Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af8531ab-2409-3b32-9d5d-8011b0ee6859.roa
File: af8531ab-2409-3b32-9d5d-8011b0ee6859.roa (raw, json)
Hash identifier: 1Nw28FBqXZOeKHtGqUAcDbCeyUbGTFC5kimna/r/0JQ=
Subject key identifier: F8:B5:DE:CD:15:10:A8:BE:29:25:DD:75:29:F2:67:B2:CF:7A:F4:E7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CEF30D24D42AEA51930BB6EC8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af8531ab-2409-3b32-9d5d-8011b0ee6859.roa
Signing time: Tue 15 Feb 2022 05:00:00 +0000
ROA not before: Tue 15 Feb 2022 05:00:00 +0000
ROA not after: Tue 22 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.126.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ef:30:d2:4d:42:ae:a5:19:30:bb:6e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 15 05:00:00 2022 GMT
Not After : Mar 22 04:00:00 2022 GMT
Subject: CN=afa11386-6b85-4497-937a-174fea4e386a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:e6:c4:ca:6b:a9:34:2a:65:1e:89:3d:76:
24:5d:9b:b3:81:4e:d8:ff:1d:50:73:8b:46:81:bf:
39:15:c1:d0:6f:4c:44:f6:48:03:bc:86:e0:87:92:
c4:0b:14:38:bd:80:45:a3:16:c8:a7:0d:ef:d5:61:
f0:94:59:04:67:62:d7:bb:c6:44:ed:c5:08:24:c3:
70:a3:4b:d6:a4:0e:07:3a:4d:d8:3f:97:fa:e0:b6:
ac:70:0e:f4:c4:ed:b2:fd:5a:73:24:ce:95:ee:f6:
96:2d:b3:39:ae:ea:fa:f4:eb:dd:4a:a9:2e:0f:6f:
f0:69:8a:96:ed:d1:32:32:39:1e:58:c9:4a:39:b5:
aa:8b:78:4b:1a:cf:09:e6:a1:d0:58:db:8f:48:76:
82:02:cf:c2:cb:df:89:e0:01:d4:3a:84:d1:b4:cc:
35:00:c7:d1:e2:cb:86:be:96:d5:ba:80:90:14:77:
b1:58:14:92:c6:c1:02:a7:15:5e:40:41:ae:47:d2:
e7:58:5d:b0:21:29:22:68:1f:5e:72:80:46:a5:d8:
4b:b5:64:67:0f:97:ce:38:07:3e:21:8d:fa:bf:68:
79:8f:44:4d:3e:52:41:45:b0:13:b4:85:d8:91:51:
02:68:1d:be:a8:31:88:30:e8:76:46:e6:fe:b8:f9:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B5:DE:CD:15:10:A8:BE:29:25:DD:75:29:F2:67:B2:CF:7A:F4:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af8531ab-2409-3b32-9d5d-8011b0ee6859.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.126.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:d2:0a:ab:d6:c5:a8:4f:27:8b:66:20:24:d4:c9:e8:cf:9c:
1b:0f:b4:5c:c8:5d:dc:d5:34:01:ee:fe:05:e6:02:18:a1:6b:
dc:c9:1b:c1:ac:ae:80:d1:d1:54:71:cc:c8:6d:5b:6f:0d:e3:
eb:2f:c2:1c:0e:da:de:0f:b7:3e:b6:de:a4:f9:74:66:f5:fc:
6f:3c:9d:d1:07:85:7a:0f:9d:a2:aa:0a:84:3f:4b:05:4d:ba:
0c:af:fe:94:f8:e7:9a:37:8b:11:91:97:98:e8:aa:75:c2:31:
08:e1:0c:ea:94:53:68:05:1c:32:3a:6c:ad:2c:e2:e5:78:24:
7a:55:1b:e1:e2:a6:3a:07:39:ca:11:b5:60:ef:a7:40:48:9b:
54:2e:fe:54:7a:a2:5b:ae:47:20:e6:22:34:1f:30:51:da:8b:
a8:0a:1a:c7:74:e1:87:13:eb:a6:62:9a:82:df:6f:90:8a:ca:
e5:05:95:67:ce:39:db:61:9d:fa:31:57:b8:97:46:dd:68:04:
10:91:95:e7:b1:6d:dd:9d:52:30:b6:6a:0e:bf:49:d6:c9:a2:
46:93:e6:ea:4f:dd:6b:ee:eb:a7:bb:16:35:4a:02:98:1b:9a:
a9:a2:70:82:dc:65:c3:41:2e:b8:dc:c4:bf:f3:f3:36:d9:96:
2b:56:1e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:46 2025 by rpki-client