Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ecefc81b-42df-3466-aef9-1d214e35aa7a.roa
File: ecefc81b-42df-3466-aef9-1d214e35aa7a.roa (raw, json)
Hash identifier: rl0OEs0RsTL+SARGA3aNVyG43CuFvnv7uMYpVxFtE+k=
Subject key identifier: B3:27:E1:6D:4D:87:F3:D5:F8:F3:A5:25:3B:CE:22:38:F7:3F:88:56
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F2E0E37AD15082A3B0E679640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ecefc81b-42df-3466-aef9-1d214e35aa7a.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2e:0e:37:ad:15:08:2a:3b:0e:67:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=1420a5dc-5693-4b01-a4db-cf1eda8102eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:81:70:e3:2c:02:a9:ca:78:36:68:41:dc:3e:
1d:b6:51:56:7c:80:6a:85:cb:e7:d2:39:91:43:30:
42:f1:b1:99:91:80:69:4b:87:b7:30:38:20:67:6d:
fc:57:0c:d4:7c:a1:9d:d9:de:3d:3c:c0:3c:7a:d5:
af:a3:77:9a:e5:2a:63:9f:4d:f8:6b:12:cb:44:91:
39:75:cc:0a:04:51:5b:5c:38:dc:e5:4a:fa:40:51:
08:98:9a:44:5d:e4:fa:50:29:a0:b6:8c:84:f2:74:
78:51:77:08:fd:9e:12:86:7d:bb:a8:16:b1:ce:4d:
38:f2:aa:bd:68:5f:96:d7:4a:ac:a7:c3:08:e9:dd:
68:25:bc:33:91:34:5b:63:ac:a4:7d:7d:7e:1c:5c:
78:51:e7:e0:f1:30:38:96:28:ac:3a:4d:bc:e8:a6:
80:4b:df:cf:82:2d:fc:1a:61:f7:ff:ef:49:b4:d6:
ed:59:a1:c5:37:98:99:92:86:96:2a:02:b8:5b:28:
26:0a:6b:b3:a8:88:fc:03:ce:88:6e:76:b1:12:72:
69:9d:41:b0:19:ec:92:65:0a:51:5c:91:aa:cd:ca:
2d:51:9d:32:01:9a:9f:45:3b:bb:95:e1:1b:20:25:
81:c0:c2:a6:18:ed:34:cf:1f:c7:90:af:b2:3f:69:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:27:E1:6D:4D:87:F3:D5:F8:F3:A5:25:3B:CE:22:38:F7:3F:88:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ecefc81b-42df-3466-aef9-1d214e35aa7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:e8:48:2d:4b:9a:0a:2a:4c:c6:a7:fb:d1:e3:d5:5b:a8:f5:
35:d0:47:0d:30:f7:08:a8:fb:33:21:f9:cd:5a:3b:4e:d5:0c:
cd:b2:5a:46:94:e3:e4:4b:04:6b:4f:20:80:9f:40:c9:df:8f:
be:30:11:ed:64:19:5c:5b:18:3d:ff:73:70:0e:bb:5b:af:72:
9d:68:2c:f4:80:a1:8f:41:3e:74:fe:bc:b8:b4:78:4b:4e:d1:
14:13:af:41:06:9b:75:87:f9:9f:8d:f7:33:16:bc:9c:da:c9:
9a:7e:a8:9e:dd:16:e8:75:43:b7:4e:e7:49:68:91:5c:0e:79:
28:a6:b2:da:6a:a1:26:8d:85:cc:a2:de:8e:a4:ae:d0:9a:af:
43:f0:2a:3b:ee:cb:52:6d:cf:72:22:c5:c9:98:7d:f6:79:dd:
8f:b3:05:88:1e:6f:ad:78:c2:ad:cb:93:db:66:b1:27:19:f3:
3b:a4:d7:a6:84:b6:d3:ff:8f:d1:0d:57:cd:ba:9b:6a:2d:8e:
4f:fc:fa:fd:f4:98:46:0f:d1:54:c4:ad:1c:11:a0:a6:17:f5:
0f:46:ff:68:ab:82:65:7e:09:e0:83:25:18:d1:c7:04:82:69:
8c:2d:85:a1:a6:51:b2:7c:68:bc:18:b3:b5:d9:09:dc:6b:d8:
75:43:6b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:38 2025 by rpki-client