Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9e1c85b-a7eb-3f1d-a77d-466ed7cd5d6a.roa
File: a9e1c85b-a7eb-3f1d-a77d-466ed7cd5d6a.roa (raw, json)
Hash identifier: 8NvXeGq1u8QzaUAsYN+6nJ6Rjqjpw7FZXw0tKzUa+Ok=
Subject key identifier: 04:1B:B0:8E:85:84:1D:49:C1:3E:51:79:A5:50:98:12:20:85:00:C5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DBE194042C625351849E62B40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9e1c85b-a7eb-3f1d-a77d-466ed7cd5d6a.roa
Signing time: Fri 29 Apr 2022 12:00:00 +0000
ROA not before: Fri 29 Apr 2022 12:00:00 +0000
ROA not after: Sat 04 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.26.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:be:19:40:42:c6:25:35:18:49:e6:2b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 29 12:00:00 2022 GMT
Not After : Jun 4 04:00:00 2022 GMT
Subject: CN=89be2103-9fa6-4434-8662-91ae36f934f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ef:09:e3:8e:c9:9a:b3:71:73:91:56:c7:11:
fc:ed:09:db:f6:28:ed:3d:1a:30:9b:62:f4:c2:fb:
fa:8b:05:67:4e:69:5a:de:57:ff:27:57:07:45:79:
fa:a9:50:2b:47:9b:ed:f7:2f:31:ce:02:60:4d:d8:
32:f8:3a:1e:ae:ff:45:13:7e:78:3c:75:84:ba:b1:
09:e2:74:4d:d2:2d:a7:bb:2e:ec:db:36:3f:23:f8:
45:d3:01:02:ec:dc:cf:38:f3:e8:5b:30:fd:f9:c5:
5d:c1:e9:e0:94:f1:99:7c:17:01:1d:d7:59:91:c8:
80:59:b8:50:75:14:07:27:2e:b6:c2:0f:6b:91:45:
b6:94:40:e4:4f:b8:24:3f:bd:5c:f0:24:42:93:ed:
e0:c9:e8:44:7d:7f:4d:16:4b:ed:c4:a2:e0:1b:8b:
04:10:7a:7d:b5:dc:a0:b8:57:6a:d0:62:66:57:e5:
27:a5:60:fb:80:83:0a:fa:c3:c7:15:9f:7e:cd:5e:
8b:90:78:ac:24:8b:2c:b2:4c:09:e2:ed:ba:ce:cc:
30:11:21:bf:82:0f:fe:51:dc:6f:d9:ca:6e:6a:c4:
9b:fe:d6:fa:20:82:5a:33:f3:69:c9:05:bc:65:80:
02:67:5c:b5:dd:ee:ab:29:71:8a:75:37:c1:9d:4a:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1B:B0:8E:85:84:1D:49:C1:3E:51:79:A5:50:98:12:20:85:00:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9e1c85b-a7eb-3f1d-a77d-466ed7cd5d6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.26.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:35:c9:19:7f:92:27:c8:2d:d9:4d:ba:33:8b:eb:e0:77:71:
5d:08:f7:f7:90:3d:e7:9b:dc:57:bf:c1:71:e1:d3:da:d4:31:
05:ee:4c:59:da:15:d3:d6:f5:32:36:7c:2f:0b:c9:1c:0a:5c:
59:ab:9c:87:86:4c:59:03:d4:01:4d:cd:41:ac:dc:be:e1:ff:
2d:6e:90:c7:08:0e:6b:92:67:e6:c2:98:31:2d:a1:94:12:b2:
29:26:d3:ae:72:7b:d3:f0:1a:aa:54:c5:c1:9e:42:0c:0e:5f:
da:30:4e:39:48:9c:52:28:f7:c2:02:15:9f:36:51:d9:14:85:
35:00:0f:b8:ea:22:81:25:bb:e2:70:c6:77:4f:df:84:58:86:
b9:95:49:cc:1c:1f:c8:10:09:01:17:5f:4c:2c:6b:b2:ba:76:
53:73:fa:3e:8d:71:f0:66:ae:b9:fb:b9:6a:9b:49:81:93:73:
1c:47:1e:38:b3:12:16:0b:f8:88:de:5f:9c:6b:9c:3f:59:3e:
a0:ad:93:09:af:91:02:7f:02:6d:da:21:0c:18:cf:75:db:7d:
5d:82:10:6e:64:8e:8d:e8:79:fa:26:49:77:b5:2c:13:a1:92:
d5:93:b2:ba:8c:86:8a:2e:67:15:31:d0:0a:3c:ef:de:67:92:
93:65:17:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:16 2025 by rpki-client