Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ebf6682-5de0-3ffc-a0ac-1c4aaf93ec1d.roa
File: 0ebf6682-5de0-3ffc-a0ac-1c4aaf93ec1d.roa (raw, json)
Hash identifier: SIWQhxAOMADmXKlKNcufYQCNuHcM/KNVZiaiYPWLDKw=
Subject key identifier: 18:A9:EF:09:63:71:06:12:4C:A7:66:FD:C6:9C:FC:3C:4E:B9:63:1C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840168DABFA7BAFC8C4B3ED59C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ebf6682-5de0-3ffc-a0ac-1c4aaf93ec1d.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.119.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:8d:ab:fa:7b:af:c8:c4:b3:ed:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=126fae3a-a4ee-4691-8779-ce992446c976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:92:ba:6e:97:2f:0e:c5:be:6e:a7:cb:43:
54:27:89:9b:77:7f:ce:3b:b4:4d:89:f8:07:a7:6e:
84:42:86:61:cd:df:9b:1e:20:42:e6:e8:68:9c:be:
ce:0d:56:0e:e2:9e:e3:a8:4a:d9:b5:63:50:c1:52:
15:ac:ca:b3:86:f2:b1:f9:00:55:ab:c3:5b:76:b3:
db:75:0d:19:fb:01:14:83:4c:7e:cc:c7:01:15:87:
12:4e:7f:a7:c3:18:01:9c:45:ec:9a:89:32:84:24:
d7:fd:69:24:18:54:33:b8:a7:a3:6b:9c:70:23:0f:
69:08:a6:48:c5:bb:c8:7b:41:aa:e2:17:79:0e:5d:
5a:3f:7b:0a:6f:75:5b:4a:99:ab:8b:5d:df:5e:e9:
52:b8:c8:ee:23:0f:16:34:66:72:78:67:d9:70:ad:
84:9a:93:fe:ee:ef:f4:b8:ed:d0:63:b5:c1:83:62:
82:09:17:5c:b3:d5:27:97:d6:df:13:8e:76:05:4d:
b3:6d:30:d3:c2:eb:2e:61:06:11:71:a8:c2:16:66:
39:8a:79:f2:42:b6:7d:21:3c:62:e3:9c:41:67:97:
d6:0c:58:35:96:4c:10:1c:eb:16:2b:09:94:b6:67:
24:30:06:ee:09:09:b1:07:7a:50:e9:26:57:f5:2e:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A9:EF:09:63:71:06:12:4C:A7:66:FD:C6:9C:FC:3C:4E:B9:63:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ebf6682-5de0-3ffc-a0ac-1c4aaf93ec1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.119.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:98:a6:90:d4:c2:6f:c8:c3:10:66:6f:27:4c:09:a2:0f:64:
e7:ec:64:40:2f:50:b5:61:d9:da:b4:d2:22:31:ca:35:c7:69:
b8:62:cd:04:e4:10:a7:25:21:aa:50:3c:7a:58:53:86:ce:2f:
10:78:ef:d3:73:4c:91:a5:34:c0:fd:c6:f4:74:0c:d5:6e:aa:
1c:e4:7f:71:eb:38:8b:3b:42:99:63:8a:07:05:90:06:a7:51:
64:e4:f3:37:44:9d:b9:2c:ba:2a:94:80:d5:9e:33:49:6b:ca:
70:d2:0d:bc:d5:57:3d:1b:55:e7:61:9d:c0:12:e3:d1:00:8b:
73:78:ad:34:72:c0:20:8b:ab:50:b1:0f:9c:c5:54:5d:4e:a3:
0b:48:b0:e6:68:4d:31:a5:e2:1f:32:5f:25:20:3b:92:58:3e:
49:35:1c:63:1e:8c:f3:b8:14:39:c5:f7:b8:01:7a:1b:af:97:
bf:bb:f1:c8:d2:52:1b:35:7b:22:df:d7:fc:29:fa:9c:f6:73:
fe:bc:90:27:b5:a3:84:84:d6:14:be:14:4e:b6:62:c3:e1:f3:
81:2b:4b:76:50:ee:1b:21:a9:3e:ba:20:9f:34:2f:32:be:17:
26:d1:5e:5f:35:6b:f0:d5:17:ee:cd:9e:11:e3:1c:5d:49:d3:
ee:e9:5e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:18:16 2025 by rpki-client