Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9b9ab2d-31d6-3d2a-b432-b9c3b2d7ada3.roa
File: e9b9ab2d-31d6-3d2a-b432-b9c3b2d7ada3.roa (raw, json)
Hash identifier: K8IfPJNLlICiZN4pP5lxq1/pkWp44aE4BSQRDoztneM=
Subject key identifier: B4:B6:DE:72:7E:39:04:54:DB:8C:D1:BC:1F:FF:D2:F7:00:5E:D1:B9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C95AEAAEF20C879A5BE67BC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9b9ab2d-31d6-3d2a-b432-b9c3b2d7ada3.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:95:ae:aa:ef:20:c8:79:a5:be:67:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=c7e512dc-8e35-4906-84e7-c24dd343f4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:70:01:00:08:e8:de:4c:2f:a1:2b:27:a7:
aa:75:50:c0:f3:42:7c:e4:d2:73:10:d8:f9:10:e9:
82:92:51:18:0e:6a:c0:ac:59:c1:38:d4:25:fd:f0:
b7:84:9c:a2:83:bb:c0:82:c1:af:eb:aa:dd:fd:ba:
dc:3c:3f:91:82:ac:71:89:b9:6b:c1:18:b1:65:c7:
fe:0b:8e:98:ab:98:6d:9c:b1:06:26:51:d9:9f:bf:
d0:b9:65:03:20:91:5b:1e:7e:00:c6:27:de:9b:c1:
f8:77:c1:c0:bf:f9:f9:b6:f1:a4:a6:c1:3c:7a:5d:
44:c7:09:7a:1a:78:da:ec:cd:5d:f1:50:cc:70:36:
61:14:df:ae:14:03:9b:40:a9:b1:f2:a6:79:be:1a:
59:14:11:ab:e6:db:1f:a3:83:ff:9d:7a:c1:f8:b6:
4f:d7:be:a1:7a:6d:c6:5e:e2:fe:7a:91:51:b4:91:
00:d9:cf:02:79:d4:f4:d2:1c:ad:5b:7c:8c:6d:e1:
8e:60:26:7a:27:9b:5b:e3:3b:55:1f:25:5a:6a:5f:
98:80:45:9a:b4:06:cb:d6:81:9b:ef:6d:45:6c:3d:
2f:48:5c:84:9e:ad:90:1d:fb:a4:33:ae:d8:bb:4e:
76:d6:6b:3c:48:79:2f:04:f4:c0:69:64:2a:53:a7:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B6:DE:72:7E:39:04:54:DB:8C:D1:BC:1F:FF:D2:F7:00:5E:D1:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9b9ab2d-31d6-3d2a-b432-b9c3b2d7ada3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:df:82:9a:0a:bf:54:57:9d:5c:0f:59:63:a9:fb:bc:5b:28:
39:ea:c6:d8:a2:e1:9d:5b:bb:2d:ad:63:6d:92:1d:c0:30:ec:
1d:6c:87:cc:b0:bd:bb:cb:d8:fe:dc:88:ce:54:a1:88:5d:f4:
4e:d9:56:64:9d:2d:ae:5d:02:00:91:a0:fb:77:e2:e5:03:8b:
65:ff:21:a1:c9:f0:f2:0a:47:9b:c6:b6:4c:88:47:29:9f:a8:
7d:84:b0:54:f3:6d:65:39:89:99:15:c6:d5:bc:4b:7e:f7:50:
fb:6c:93:1e:fe:29:e8:d1:42:ff:f3:c4:df:60:7c:d8:42:47:
b2:9c:37:59:a7:c4:7c:c1:26:6d:b9:1f:d6:f3:b8:44:c5:e6:
e2:c5:e5:df:f6:ef:ce:0b:77:1d:52:04:fd:07:bb:b5:1d:ab:
63:d5:c0:75:5c:40:d8:72:02:1b:fc:6f:60:ce:3f:b0:b6:c6:
79:3f:eb:cd:57:95:20:18:f6:10:12:1a:b9:56:03:f8:2b:64:
a2:0b:c5:6b:aa:40:fc:76:73:35:1c:da:0d:b9:d5:54:9c:f7:
47:75:c0:73:5f:f6:f3:c5:4e:31:28:4d:f0:2a:b7:a9:8b:7d:
72:d3:d6:c7:07:8a:13:ad:0d:b2:05:7b:91:3b:8c:59:a7:a3:
7a:e7:a6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:09 2025 by rpki-client