Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1aee4bf-92ee-372a-9257-76ccac56305a.roa
File: f1aee4bf-92ee-372a-9257-76ccac56305a.roa (raw, json)
Hash identifier: DKftFZxL6Gb1NVMiGQtlSVKpH9T1Tp2qItf7QpCtlww=
Subject key identifier: 7F:20:DD:87:8E:50:41:2F:55:D4:41:76:14:45:36:E4:87:E1:BA:1F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EB742DBF6B6470518DA6C3B40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1aee4bf-92ee-372a-9257-76ccac56305a.roa
Signing time: Wed 27 Jul 2022 12:00:00 +0000
ROA not before: Wed 27 Jul 2022 12:00:00 +0000
ROA not after: Thu 01 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.142.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b7:42:db:f6:b6:47:05:18:da:6c:3b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 27 12:00:00 2022 GMT
Not After : Sep 1 04:00:00 2022 GMT
Subject: CN=2e3816fb-97b8-40e7-8c73-e99bf522ffc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:01:3b:de:1a:65:2f:e0:94:c1:85:d5:c8:c8:
4e:34:df:2e:e7:1a:d2:9e:32:48:fd:60:66:e9:de:
bb:91:fc:91:66:e9:5e:e2:5f:07:ef:45:38:5d:bd:
6f:ce:5b:b9:77:ff:74:4f:da:c5:fb:11:32:76:64:
96:61:c2:4c:db:f0:0f:b0:bf:ef:7b:81:f0:30:38:
32:5e:e1:9b:2c:e8:b0:45:e1:cf:56:e0:fb:c6:70:
a5:e9:32:3d:de:c0:f4:fc:75:a8:c6:a5:c2:40:b9:
5f:f1:ad:0d:56:6b:ad:91:72:56:4b:6f:eb:53:89:
2b:9e:38:b2:ac:cf:a2:74:6f:f9:ff:24:ba:f5:29:
85:30:4e:b8:fe:e3:f2:21:1b:5e:5f:0c:cd:ae:a4:
3e:6c:2c:c0:db:58:ca:c4:38:16:81:75:56:d3:38:
92:31:85:6d:d8:22:68:1f:45:32:ce:8d:88:6e:7c:
41:e6:95:05:af:80:47:a9:42:0a:ab:b4:44:6c:2d:
0e:e5:9a:95:f4:8a:2d:33:85:5e:22:82:40:03:df:
a9:f2:57:ea:98:43:91:92:12:fb:7f:4e:c5:72:ee:
9a:ba:23:20:60:e2:bc:1b:5a:c6:cd:1c:6b:fb:3b:
28:85:08:0a:1b:3e:ad:58:ba:fd:4b:12:5a:a5:4e:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:20:DD:87:8E:50:41:2F:55:D4:41:76:14:45:36:E4:87:E1:BA:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1aee4bf-92ee-372a-9257-76ccac56305a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.142.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:63:ff:38:82:67:09:a2:77:54:c2:80:25:b7:f5:bd:f5:fc:
84:1f:05:fc:ec:17:bf:9c:a2:b5:2d:d6:86:71:ef:95:86:8c:
45:fa:e2:2d:ff:28:a0:a6:0a:4e:4e:20:a1:30:2e:ae:96:3a:
71:9a:37:3a:a5:f0:34:c7:cc:22:bc:e5:70:d1:40:c5:04:04:
0d:62:46:a4:b0:4b:2d:a0:a0:27:07:09:6b:09:c6:f9:f5:a8:
2a:32:d1:ec:3d:ea:64:e4:2c:ec:76:ee:db:e8:64:8f:8b:d6:
8a:96:10:22:5b:11:22:70:32:ca:db:e2:bd:05:0d:fe:8d:4f:
b8:e1:c0:ef:ab:54:e5:b4:c7:4b:34:87:06:e6:f4:c4:e4:76:
d4:c4:20:0b:60:67:4a:60:36:a0:b5:de:78:b9:52:45:12:66:
62:46:c2:2f:b2:89:60:8c:12:da:c3:b9:4b:bb:4d:94:07:28:
b9:b4:fe:25:25:a5:04:1c:b4:78:cf:45:d7:2c:f8:a3:24:f0:
1b:6f:99:97:fa:89:fc:83:5d:af:b8:6c:11:56:39:84:40:7f:
0b:b8:ad:3f:6b:1b:68:98:dc:ac:dd:24:53:00:ba:68:ba:ef:
b8:3e:86:29:76:6a:ca:7f:2c:d2:fe:a9:29:26:81:59:e4:f5:
e7:16:bd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:07 2025 by rpki-client