Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8eb75aea-35ee-304a-a659-fbbd2e6ad26f.roa
File: 8eb75aea-35ee-304a-a659-fbbd2e6ad26f.roa (raw, json)
Hash identifier: 2Pd2jbM23BhdvvvrbpzN+qSMM4BXwwSHVxQVC3Jkb0M=
Subject key identifier: 65:0C:CE:5F:AD:94:36:8D:59:81:59:2E:D4:16:C7:EE:8B:0B:06:C8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409A76B70EA618DE6E8C6AA500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8eb75aea-35ee-304a-a659-fbbd2e6ad26f.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.126.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9a:76:b7:0e:a6:18:de:6e:8c:6a:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=a200c771-459e-4373-9c65-ba63719e561c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:d7:5d:d3:15:47:49:c5:ab:47:52:42:c9:
8d:6f:0f:b5:85:48:72:e6:76:d2:97:81:bd:94:46:
89:e4:b1:15:bd:9b:89:81:57:ed:77:c3:b7:09:a4:
f7:77:57:2e:ca:13:25:fd:30:67:45:3a:2e:e0:b6:
0a:4e:2c:b0:64:1d:c5:33:af:2d:30:1a:36:3f:1c:
dd:23:51:a8:a6:21:d9:9e:c2:32:00:79:2c:a2:13:
a4:e9:d9:2d:d4:19:25:dd:26:ac:71:22:61:63:ba:
c9:d1:47:15:66:e4:95:05:5e:03:fe:b4:82:94:1d:
f2:10:e6:8b:e1:ac:d1:92:60:01:16:cb:ee:03:0f:
74:4a:78:62:96:e9:77:29:03:3f:38:0a:e2:6e:92:
98:7a:d8:1d:45:c9:59:98:63:7e:92:49:e4:8b:aa:
58:b7:4c:d7:d3:2d:80:20:4f:2d:c5:f1:a3:32:19:
de:29:fe:0a:cf:94:2b:1c:9b:eb:31:93:39:4b:66:
01:cc:c8:01:a4:31:30:79:0b:ee:ca:c8:ff:96:c2:
11:22:67:9b:2f:87:b8:b2:65:a0:cd:68:32:b6:c6:
86:80:70:54:0c:36:7b:89:5a:c5:7c:78:fe:5d:42:
a7:31:fe:f9:f7:71:50:5f:e8:6f:51:c0:1a:52:46:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0C:CE:5F:AD:94:36:8D:59:81:59:2E:D4:16:C7:EE:8B:0B:06:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8eb75aea-35ee-304a-a659-fbbd2e6ad26f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.126.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:0d:8e:d2:0b:f4:69:b3:30:b8:b9:fa:2f:a4:6e:9d:7a:14:
d6:0d:87:4f:16:76:79:f8:8a:e6:e2:e0:ef:72:13:84:7e:5c:
91:fc:71:9e:02:28:fa:85:56:df:57:87:5d:e3:cc:ca:00:8a:
12:90:d2:5c:a8:aa:66:dd:c8:8c:e6:fe:37:da:e7:e5:5c:b3:
80:a7:f5:aa:2f:fa:5d:65:cc:66:f2:6b:25:3b:66:f8:6c:77:
e8:91:ee:cd:b7:35:bc:5b:ca:5c:15:06:71:74:16:91:a9:7c:
3c:f7:31:28:ce:a6:fe:c3:4a:be:af:45:d8:bc:5d:21:db:51:
28:23:e3:36:74:a1:3c:66:e4:aa:d5:fa:90:15:a0:d3:85:1d:
58:bc:02:50:dc:9e:9e:f3:15:e5:15:ca:8e:41:45:2b:57:82:
f1:6e:a8:98:d5:2d:7c:7e:cb:b6:7f:9c:45:06:57:98:a0:19:
c6:74:2a:56:71:cb:4b:d4:90:10:07:94:29:37:65:cb:a7:74:
cf:62:11:19:a0:45:c8:34:fc:aa:0e:80:3f:1b:7b:96:6c:73:
8b:ce:e9:95:ec:92:b3:a1:ee:d7:bb:c6:d3:01:4b:fd:f9:ca:
4c:d2:7d:59:cb:13:d6:22:d7:35:85:b3:45:7b:f9:7e:d9:46:
af:69:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:16:25 2025 by rpki-client