Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fcc9dc47-b8cd-311a-98bc-789df4a4cbc0.roa
File: fcc9dc47-b8cd-311a-98bc-789df4a4cbc0.roa (raw, json)
Hash identifier: 1R1g9ROVHZaFUiiHRFA62yQ4l+tiWy2PXsTEqAr5Q0o=
Subject key identifier: 50:96:D8:BD:CC:C0:A0:E6:47:46:C7:0E:4F:E9:F0:36:25:E9:EC:E1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F3B9B3937D1E7ACA02B838340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fcc9dc47-b8cd-311a-98bc-789df4a4cbc0.roa
Signing time: Mon 12 Sep 2022 12:00:00 +0000
ROA not before: Mon 12 Sep 2022 12:00:00 +0000
ROA not after: Tue 18 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.88.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:3b:9b:39:37:d1:e7:ac:a0:2b:83:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 12 12:00:00 2022 GMT
Not After : Oct 18 04:00:00 2022 GMT
Subject: CN=1c8393fa-3def-4641-8ca5-12cd89b9a380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:51:9e:95:d7:5a:6d:3a:79:13:26:31:9d:54:
eb:8e:6b:ad:07:f8:a1:79:ae:aa:21:b3:b4:0a:9f:
71:44:2e:3b:8b:f5:c0:d7:92:dd:27:26:b3:71:96:
00:98:7a:25:e7:2a:4d:fd:86:f7:99:3b:b5:5c:d9:
16:69:29:53:5b:c7:12:94:4d:b7:ae:53:82:df:42:
63:bb:c0:69:26:d3:e0:d0:f9:fb:a7:8e:cb:a5:c0:
8b:36:ee:80:2f:80:67:7a:fc:4d:fa:f3:98:7c:e0:
09:3f:57:03:8c:70:80:44:3b:95:6c:38:e2:02:46:
10:10:f5:3d:3c:80:40:ac:ac:58:54:0e:1b:b8:f6:
d0:4d:52:57:90:b8:bb:28:92:89:80:22:cf:2b:3e:
f3:76:d5:a8:33:b5:34:fd:22:d4:cb:06:1d:3c:61:
a7:92:21:b6:32:6e:f0:9d:76:30:c1:02:d5:8e:c4:
8e:7d:fa:1b:b8:d1:55:e2:bf:f8:05:e0:e8:a8:61:
24:3e:71:16:b1:9d:42:96:15:7e:ca:ab:90:2e:d4:
71:d8:cc:b3:18:b0:e8:95:4c:ad:56:a3:bc:98:27:
9e:1d:f1:ed:f4:ab:5e:61:54:b9:15:97:18:49:d6:
5b:f6:d8:51:31:a6:53:1e:60:98:8a:94:5a:89:ed:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:96:D8:BD:CC:C0:A0:E6:47:46:C7:0E:4F:E9:F0:36:25:E9:EC:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fcc9dc47-b8cd-311a-98bc-789df4a4cbc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:e3:cc:b8:b8:7d:09:06:54:99:6c:cb:48:a1:99:01:f9:a6:
82:4a:d7:28:0c:b0:d1:be:32:a7:bd:ff:a9:59:5d:39:4e:91:
28:16:8a:48:3a:3c:a6:a2:4f:30:6c:48:2b:8f:02:f0:7f:15:
29:7b:f4:00:3d:11:ce:fe:7b:6a:76:dd:8d:09:63:c8:08:3a:
b5:34:32:c7:5a:47:e3:0d:c8:f3:84:0b:ba:4d:4c:0e:2e:27:
f4:9b:a1:9a:9f:1c:cb:7a:a6:a3:68:c8:ab:ca:bb:3f:3b:48:
f4:8e:2f:b5:c7:6f:ce:77:a5:93:f9:83:18:82:ec:3e:55:74:
2d:a5:bb:dc:1f:bc:53:50:2c:05:f3:e6:ac:34:01:61:c8:0f:
ae:a4:3e:3d:43:5e:9a:ef:d3:31:73:90:a7:f6:af:c9:02:17:
62:6c:4c:9a:2b:90:3f:43:45:1c:7d:91:30:a0:c6:b7:02:fd:
a5:0c:ff:c8:49:f4:b0:c9:f9:85:39:73:e8:99:22:7b:e2:0d:
c4:9a:26:bc:5b:83:89:52:c1:07:32:6e:55:b2:53:7c:c0:19:
43:6b:6f:05:42:c5:c4:a2:60:e7:34:42:24:07:f5:50:a9:cc:
ad:9a:48:83:49:13:df:8f:3d:cf:9d:c9:59:91:1f:d9:18:60:
be:6c:ed:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:45 2025 by rpki-client