Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e88c5b5c-74f8-3d62-89b3-9503d4f8b695.roa
File: e88c5b5c-74f8-3d62-89b3-9503d4f8b695.roa (raw, json)
Hash identifier: CnM1GqVL5RthM4AkkyH5QwZiv2aGWrbmJYD7NW4ROv0=
Subject key identifier: A4:35:3A:01:E6:C4:1A:63:09:6A:38:59:62:61:43:43:2A:F1:7E:17
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF32B83D60472F39BD78291C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e88c5b5c-74f8-3d62-89b3-9503d4f8b695.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.29.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f3:2b:83:d6:04:72:f3:9b:d7:82:91:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=03fcd50e-5f0c-408e-b904-2b086f9457b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:ab:27:34:e4:ae:63:d1:c4:47:a9:5a:06:
83:fd:65:68:88:7e:0a:e7:d3:83:90:ed:16:89:ec:
91:de:d5:1c:40:a1:f0:32:05:0a:d3:cc:c7:cd:6b:
84:ca:f4:83:f9:2b:5b:54:18:39:47:8b:aa:a8:41:
9a:1f:58:3f:bf:c1:83:b8:b8:0e:bd:b9:1f:97:7e:
a6:a9:49:44:2d:30:41:c0:ba:0d:8b:b4:27:e8:dc:
95:31:d5:5b:7c:c8:93:cd:a1:76:29:9f:6a:40:a1:
d0:40:90:86:e3:73:c6:89:da:91:55:37:99:6c:25:
02:78:eb:0a:73:3e:e3:af:b4:b4:6f:2a:9c:84:f3:
8f:72:24:61:98:66:ab:39:68:95:d7:cd:46:9d:02:
2b:60:bc:d2:32:89:71:cb:31:74:69:79:a2:76:20:
dc:99:0a:b5:78:48:28:ad:64:64:aa:75:f2:9f:49:
64:ad:1a:cf:3d:1f:b2:80:a4:1f:2a:44:f7:1b:af:
1f:b3:13:f6:7a:dd:1e:7c:f9:91:53:4e:99:7e:3a:
3b:ab:4d:b8:05:3b:53:5c:ff:9e:e4:fe:20:e3:8c:
a4:ac:62:10:b2:dc:d3:8a:a1:95:d4:7f:3b:ce:15:
43:d4:f9:d4:7a:30:66:cb:1f:15:30:b1:84:e1:c2:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:35:3A:01:E6:C4:1A:63:09:6A:38:59:62:61:43:43:2A:F1:7E:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e88c5b5c-74f8-3d62-89b3-9503d4f8b695.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.29.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:69:d0:a1:9c:26:76:44:57:28:ef:38:55:93:58:ea:7e:db:
6d:bc:78:6b:eb:49:35:99:b9:b0:64:ad:fd:cd:97:9d:cc:76:
68:aa:e7:a2:54:4d:15:0b:85:21:f6:44:cb:a8:a3:9b:3a:48:
71:01:f3:d1:df:dc:e6:0e:32:63:8d:77:7c:cd:00:07:37:eb:
a9:93:df:fd:f7:e5:bd:fa:3a:17:94:c4:31:62:e4:cd:31:3a:
43:77:4e:96:0f:3f:28:31:25:1a:82:90:69:d7:d3:bd:3f:b7:
57:e3:00:fb:e4:f7:86:b8:ec:03:cb:db:00:73:b8:9d:cb:43:
45:f3:37:78:33:2c:86:49:a7:16:9c:5a:a0:19:c8:34:84:d9:
03:70:6c:af:84:72:8e:78:76:97:1b:f2:07:a0:d2:05:8c:1e:
5e:47:69:6c:a9:ed:50:f8:69:92:25:4a:c8:d1:a7:88:6c:63:
d2:5a:0f:5d:74:d5:17:4a:33:1b:cf:23:77:7e:31:3d:7d:db:
5a:25:c6:0b:c9:b0:61:0f:55:d3:6c:e8:fa:37:c1:1e:8e:5b:
7d:ed:f6:5f:3a:c9:25:88:1f:e0:e5:d7:64:53:76:3f:b2:9e:
6b:1b:e9:6e:e0:5d:51:ae:3a:33:3c:16:08:1c:1d:ea:49:45:
a4:91:b4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:36:23 2025 by rpki-client