Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef03b9d8-ab01-36a7-b2df-bade5d29ac42.roa
File: ef03b9d8-ab01-36a7-b2df-bade5d29ac42.roa (raw, json)
Hash identifier: 6NS/7jeeE0mLJ2i+llv/l3h7jrew0TsRBCm3Xh3v/B4=
Subject key identifier: DC:B2:21:4A:35:56:F4:49:CD:62:4A:80:61:45:7A:4F:60:3B:29:5F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840409379645C779F9F4162B770
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef03b9d8-ab01-36a7-b2df-bade5d29ac42.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.124.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:40:93:79:64:5c:77:9f:9f:41:62:b7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=4e53a199-6f93-431b-8244-6bb7dbd1a486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:91:14:b9:15:cb:28:6f:a4:e1:a0:7d:5a:9c:
92:20:74:38:cf:e2:af:4f:72:b5:48:f7:23:c9:41:
ed:20:bd:4c:01:b5:0d:d5:25:9a:3c:2f:ce:6b:7d:
74:72:08:34:c0:0d:f1:9d:1f:14:01:b4:63:6c:c5:
ae:4b:43:cc:9d:01:ed:42:1a:5f:25:5c:79:42:97:
30:ef:7f:18:87:14:f5:0e:c0:26:b7:2a:2b:e1:da:
64:01:c5:86:66:9a:41:f8:92:f5:6d:b9:e4:1e:49:
34:fa:d8:64:b6:ac:1c:76:35:dc:9b:b6:c0:2e:c0:
9c:38:29:94:72:bc:5d:74:84:68:cd:13:97:c6:49:
b7:dc:85:aa:68:c0:6f:3a:ea:16:33:e8:ee:87:4d:
bb:28:d3:6f:31:c7:e7:31:05:9f:a6:b8:45:8a:42:
42:53:d0:b4:03:20:21:56:c4:1b:f3:8b:0c:dd:59:
de:5e:95:1a:d6:0d:88:37:47:9d:25:d0:8a:9e:40:
0f:53:c3:83:21:8a:a3:db:1d:1f:eb:44:cd:bc:79:
da:3c:76:d3:12:80:10:16:da:cc:c5:6a:35:61:c6:
e8:62:d7:87:2b:87:26:e3:c8:93:88:1d:bf:70:fe:
ee:56:0c:4f:4c:32:46:7f:ac:55:0e:d1:f7:ad:00:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B2:21:4A:35:56:F4:49:CD:62:4A:80:61:45:7A:4F:60:3B:29:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef03b9d8-ab01-36a7-b2df-bade5d29ac42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.124.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:b2:28:e5:74:e5:2f:d7:2b:9e:06:3f:53:76:62:a0:7a:f5:
28:24:26:90:da:26:cc:63:e4:95:9b:3d:1c:8b:6c:c3:13:cb:
c1:fd:bd:c7:fa:85:eb:39:c5:65:11:59:01:d4:a2:97:f3:49:
e6:b6:cd:dc:3e:06:d1:7e:60:b2:1a:5c:f4:77:5f:12:f1:f8:
19:dd:47:62:e0:d4:b5:3b:93:d3:fb:d1:c0:cf:06:30:79:ec:
1b:0b:29:16:19:0a:25:6c:e2:04:e3:e0:17:40:b5:af:ea:05:
ca:86:3b:f0:f2:f8:d6:51:56:a3:c7:c2:56:6a:a9:a5:eb:ec:
29:d6:50:fd:8a:fc:d8:a1:98:17:0a:6a:65:69:1c:f1:bf:e3:
a3:cd:26:71:48:7d:ad:e2:07:ad:61:85:4f:e9:94:39:6d:2c:
c9:50:e1:95:6a:42:e7:ef:a6:de:40:cb:78:18:23:c0:cf:34:
51:18:9b:92:d2:fa:9e:32:bf:5c:81:d0:1d:c4:d7:67:f5:a1:
34:14:4e:4a:d7:69:24:aa:02:70:fa:35:b4:dd:4f:2b:e4:94:
24:8f:4f:9d:9c:1f:d7:4b:ff:c1:d6:e0:41:94:3f:15:1a:5b:
d7:fa:75:b4:72:2b:2e:a0:af:4b:9f:3d:6f:fb:6f:d2:92:48:
19:b9:ba:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:22 2025 by rpki-client