Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1147b825-2f77-3f3f-b7a6-b72a3b8aaed6.roa
File: 1147b825-2f77-3f3f-b7a6-b72a3b8aaed6.roa (raw, json)
Hash identifier: Hbb9AflFBN0JK0l7Y/1o0v/NkYvP3eGQtZo/rErEcls=
Subject key identifier: D7:38:F0:CA:7A:2F:07:82:17:4C:54:F3:54:B4:3A:81:34:E4:70:70
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840729FA00BD729B7DC60004B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1147b825-2f77-3f3f-b7a6-b72a3b8aaed6.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.150.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:72:9f:a0:0b:d7:29:b7:dc:60:00:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=8243ae3e-5cf7-4963-9b52-362c844421f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b9:bf:87:49:28:fd:11:9e:f3:73:b9:f5:fa:
80:3c:0a:66:25:f2:31:5d:8f:74:79:e2:eb:33:16:
b2:8c:58:e8:3f:57:19:f5:fd:3a:19:e0:27:3e:02:
33:dd:30:97:0d:64:60:e9:b1:15:5b:bb:70:15:76:
97:2d:13:db:7f:de:1f:80:66:11:ee:06:79:f7:10:
e5:17:78:3f:23:36:2a:54:d7:c8:e7:ce:da:c7:e8:
23:8b:93:0b:95:a1:d9:b9:50:be:06:9f:84:4d:f0:
f5:5b:15:1e:48:5a:18:af:96:5d:77:78:82:50:bf:
2d:37:de:e8:76:a1:a3:0a:6a:49:12:d4:b7:a4:2b:
03:9d:6b:c9:20:27:da:a2:49:59:7a:4e:6d:85:11:
ce:7a:a1:33:49:44:fa:7f:88:4a:e3:93:13:14:4a:
37:9b:17:c3:85:47:df:f7:17:23:4b:9f:c3:90:cc:
54:f8:38:44:ae:06:82:45:07:8a:b0:df:91:6d:54:
fd:8c:8c:24:66:bf:bc:5a:95:f3:75:0a:5a:48:0f:
84:bc:33:0b:f9:c3:95:38:d9:06:d4:56:c5:c2:c5:
03:35:41:1b:96:fd:69:43:41:b8:02:ac:c6:a0:0f:
ab:90:e4:84:ef:da:90:cd:95:ca:ab:de:b8:9d:b6:
26:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:38:F0:CA:7A:2F:07:82:17:4C:54:F3:54:B4:3A:81:34:E4:70:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1147b825-2f77-3f3f-b7a6-b72a3b8aaed6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.150.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:55:a5:bb:73:5c:09:2f:b3:f0:a8:44:3d:c5:b5:5f:dc:88:
43:6f:67:9a:74:eb:53:e0:e1:d0:83:1c:dc:01:81:ad:a2:cf:
f2:b1:c0:b9:2c:02:13:65:ee:4a:3a:0f:7d:e2:a3:fd:09:a1:
f1:8d:a1:93:b2:60:19:2e:1f:20:00:44:b9:3b:57:ec:38:c0:
b3:02:4d:58:39:c9:eb:ce:9c:f5:dc:ea:4a:54:23:a0:df:18:
b8:90:f2:00:2a:da:87:62:b2:6d:87:ae:94:a5:3f:db:a6:6b:
56:2b:02:b0:9c:a4:a3:a6:f7:9b:8b:aa:34:97:a2:79:95:30:
bb:39:e1:8b:9c:00:1a:5b:b3:0d:0c:2a:dd:07:fb:42:bf:7c:
c7:07:57:04:1e:2c:54:fa:28:b8:eb:44:6f:c7:5f:29:cd:b8:
8c:c5:cf:66:72:d4:b7:94:73:e7:a9:81:68:33:97:61:a9:34:
fc:a4:70:f3:fe:dd:a6:7e:fe:f6:23:e2:02:14:0e:54:f5:db:
20:b3:96:c0:cb:78:6d:f8:78:8c:59:2d:f5:57:7d:af:ad:73:
65:64:59:96:f8:3a:d7:2b:bf:00:c2:0c:16:00:59:ac:34:51:
8d:9e:ba:34:61:4c:67:6f:4e:bc:22:32:0a:6a:82:fc:e0:0c:
da:d8:3b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:26 2025 by rpki-client