Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f47d9697-af73-3ed4-b00f-f9c1c74525fa.roa
File: f47d9697-af73-3ed4-b00f-f9c1c74525fa.roa (raw, json)
Hash identifier: YOYW3dLlLg4KtTLVNZEW7uK3O0/QqJNq8kvNqyQP6gE=
Subject key identifier: F0:93:FB:5B:08:25:E7:6E:EF:A4:3C:0D:EA:C2:97:3E:7D:12:F9:FB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EDE5FF3716A66BED811BC03E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f47d9697-af73-3ed4-b00f-f9c1c74525fa.roa
Signing time: Wed 10 Aug 2022 12:00:00 +0000
ROA not before: Wed 10 Aug 2022 12:00:00 +0000
ROA not after: Thu 15 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.142.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:de:5f:f3:71:6a:66:be:d8:11:bc:03:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 10 12:00:00 2022 GMT
Not After : Sep 15 04:00:00 2022 GMT
Subject: CN=be8d4708-4571-42fd-b7bc-7cc00b48ceeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6f:07:2a:17:e9:1f:26:44:ae:d5:39:0d:c3:
75:3e:7a:d0:d5:9d:b9:25:b1:ff:5c:e9:db:6b:60:
fd:17:6d:50:33:64:e7:5f:e2:a2:17:00:6f:38:52:
f6:38:7a:a0:1a:af:83:ab:23:34:94:5f:21:44:7c:
45:8e:78:57:ad:77:fa:72:77:ca:14:b4:48:53:16:
ed:88:0c:ab:98:dc:75:01:f2:66:89:5d:0b:45:aa:
0d:7c:b4:87:bf:52:28:db:ca:50:08:e5:6c:6e:0b:
83:7c:36:85:4c:97:5e:73:09:e8:df:01:fe:18:53:
2a:b7:69:b9:de:5b:86:1f:81:42:e5:32:81:e1:fb:
21:b4:fb:0d:c0:fb:f1:45:22:fe:b1:db:c7:d1:36:
74:aa:c0:f7:35:36:28:e4:bb:9c:89:39:24:01:28:
93:b7:42:fb:95:b9:03:05:10:9b:74:2f:68:db:c2:
c8:47:a8:b0:78:75:f4:21:2e:b0:95:cf:66:0d:1d:
57:a2:c2:65:ce:31:3f:1f:0e:50:06:75:5e:05:55:
f0:90:7a:48:27:d3:cd:b4:c1:b1:1e:5b:5e:16:d4:
14:d5:ed:58:d2:f3:70:55:50:5a:6f:f7:41:55:0f:
05:45:37:57:3c:6b:ff:32:1f:73:df:19:2f:22:f8:
72:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:93:FB:5B:08:25:E7:6E:EF:A4:3C:0D:EA:C2:97:3E:7D:12:F9:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f47d9697-af73-3ed4-b00f-f9c1c74525fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.142.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:e4:23:65:35:65:61:d7:0c:8a:c3:c8:60:68:e8:c1:0b:bc:
d2:51:81:7a:8f:e0:89:e1:94:5f:82:5c:97:09:2d:2c:9a:89:
78:f9:6c:96:ce:6d:e3:6c:3a:5e:67:7f:c4:9c:75:51:b7:ff:
53:92:72:d9:d5:fe:ff:bd:08:4a:66:ea:d3:72:bf:7e:c3:83:
f5:36:b0:8b:6d:32:19:71:6b:cf:fb:3a:36:5b:4a:1b:67:25:
ae:71:90:ac:2e:91:a2:09:f7:41:b2:5c:79:41:ff:e9:99:e7:
7e:68:dd:79:84:f8:dd:16:8f:67:5e:74:91:3e:65:d4:b5:9d:
41:bd:f4:cc:6f:3d:b7:eb:a6:cd:85:32:93:86:a1:9a:22:12:
e6:f2:0c:3e:28:b3:e7:92:2d:2a:75:0b:64:28:b4:2e:6e:a8:
8b:44:5c:8e:58:6d:da:a9:1c:4b:e5:67:75:bf:4b:2e:d1:22:
76:a1:87:eb:1c:7d:43:ff:89:cc:97:7c:e9:fb:8a:04:fd:66:
e3:2a:f9:78:8f:83:1e:23:28:97:01:0f:2d:04:bb:27:b7:bc:
b1:be:dc:b2:19:dc:99:a1:c6:61:03:75:23:0c:7e:6e:9a:2d:
85:fe:8d:f3:5a:6f:33:90:5c:ee:a0:aa:b8:5b:f8:d3:66:8c:
3f:8b:db:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:24 2025 by rpki-client