Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f91a8a8-f842-3a27-b9c2-2b8c8182d32b.roa
File: 0f91a8a8-f842-3a27-b9c2-2b8c8182d32b.roa (raw, json)
Hash identifier: hVfxhYi68sG1FxTXSxvfFAFMtWYJ4hDzValDrFl/5OY=
Subject key identifier: 9A:C5:34:49:E5:C7:F9:1F:3E:29:2D:60:27:B2:D4:0D:E4:CA:AF:AD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6EA77ADA63E0EF919BEA4280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f91a8a8-f842-3a27-b9c2-2b8c8182d32b.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.204.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6e:a7:7a:da:63:e0:ef:91:9b:ea:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=1b7cadb9-ded2-47cd-a012-6f6383f8d543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:de:81:6a:87:8d:91:43:7b:0d:09:a8:7c:
98:cf:16:43:62:96:88:5e:0d:05:3a:cd:8b:21:4c:
b6:ba:aa:4e:f1:4f:3e:03:be:00:42:9b:3f:22:ec:
bb:67:a2:d9:d2:c0:ae:f6:1c:ac:d9:89:6c:c8:c5:
0c:ae:71:3b:18:55:bf:d4:b1:ab:55:e1:e2:10:21:
08:f6:e9:b7:71:e9:9a:10:82:1c:dc:2f:11:ca:11:
63:8c:fc:b8:bf:e8:ca:ec:66:67:d1:7d:57:ed:89:
58:c7:c0:ca:0e:ba:42:9b:08:88:dd:bf:79:61:61:
11:75:2a:ca:1a:2d:da:bc:48:64:0d:4b:c7:0b:83:
76:79:e5:20:de:0e:d5:66:4c:4e:4e:9c:8c:0c:8d:
a1:c3:24:dd:fd:3b:84:55:9a:67:1c:37:86:71:2d:
17:99:53:2f:68:12:98:3f:18:c5:ff:d9:c5:10:ae:
63:70:5b:2d:d5:89:2f:ba:ae:d0:85:11:db:73:92:
b6:49:80:22:5b:b4:f7:c5:70:52:4e:10:18:79:cd:
f9:4a:57:4a:0a:84:7f:a2:c5:01:49:5d:b9:b8:0c:
82:2a:77:69:83:60:7c:d7:33:47:c4:85:52:6e:b6:
19:8c:a7:9d:9d:51:e4:d5:41:c4:d4:ea:16:d8:28:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C5:34:49:E5:C7:F9:1F:3E:29:2D:60:27:B2:D4:0D:E4:CA:AF:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f91a8a8-f842-3a27-b9c2-2b8c8182d32b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.204.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:81:93:20:0d:e6:bb:7a:f3:b9:51:8a:ab:f6:16:26:cb:8b:
c2:7c:c2:71:3b:e3:f1:ac:18:09:ef:a8:71:ee:c4:cd:fa:9b:
bb:6a:f3:2a:c6:67:97:45:09:fd:68:c0:e1:fb:d3:1a:e1:9c:
11:18:c2:c5:79:a3:4c:b4:37:51:d8:1e:5b:4e:cb:59:53:ed:
60:3f:3f:8f:9f:41:7c:c5:ce:18:47:fb:2e:7b:5f:3e:de:2e:
91:d4:c4:a6:50:01:5a:86:27:37:ad:d8:94:d3:ed:b1:ae:1e:
83:bd:5c:f4:f3:2d:36:e0:d5:b1:7e:b2:2d:28:71:41:5e:e1:
ee:e6:91:b7:a6:30:79:f1:ff:18:be:2e:cf:13:6a:4a:9f:d5:
5d:d7:31:1f:a9:11:e3:99:70:be:ae:39:83:1d:bd:86:d6:ca:
02:ce:86:37:cb:f0:68:3c:2e:54:07:d0:a9:ef:3c:7b:45:69:
ae:e8:d5:c3:5a:e7:67:cd:90:ee:13:cf:b1:b5:74:95:d7:15:
79:36:06:8b:ec:1e:a3:4e:2d:4b:1e:a1:fa:68:61:42:91:44:
c0:57:0b:20:84:e7:a1:5f:10:33:f1:e2:78:2e:d0:9d:c1:52:
04:9d:2a:7d:91:60:a4:d0:ee:aa:66:73:51:34:44:8a:1d:d8:
2b:85:e9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:46 2025 by rpki-client