Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2ddcd49-9333-32bd-a8e3-6e10efcc4356.roa
File: f2ddcd49-9333-32bd-a8e3-6e10efcc4356.roa (raw, json)
Hash identifier: CRdpUMwTG7USDtbR6h7xktMAebDQwkVhKeO6g23Ajow=
Subject key identifier: 35:CD:D3:8D:1B:FA:56:ED:3A:1B:9A:6D:D7:52:A7:2B:96:13:7E:5B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F1E0F8D349E43C2ED62F20A40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2ddcd49-9333-32bd-a8e3-6e10efcc4356.roa
Signing time: Fri 02 Sep 2022 15:54:07 +0000
ROA not before: Fri 02 Sep 2022 15:54:07 +0000
ROA not after: Sat 08 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.52.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:1e:0f:8d:34:9e:43:c2:ed:62:f2:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 2 15:54:07 2022 GMT
Not After : Oct 8 04:00:00 2022 GMT
Subject: CN=403881bd-6410-4df8-b2a1-32f1c81f29af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:96:21:69:3b:9e:07:64:49:6b:5f:52:f2:
44:0c:03:9b:99:3e:1e:e4:6c:2f:ac:49:e9:47:53:
1d:b9:b9:1b:b7:75:67:35:3b:4a:7b:35:99:a7:ba:
75:07:02:d9:36:35:72:1b:4b:3a:99:fb:07:a8:96:
90:b8:c7:43:84:6b:8b:a9:c0:9b:ce:65:d9:26:34:
7d:00:43:12:e8:52:0e:e2:32:38:e2:2a:3f:25:96:
f5:bb:d9:dd:3b:67:47:b0:bc:28:a0:20:9a:75:e2:
13:47:12:c6:43:ae:d5:03:5e:8b:15:0f:bd:85:aa:
97:77:8f:5e:a4:91:f1:de:3a:5e:1d:17:68:3e:47:
dd:56:ac:13:4d:e7:0b:ec:89:9a:5a:b3:e1:6f:7a:
78:ba:a3:5b:3f:76:68:82:91:4e:3d:41:51:d1:31:
e7:92:5e:fc:65:a4:34:e4:b8:f1:bc:28:8c:06:92:
ea:f5:ca:fd:7c:9c:72:8a:1d:64:48:4d:57:36:bc:
ea:25:f1:17:5b:71:23:62:ac:c1:a9:ab:b0:cc:09:
4f:db:5a:ba:dd:1b:ae:4d:9d:bb:06:2a:55:a5:41:
8d:a8:b9:3e:11:92:31:7a:6d:9c:18:68:d2:d2:dd:
71:c4:37:24:18:a6:fd:3a:c5:30:a3:09:0d:14:c1:
1d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CD:D3:8D:1B:FA:56:ED:3A:1B:9A:6D:D7:52:A7:2B:96:13:7E:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2ddcd49-9333-32bd-a8e3-6e10efcc4356.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.52.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:c7:3d:2d:73:e4:83:69:e6:c1:86:96:78:28:b9:18:44:4e:
c9:ba:17:38:f3:49:b1:30:9d:f4:09:6e:14:64:7e:ef:ce:25:
49:b1:73:65:e1:f5:63:2e:a0:ba:bd:fd:de:90:fb:63:6f:ce:
ce:6f:30:4c:be:88:c9:10:a1:f2:6b:8f:16:93:c1:95:51:c9:
89:77:a0:79:4f:5f:31:1c:66:60:1a:a8:df:e3:0d:83:b6:e4:
bc:41:9d:11:34:a3:e6:72:63:2f:e8:27:14:44:30:19:dc:19:
66:18:15:6a:b8:92:4d:91:27:f7:21:18:24:18:6d:01:5e:4f:
48:34:6d:82:fe:7b:bb:3f:47:e5:42:5e:03:4f:8b:be:03:a9:
1e:f1:24:f1:ef:fc:6f:70:4e:b2:5f:98:10:5a:d7:fa:9e:e2:
e5:a3:43:a8:d3:8d:cd:57:92:bc:cc:a2:99:e6:b8:cd:14:44:
23:ab:58:51:5e:d2:5d:7d:39:d0:20:ea:0a:cc:e6:41:cb:d7:
77:a0:56:50:ff:8f:26:cd:58:c0:85:b4:b4:9f:e1:24:d4:e1:
ba:03:d4:02:0f:58:78:a5:8b:dc:cf:42:4d:25:6b:a2:26:7d:
23:bf:15:de:a4:12:47:9b:0c:52:3d:ff:6e:3b:53:a8:60:c5:
92:e1:4e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:13:38 2025 by rpki-client