Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fb34e03-771b-3226-bd1d-ece766540425.roa
File: 3fb34e03-771b-3226-bd1d-ece766540425.roa (raw, json)
Hash identifier: 1C82JKYkt1pOnifkamKbEPFrJHYOvFh8WGgaMyxNiQc=
Subject key identifier: 8C:2E:C1:62:5F:C3:14:FF:FF:D5:7B:9A:77:5F:AA:7B:57:84:AB:C7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D16D2012642D228002EC4E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fb34e03-771b-3226-bd1d-ece766540425.roa
Signing time: Sun 05 Feb 2023 12:00:00 +0000
ROA not before: Sun 05 Feb 2023 12:00:00 +0000
ROA not after: Mon 13 Mar 2023 04:00:00 +0000
asID: 8987
IP address blocks: 16.26.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d1:6d:20:12:64:2d:22:80:02:ec:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 5 12:00:00 2023 GMT
Not After : Mar 13 04:00:00 2023 GMT
Subject: CN=f54cbf44-a484-45ba-a111-52203cced563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:39:ce:17:a2:58:26:4c:18:77:cf:98:f0:
c9:b2:07:87:ec:51:a8:80:6e:4d:df:7f:73:8d:d7:
87:e3:f5:c1:66:97:31:4a:ff:ee:18:6d:42:dc:6d:
b3:4e:fb:b7:64:60:45:ce:f3:57:b0:af:ed:c8:3b:
26:4d:ce:d3:92:11:8c:fa:64:af:20:1d:80:ad:79:
29:a0:be:00:7a:42:70:6a:a9:17:5a:79:53:e4:97:
b0:5f:65:d8:73:37:71:9e:ab:7a:23:78:b2:36:b0:
9b:11:32:07:4d:78:34:49:fc:2a:11:57:62:6a:0f:
93:2a:b2:57:60:77:c9:73:b8:e9:20:4d:5d:d9:ff:
aa:47:86:d3:5f:58:3d:e9:34:f6:c9:5f:1a:ba:68:
40:b9:90:20:2d:30:40:90:02:d1:aa:4c:bc:f5:51:
fe:de:8f:fb:55:c8:6e:78:09:ce:a3:70:b8:0c:0e:
25:a4:56:3c:4c:c7:f2:c4:ce:c3:37:04:ad:dd:77:
ff:b3:a9:ca:3c:dc:6a:b1:17:b9:2e:ff:c0:4d:01:
c8:cc:87:bc:26:b0:45:5f:89:74:29:e7:41:d7:7e:
cd:24:36:7d:8c:92:2f:2c:6d:a5:94:2e:2f:91:82:
a8:5f:80:6f:b8:38:01:0a:ff:b3:07:18:c7:3f:8c:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2E:C1:62:5F:C3:14:FF:FF:D5:7B:9A:77:5F:AA:7B:57:84:AB:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fb34e03-771b-3226-bd1d-ece766540425.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.26.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:1b:45:99:5a:f8:4f:d0:88:f7:e3:ed:0b:4b:89:b1:de:cc:
a8:04:10:cd:05:b3:d8:ee:52:ec:73:bd:24:19:e2:f5:b5:e7:
4d:94:f4:6c:5d:22:d2:b1:94:6a:82:4e:cf:42:24:23:06:5c:
71:65:55:f9:a5:b9:42:22:50:89:81:2a:f8:7c:03:8d:3b:15:
4a:31:d1:c1:5b:7e:c1:3c:ec:a7:ed:4a:e4:1a:47:3b:23:4d:
76:2f:50:e4:60:25:20:14:7e:52:37:1a:b9:62:ea:c1:eb:3c:
6d:55:18:19:fb:02:d1:17:26:ef:46:9a:0f:da:1a:57:52:5a:
99:71:e1:7d:73:b9:81:fa:1d:3b:bc:0c:34:a1:f1:72:89:da:
47:38:b0:f8:4a:45:0c:63:5f:2a:5c:52:88:dd:ec:c9:23:8a:
d8:de:7d:b9:b7:b3:76:b3:23:69:d3:23:26:6e:a2:ec:e9:f9:
51:8b:f3:72:39:c0:2b:1b:b4:ac:6a:fe:a6:0a:be:40:a9:09:
d4:94:f0:58:d9:e6:96:a2:37:7c:2a:84:31:61:69:70:2a:fb:
1a:c6:21:58:ed:93:94:a8:bf:db:e9:40:bd:c5:73:50:97:1a:
7e:79:0e:1c:0d:2e:41:a9:b5:25:1d:e2:6b:0f:73:a0:65:aa:
48:d3:be:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:44 2025 by rpki-client