Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ff24d22b-eb92-3a81-86fb-6e8a2c07a6c3.roa
File: ff24d22b-eb92-3a81-86fb-6e8a2c07a6c3.roa (raw, json)
Hash identifier: RV7ph1+Dwv3a3JdmwI1ZdV3jsVZca+5s7TAUdubF1xo=
Subject key identifier: D5:C2:4E:DD:39:4D:3B:53:2C:A8:CF:6E:0B:2F:C4:D9:A1:7B:EF:3F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EC4A3634475001B8A05E1DA40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ff24d22b-eb92-3a81-86fb-6e8a2c07a6c3.roa
Signing time: Mon 01 Aug 2022 20:39:08 +0000
ROA not before: Mon 01 Aug 2022 20:39:08 +0000
ROA not after: Tue 06 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.154.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:c4:a3:63:44:75:00:1b:8a:05:e1:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 1 20:39:08 2022 GMT
Not After : Sep 6 04:00:00 2022 GMT
Subject: CN=69f0da52-7320-4a2a-8edb-6d16e821447e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b5:a1:f5:66:bf:e0:91:f4:e4:0e:af:a4:68:
92:ba:1d:40:a1:e6:6d:79:34:f6:21:2c:7d:77:74:
c9:4b:ea:46:a1:2d:65:6e:00:a1:0b:5a:1a:9a:b2:
73:94:85:50:2e:e0:7f:e2:a9:53:9a:6a:e7:4d:16:
0a:e5:b7:0d:4c:c8:bb:52:c9:9d:d8:48:2f:c0:b7:
5a:01:3a:44:f2:ab:59:05:fe:09:ca:bd:79:7e:d9:
c9:a6:fe:1a:59:f9:a6:5f:83:15:37:ee:21:d8:5a:
79:3b:85:b2:e7:20:a8:86:17:36:ee:e6:20:30:89:
d2:ae:b9:e2:48:2e:77:85:bb:3f:47:fd:62:ce:af:
31:03:f1:06:02:0a:bb:ed:fa:da:b5:c5:01:45:f7:
9d:54:5a:5d:ce:8a:83:b9:8c:91:24:e2:6e:61:31:
e8:32:df:e3:d3:c7:d8:65:ce:c3:09:c5:a7:76:20:
9a:d0:60:74:02:fe:e8:4d:aa:ee:59:54:c1:2e:34:
0a:0b:e6:4c:c7:5b:a5:23:80:24:3b:24:c7:48:ee:
87:97:ba:61:79:98:5d:e2:1e:23:3a:19:e5:f1:a9:
af:9c:ff:12:e6:22:08:b5:6b:5f:3f:83:b9:b9:96:
be:7c:63:e9:36:ca:a9:30:b4:0e:04:57:f9:78:65:
0d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C2:4E:DD:39:4D:3B:53:2C:A8:CF:6E:0B:2F:C4:D9:A1:7B:EF:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ff24d22b-eb92-3a81-86fb-6e8a2c07a6c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.154.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:22:8d:4f:7f:07:64:77:9e:7c:de:94:cf:2a:1b:05:71:cf:
45:43:95:fb:7b:7a:cf:2d:b1:5f:0e:46:9f:aa:0f:96:21:00:
aa:df:bc:e8:9a:a8:bd:34:cb:9d:90:d4:1c:47:f1:7f:0c:d4:
1b:65:e4:cb:8e:f7:fb:2f:21:36:68:51:cf:1e:13:db:4c:89:
9a:dc:7a:a5:cc:7b:18:9d:c8:95:96:77:26:fe:97:2b:45:56:
1c:f0:90:7c:83:2b:e5:bc:83:11:40:d6:35:27:76:5d:7f:28:
da:d9:df:d1:d7:84:72:86:e8:e9:52:2a:6e:60:1d:17:46:fc:
2c:83:62:76:50:a2:8f:9b:60:f7:5e:77:43:ae:33:c7:2f:21:
a4:6c:3f:f2:6f:e0:56:e8:3e:aa:c3:ff:fe:a1:59:9b:ba:2c:
b5:db:d4:02:7c:1d:5b:a2:7c:af:8c:fb:f2:b0:38:f5:ab:67:
12:b4:27:cf:24:84:dd:52:b4:ed:30:13:89:11:3d:f0:ee:7c:
d3:fc:9e:09:3f:2f:95:e5:f4:6f:7e:ee:83:a0:7c:4d:41:a9:
be:60:17:58:60:b7:17:36:07:6f:7d:c0:6b:8b:63:80:8f:bb:
5d:2d:a7:cb:79:b9:ea:2c:61:5e:ed:19:61:7b:91:78:eb:dc:
9a:b4:71:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:03:26 2025 by rpki-client