Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0fa99af0-610a-31b9-8db7-437cc2768dab.roa
File: 0fa99af0-610a-31b9-8db7-437cc2768dab.roa (raw, json)
Hash identifier: U+kEiYmvFXxoWU0wytpMyKlVv3oB3cTQ0u8BkhT/q30=
Subject key identifier: E6:1A:1D:D7:AB:BD:77:5E:59:ED:0B:35:41:F2:76:9F:FA:C0:D2:6F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E011980646D42D1DA451AB8C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0fa99af0-610a-31b9-8db7-437cc2768dab.roa
Signing time: Mon 23 May 2022 12:00:00 +0000
ROA not before: Mon 23 May 2022 12:00:00 +0000
ROA not after: Tue 28 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:01:19:80:64:6d:42:d1:da:45:1a:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 23 12:00:00 2022 GMT
Not After : Jun 28 04:00:00 2022 GMT
Subject: CN=ad13ceaf-d850-49ab-b376-dffa19b02c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9f:98:ae:1b:eb:da:dc:8e:91:aa:c2:b7:c0:
75:bf:3a:26:06:90:34:24:11:70:b0:90:08:1b:ff:
b7:73:8a:c5:e8:d5:21:e1:6d:86:ba:7d:0f:6f:3e:
c6:56:02:ed:30:3d:5d:8a:9d:3b:9c:32:23:d7:e7:
3e:7f:7f:7c:7e:2e:f0:8f:e9:fc:99:67:12:91:59:
44:8b:b3:de:ad:f1:b6:8d:e0:85:79:69:23:84:a7:
7a:19:ae:78:a8:ca:98:0f:d9:9b:3f:53:14:74:ab:
91:23:12:c8:69:d6:ec:64:fa:c1:dc:f3:d0:c0:01:
7c:07:a1:60:b2:87:78:dd:fc:52:50:2c:06:e5:fc:
dd:c5:52:6d:62:4a:8e:84:8e:3f:cc:30:50:3b:02:
5b:ba:e1:aa:bc:e2:fd:0c:31:ac:40:18:29:f4:e3:
2e:bd:82:9b:1d:8f:11:53:39:bd:f9:d7:06:14:9f:
61:ab:a6:e5:1f:7d:14:79:d2:83:04:80:4c:2b:31:
22:d1:d8:3c:92:f2:5a:ca:64:fd:90:fa:05:d3:ec:
8a:20:02:a9:be:da:fe:6f:75:5a:b9:f4:23:96:a7:
45:75:5e:f0:37:64:5e:a0:54:64:63:da:7a:d5:f0:
e0:8f:ec:24:52:e7:e7:4d:3c:81:ca:8e:a1:88:d6:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1A:1D:D7:AB:BD:77:5E:59:ED:0B:35:41:F2:76:9F:FA:C0:D2:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0fa99af0-610a-31b9-8db7-437cc2768dab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:f3:18:59:49:1c:22:b6:ce:d2:d2:2a:eb:50:7b:bf:bf:7d:
d3:55:65:d6:78:4b:0d:11:a7:4b:61:3d:ba:a9:65:5b:42:06:
d2:f3:b2:26:c0:97:b3:a0:c3:a2:8c:f2:19:68:56:bb:61:71:
6f:cc:ff:cd:9b:2c:38:02:bd:d8:86:6f:c1:45:75:54:94:12:
08:f1:4e:d6:8d:3e:c5:54:7a:ce:8b:45:be:ae:13:2d:ba:00:
79:88:07:24:6f:56:16:44:cc:6c:6f:6c:77:cf:75:2e:26:b9:
f9:34:bc:2c:fe:d0:fc:0e:7a:4e:55:6d:1b:a1:6c:a2:37:67:
19:dd:98:d1:9f:0c:9e:e0:f5:39:f3:e3:1b:07:a5:22:2e:98:
59:7b:93:81:5b:87:28:0e:de:f3:d5:56:ed:f0:74:2e:cf:4b:
70:6b:f5:d5:f5:5c:e6:7f:fc:d3:12:92:13:7f:ff:e3:1d:57:
18:fa:97:e5:85:a9:ae:93:bb:59:66:5c:4b:7f:d1:a2:e7:85:
33:06:47:e0:91:6a:b8:d1:81:0a:66:24:5c:d4:e5:55:0c:c4:
68:1a:32:0e:99:23:f6:58:d6:02:6c:ab:6b:66:6c:4d:2f:ec:
ca:69:9d:28:4d:71:9b:ee:dd:a2:9b:51:dd:2a:53:a3:c0:95:
e0:06:97:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:07 2025 by rpki-client