Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f8d049eb-9ad1-348d-86e6-1abbff5b5e80.roa
File: f8d049eb-9ad1-348d-86e6-1abbff5b5e80.roa (raw, json)
Hash identifier: UWPU+cfXrJxWUMiHr3gD99WTtD8E1JyyHEx3KAB1I88=
Subject key identifier: A4:37:59:87:F9:84:FC:9A:21:57:D3:BE:71:2D:E9:6E:16:39:64:F9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D8B9E1DBB1D9373A3C99FB000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f8d049eb-9ad1-348d-86e6-1abbff5b5e80.roa
Signing time: Tue 12 Apr 2022 04:00:00 +0000
ROA not before: Tue 12 Apr 2022 04:00:00 +0000
ROA not after: Tue 17 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.120.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:8b:9e:1d:bb:1d:93:73:a3:c9:9f:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 12 04:00:00 2022 GMT
Not After : May 17 04:00:00 2022 GMT
Subject: CN=b8fe222b-edfc-4ab7-9cf8-3eb02439ce2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:01:81:4d:ec:b4:8d:82:30:6c:88:01:97:
37:80:9d:05:0a:f3:17:ea:80:6d:08:06:d5:0f:6d:
5e:2b:c2:05:49:2f:a3:d1:51:7a:b0:70:dc:fc:4c:
96:6c:34:f9:59:81:9f:4b:7d:94:56:27:05:26:e8:
c6:d3:b2:1a:6d:76:59:1a:db:de:de:71:81:70:36:
18:6a:9a:fc:0d:0c:e6:ff:ae:a1:66:4d:d8:31:a9:
2a:7c:83:6b:d5:22:f4:3e:4b:93:d2:bb:86:26:cb:
5f:62:9b:cd:ff:e9:51:6f:be:81:5a:67:6a:61:05:
9d:d2:3e:83:6a:94:db:86:45:fe:3c:3e:d2:ce:b6:
03:a1:fd:46:3b:3c:af:f2:c6:b8:e5:6f:56:9a:51:
de:aa:a8:a8:d6:8d:38:2e:99:5f:10:47:10:e3:bd:
54:65:a1:c0:49:c8:f9:76:c5:bb:97:69:f7:7f:d1:
eb:d9:70:d4:e0:23:77:5a:8d:e7:67:21:12:83:66:
24:b4:da:a8:9f:46:45:92:69:e0:50:99:ac:e5:82:
d0:47:e9:6a:bb:ee:27:6b:ad:89:f3:6c:42:6d:67:
7c:d7:4a:a7:3d:4f:6b:19:39:d5:93:4f:7d:f4:97:
98:07:9d:f0:1d:b3:11:ea:f3:0c:2e:ab:9a:2e:c9:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:37:59:87:F9:84:FC:9A:21:57:D3:BE:71:2D:E9:6E:16:39:64:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f8d049eb-9ad1-348d-86e6-1abbff5b5e80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.120.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:ac:31:57:1c:a9:d8:43:b3:43:27:13:50:d2:27:1c:aa:b5:
f6:5c:6c:57:9c:c7:19:b4:cc:7d:03:1b:e0:b2:ad:a9:e0:14:
39:52:9c:cf:7b:24:f7:4a:9a:ea:c3:c9:69:1c:fb:c0:f3:17:
18:9d:8d:11:4a:3a:74:fa:a2:a0:65:31:93:b7:4b:cf:cb:0b:
77:f2:b0:e8:62:84:03:b4:5f:0f:9f:50:c7:ab:2c:91:79:49:
06:a1:06:22:33:61:09:06:f7:9b:3d:27:dd:28:e6:d6:4e:90:
54:08:8e:e3:f8:df:85:49:eb:47:80:58:a5:50:a4:ef:ed:f5:
41:be:7b:f4:a0:f4:ee:d7:c5:90:e9:ce:e4:a5:72:80:07:51:
df:8a:38:12:44:e9:ae:6b:9f:f4:f3:e1:f1:79:aa:34:a4:94:
19:57:ca:7b:3d:ed:d5:ce:48:2d:74:a4:d1:ac:e3:a4:88:0e:
28:f2:42:8b:09:a4:0e:c3:90:b2:e6:88:2a:a9:2e:82:fe:56:
f3:2c:f1:6a:06:f0:99:57:53:e9:a1:a3:ca:63:16:b2:81:24:
fc:83:81:d8:ca:15:4a:ce:71:8a:1a:79:e6:35:f3:9b:6d:b5:
a7:fd:18:a2:cf:10:0b:05:cc:33:be:2c:0b:d5:7d:83:74:13:
26:5b:35:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:56 2025 by rpki-client