Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb320aa1-ceca-325b-808d-bb28e1bf269e.roa
File: fb320aa1-ceca-325b-808d-bb28e1bf269e.roa (raw, json)
Hash identifier: 28ZdfztOuEujQrSnA0bKCrvlhqULO8tLh94q6uReO7o=
Subject key identifier: BE:08:DA:9B:E1:95:65:0A:6B:91:36:3A:BD:1D:10:83:0B:9B:5B:90
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E7670B6F2D354FB2D0DDBF4C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb320aa1-ceca-325b-808d-bb28e1bf269e.roa
Signing time: Mon 04 Jul 2022 12:00:00 +0000
ROA not before: Mon 04 Jul 2022 12:00:00 +0000
ROA not after: Tue 09 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:76:70:b6:f2:d3:54:fb:2d:0d:db:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 4 12:00:00 2022 GMT
Not After : Aug 9 04:00:00 2022 GMT
Subject: CN=76e89e6f-7602-4758-83a6-c413404d17f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:94:a8:05:43:61:04:1e:3c:91:49:3d:79:
38:ca:94:3f:51:c9:0a:a2:72:90:88:a7:34:85:84:
dd:ea:bf:f7:6a:80:c6:df:9a:80:ab:a8:70:1c:f1:
e2:99:2e:5a:72:8c:da:3a:1d:61:88:68:6b:1d:47:
59:a2:b8:7f:52:f2:47:dd:44:15:7c:f8:39:30:ca:
a5:14:2d:00:02:7d:d1:52:a9:1f:77:71:6a:5b:49:
93:30:7c:a4:b1:37:ba:59:29:2f:6c:fd:c8:fa:90:
ba:17:c2:16:52:d9:6e:e7:cc:de:bb:99:1d:ff:84:
9d:b7:59:92:31:36:8d:ee:2e:f8:d7:6e:e7:9a:da:
f4:97:c0:d5:2c:d1:c4:d0:9f:bf:df:f1:49:00:c9:
2f:78:f7:48:97:1e:03:3e:79:9b:04:10:72:2a:a1:
7d:5f:45:6a:ab:31:09:ec:ac:71:e1:bd:98:17:17:
60:02:e2:39:80:3a:01:18:87:b9:9a:aa:e6:15:c3:
04:25:dc:cd:15:fe:fa:9e:3a:1c:02:3d:ae:a0:90:
78:2b:97:38:45:27:f9:75:5d:33:56:65:8e:28:5d:
85:6d:40:83:88:13:7e:c3:50:df:2d:9b:7e:ce:e8:
5f:02:ce:01:6e:3d:af:b9:58:ef:9c:85:0a:66:de:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:08:DA:9B:E1:95:65:0A:6B:91:36:3A:BD:1D:10:83:0B:9B:5B:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb320aa1-ceca-325b-808d-bb28e1bf269e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:4f:75:bb:3b:4f:5c:71:1e:51:b6:6c:b5:4b:24:5e:2a:3d:
63:2c:32:5c:8b:df:1f:8e:b2:c5:44:3a:16:0a:bc:d8:53:5f:
95:84:b9:bb:b4:13:56:1a:34:d8:2e:0a:18:92:9b:5e:7b:e3:
17:80:72:35:4e:b0:c0:74:0e:02:3d:0d:c5:f4:72:f4:62:e2:
b9:fa:3e:d9:16:82:4f:f0:9c:65:11:05:34:50:a4:90:5b:c5:
f2:09:c4:c2:7e:0e:65:8b:34:99:9b:09:54:39:2d:d5:7d:29:
aa:69:65:37:c5:a7:40:ac:04:08:89:7a:2f:e5:f2:6c:85:74:
70:a5:aa:16:fc:34:c7:5a:7a:19:4d:bf:61:81:ef:cb:42:f2:
79:fd:6e:d0:b0:e2:00:dc:08:03:ce:6e:a1:52:38:30:9f:e1:
72:8c:16:e5:9a:b3:2e:4b:3c:c7:b0:b6:7c:a8:75:02:d0:21:
4f:5a:39:5b:af:19:66:b4:a3:f3:32:88:f6:fd:a8:24:a2:5e:
3b:56:39:78:f9:37:4c:38:55:ce:80:26:5c:2e:30:8a:b1:db:
19:85:0b:ad:cd:b9:1e:e5:16:5c:79:e9:cd:e5:aa:c8:86:96:
62:21:25:eb:c3:f1:2a:07:8e:ae:b9:4f:a9:91:89:14:ce:b0:
a6:51:fb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:24:51 2025 by rpki-client