:5f:4b:c2:48:
f3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:39:85:FC:1F:76:A3:DA:30:04:0B:25:F6:1F:D4:56:7C:12:C0:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e38fd7e9-d42e-3a49-bb3a-876e402403e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:74:20:30:95:37:c5:e2:1b:da:d4:69:b9:19:61:fd:7f:3b:
ea:43:d1:3d:8e:7e:ae:85:20:1a:f7:a7:9c:8d:bd:a8:cc:57:
88:4e:b7:df:5f:de:1f:96:54:ba:0c:33:e9:b0:9b:6c:a2:6d:
2b:df:8d:18:c9:b4:50:04:6b:0c:ac:6d:86:1b:3d:51:2e:ed:
d3:8d:85:06:6e:a9:1f:47:22:c6:90:9b:50:a3:86:04:c1:c6:
7d:df:cf:23:09:6f:d5:b9:87:74:0a:45:98:a8:2e:7d:e7:4f:
25:eb:bf:eb:14:68:af:cf:87:c7:3e:9d:77:d0:f5:4f:c2:ae:
49:9e:cd:9a:46:96:4a:d8:44:49:91:79:25:fa:70:5f:9c:b8:
8a:34:39:8b:f8:76:e9:7f:6d:4f:0e:bf:6b:b2:b8:c2:d7:48:
6e:ca:dd:13:29:07:c8:57:ff:b9:68:d1:23:77:29:b8:4f:41:
f8:72:7c:e5:c8:e3:cb:ce:be:cc:32:59:9a:7a:ea:3d:6f:25:
9e:d0:10:60:90:d6:15:11:23:f6:83:bf:df:91:da:5a:43:c2:
87:44:9d:e6:df:dd:4a:9b:d8:e3:1e:bb:8d:04:1f:78:76:00:
70:3e:5b:b4:a3:60:6b:06:ea:18:61:c5:fa:14:94:58:06:c3:
44:cb:c0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:37 2025 by rpki-client