Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c007e24-80f8-3f52-9005-c03b6261a4ba.roa
File: 0c007e24-80f8-3f52-9005-c03b6261a4ba.roa (raw, json)
Hash identifier: CrOtSHOUbnIKmCqvxN7qNbpMNwjJLWeTsJuZ2rrNZTE=
Subject key identifier: A9:CB:D0:AD:28:59:68:71:07:1B:68:0E:B3:D7:0A:66:0D:DD:17:E1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408EBE9620E8F11922E739B100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c007e24-80f8-3f52-9005-c03b6261a4ba.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.124.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8e:be:96:20:e8:f1:19:22:e7:39:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=cf275d11-9461-4b68-96b4-123da1acc8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:94:4d:88:df:9d:70:38:e6:7f:d9:29:1f:
98:08:e8:bb:33:6b:b1:60:eb:16:7a:b9:3a:94:81:
83:53:49:f6:ea:93:3e:94:92:25:e8:a3:42:45:5b:
7c:bf:f2:c5:31:b0:3d:a3:fb:e4:bd:ac:3d:97:43:
8e:69:33:f0:94:50:02:f8:99:77:54:41:c2:1e:c7:
d3:20:74:e2:e1:e6:9d:a7:72:2a:8a:60:ce:c6:dd:
80:03:22:fd:6d:33:c7:1a:5e:d7:15:54:ee:1e:ec:
c3:5e:94:f6:61:2d:65:77:7c:8a:4d:40:b3:71:52:
b1:fc:00:8e:46:4c:a4:29:7e:0e:b0:ec:bc:f3:fe:
df:11:3c:1e:01:06:58:f4:9d:bf:06:14:a3:3e:46:
e1:cf:ba:e9:98:7f:05:9f:ee:9c:16:72:25:e6:c9:
f9:a1:9b:f8:c4:a0:e2:f8:d4:80:c7:8d:d3:56:c8:
e9:08:80:4e:b1:01:a7:c3:a9:f2:52:3c:26:c3:28:
9e:7c:77:2f:32:bf:d0:63:ce:bc:a6:d0:fb:07:08:
93:b4:45:45:76:4a:d8:cd:78:bc:ab:04:be:67:f5:
2d:c9:2e:19:2b:93:8e:3b:07:aa:cd:a3:85:83:60:
a2:19:4b:3c:fd:c6:cc:24:7e:b1:76:08:7a:8d:1d:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CB:D0:AD:28:59:68:71:07:1B:68:0E:B3:D7:0A:66:0D:DD:17:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c007e24-80f8-3f52-9005-c03b6261a4ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.124.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:61:de:dd:51:f0:0f:53:f4:eb:b9:bf:36:58:2d:8d:c1:99:
82:b1:22:6d:d6:96:01:de:95:b9:e0:66:b4:85:53:18:1e:a8:
e1:20:71:ea:f4:95:26:cd:ea:56:9d:b1:c2:ab:64:05:2d:26:
a4:37:a6:af:8d:70:04:5f:46:e3:f9:45:de:28:cd:0b:f5:58:
2d:14:41:7c:6e:48:92:33:96:45:ba:ec:54:5a:b8:a7:bd:dc:
19:b1:12:d7:a0:a0:56:02:00:e7:c1:24:58:b1:9a:25:46:57:
49:9d:ba:c6:f5:a2:8d:92:c2:e9:2b:d3:33:e4:b2:46:6f:cc:
0f:01:a6:97:19:08:20:ad:27:32:56:84:bb:a3:5a:a0:0b:c8:
c8:0f:74:6f:64:95:d8:13:2b:e3:8e:47:e4:80:fd:10:ba:fe:
71:e1:1b:8d:f3:d5:90:7a:ea:09:4d:7b:f1:75:61:9e:81:52:
14:47:59:d0:1e:76:1e:53:9b:4a:60:4d:c4:77:9c:77:c2:be:
a7:a0:99:4f:0f:81:06:50:bb:66:ad:d8:ad:39:f4:89:e6:f0:
14:32:76:ca:29:57:40:54:86:3d:9c:5e:9e:5d:8e:be:4a:f1:
1c:8e:b2:51:2f:11:c4:25:06:85:a9:14:1b:21:e4:5c:db:66:
3d:a1:6f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:11 2025 by rpki-client