Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06987da0-b004-3b2e-a8bb-55ff9479ef5c.roa
File: 06987da0-b004-3b2e-a8bb-55ff9479ef5c.roa (raw, json)
Hash identifier: AHMq8Av+QGLEw4BcenTx6gltLUwNVGOJzTm0fWvQK40=
Subject key identifier: 3B:FE:D5:01:C1:F8:88:DC:3B:33:CB:83:66:DE:FA:C8:13:C0:7F:21
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DB79D207A69EC9BC760FF3100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06987da0-b004-3b2e-a8bb-55ff9479ef5c.roa
Signing time: Tue 26 Apr 2022 12:00:00 +0000
ROA not before: Tue 26 Apr 2022 12:00:00 +0000
ROA not after: Wed 01 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.144.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b7:9d:20:7a:69:ec:9b:c7:60:ff:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 26 12:00:00 2022 GMT
Not After : Jun 1 04:00:00 2022 GMT
Subject: CN=a27c278d-507b-47a6-b704-bc25be3c7964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:df:f1:35:2f:06:3e:bd:c7:82:85:9f:c4:
ff:1b:66:fd:97:f1:8e:27:93:8e:c7:b2:fa:d3:f9:
de:29:c8:e7:c9:98:80:42:fb:07:80:d2:bd:e5:6a:
06:21:31:a1:7f:c6:0d:ee:8e:c2:2d:93:11:e3:c4:
38:c4:a6:7a:52:87:45:1e:8e:67:d5:b8:29:f1:aa:
fa:de:35:8d:5c:28:57:f7:52:cd:dd:48:bf:b9:cc:
87:17:e6:04:48:56:68:da:b6:fd:51:ce:57:d9:e5:
83:ca:0a:e5:a9:77:77:84:e5:e4:d8:f4:e8:4f:ef:
08:e2:49:e0:7e:df:ee:d5:16:e7:7b:59:d3:3f:1e:
6a:ba:45:bc:97:0d:d6:91:88:08:bc:95:9a:54:ff:
5b:35:8d:e1:82:76:db:50:9c:2b:d1:16:60:8b:82:
c6:5c:09:0d:75:0f:68:ce:16:66:2a:75:50:3e:dc:
e2:a2:94:9c:d6:7c:0e:e9:25:57:3d:61:6d:7b:aa:
13:bf:c1:41:d0:ab:92:2f:a0:a2:ec:24:f0:96:42:
30:1c:17:a9:64:bf:dc:9b:a6:3c:1b:0f:0c:ce:9a:
bf:f4:30:65:6f:e0:e0:e7:d4:c4:b9:db:94:c5:d6:
10:de:c8:6b:f1:4e:96:0c:4e:45:0d:14:20:84:53:
3d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FE:D5:01:C1:F8:88:DC:3B:33:CB:83:66:DE:FA:C8:13:C0:7F:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06987da0-b004-3b2e-a8bb-55ff9479ef5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.144.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:8b:27:f7:6f:ba:10:e7:1b:1b:59:08:ae:12:70:45:2a:8f:
7d:fa:8a:27:9f:25:39:5a:09:78:b1:fb:1d:1d:9c:99:5b:85:
b5:60:54:b6:01:91:12:1c:02:6e:22:aa:b7:74:53:16:c1:7d:
89:ac:b7:86:7d:6d:11:1e:9f:a4:1a:b9:2f:93:7e:13:c8:4c:
57:60:54:0f:f8:3a:6b:07:06:65:3c:99:c3:16:ee:fa:1e:06:
b8:eb:f3:d7:3f:b4:08:f1:2d:c4:6c:0f:f3:1f:51:e7:dc:82:
37:63:6f:98:89:e5:09:e9:0f:8a:9e:16:61:83:31:dc:15:95:
65:dc:d8:04:ca:aa:bf:ad:c3:32:91:bd:be:aa:ed:24:44:19:
c9:c9:bc:ea:28:77:be:57:5b:33:82:e4:28:3a:b2:36:f8:4d:
36:e1:93:7f:9f:50:24:21:fd:c5:79:dc:7b:ad:4e:44:79:f9:
e2:5c:1b:81:6b:63:f4:6b:91:3f:e0:17:7d:6b:90:33:fe:86:
da:ef:d3:df:0b:50:a5:c9:c7:ec:9b:2e:19:ff:03:1b:ba:ae:
17:b9:74:20:0d:7e:25:a8:3a:06:c0:71:77:25:20:21:37:1d:
6c:23:16:ac:48:13:6f:39:cb:22:34:5f:e8:8e:d1:cd:f6:97:
78:99:a4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:26 2025 by rpki-client