Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16bdfbbf-8fea-3bb7-836f-5be453d573ca.roa
File: 16bdfbbf-8fea-3bb7-836f-5be453d573ca.roa (raw, json)
Hash identifier: io4SEYRehrAGJccxqZWypd5eI/y3A2oGGrQLIxWpmQs=
Subject key identifier: 57:7A:E4:FA:9B:31:F7:25:A3:16:14:0D:07:72:45:F5:90:77:03:20
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403AE044AE6D81010DD993ACF0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16bdfbbf-8fea-3bb7-836f-5be453d573ca.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 146.167.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3a:e0:44:ae:6d:81:01:0d:d9:93:ac:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=1ca5ba61-289d-423c-8df1-4c6965630af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:c7:eb:a2:1e:25:48:61:e1:19:9c:4f:95:
72:ee:0b:75:53:f5:3f:10:06:5d:56:59:5e:83:b1:
95:c0:c0:61:08:99:aa:45:87:86:c7:13:f0:8e:10:
99:fe:cf:04:ea:54:25:85:25:71:03:cd:93:99:32:
00:d6:56:de:62:87:0e:e6:30:8f:c7:cf:49:23:70:
93:e5:c9:69:8f:1a:7d:21:0c:50:9b:f5:88:7a:b4:
89:29:85:5a:7d:58:9d:a6:1c:2b:5a:74:9f:60:17:
a6:be:4b:e2:51:4f:fa:c5:ee:0c:ed:77:21:af:aa:
42:f3:e9:10:3d:a1:37:50:32:02:07:3f:3e:a2:ef:
b8:2e:bd:a1:e4:39:47:05:53:44:ba:a1:84:f6:09:
49:10:f0:9f:44:1e:61:b9:8b:6d:ae:69:27:11:f3:
2a:f0:4d:37:d0:83:62:28:2a:66:1e:66:9e:5d:a1:
e4:09:25:4d:9f:33:01:97:09:14:16:3d:51:78:c7:
58:ca:d8:a7:45:f1:b1:99:db:b0:bf:b9:e6:e7:e5:
1e:a8:9a:3d:f4:39:2d:3f:63:cd:c4:5d:ec:ca:67:
7c:85:05:ff:ad:19:29:14:6b:18:9a:35:c7:7d:2d:
ec:60:07:4f:bb:db:da:72:aa:d1:77:81:af:09:eb:
0b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7A:E4:FA:9B:31:F7:25:A3:16:14:0D:07:72:45:F5:90:77:03:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16bdfbbf-8fea-3bb7-836f-5be453d573ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
146.167.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:00:0d:b7:8f:2b:b2:e8:c6:ae:a8:66:9c:cc:9b:dc:5c:d4:
c5:1a:0d:1f:07:18:ca:fc:2e:e9:cc:14:b6:15:eb:5f:3c:f2:
3c:b9:c5:87:39:3b:b1:32:b5:87:1c:8b:60:f3:0e:4e:39:ae:
e5:2d:d2:dc:77:c7:5a:da:f8:7e:2a:3d:9b:8c:53:45:03:86:
cd:bf:71:b0:ae:14:23:6c:3b:af:02:39:53:ad:dc:79:6f:d5:
3e:f6:7c:dd:64:11:4e:23:5a:e5:0f:3e:54:83:f8:6a:80:8b:
46:8a:85:2e:9a:db:ba:f1:d7:5b:25:75:f6:70:e1:2f:88:be:
ec:99:d9:e9:3f:3a:34:74:85:3c:02:98:e0:5b:a9:46:b3:ba:
9d:05:8e:54:18:85:2b:d4:4d:89:ea:61:53:14:c9:18:d0:2a:
75:a6:9a:36:6a:2b:56:13:c4:6b:58:bb:8e:40:8e:8a:b5:b1:
61:07:1e:04:16:2e:2e:80:6b:00:c0:c4:c7:ab:de:c0:d0:84:
3a:2c:23:a2:6f:84:33:c5:23:72:84:fa:eb:1e:4b:68:91:55:
59:cd:08:bc:8f:ec:6c:1b:c0:6e:2a:85:12:d4:df:b7:bd:ca:
77:d5:e9:d9:e0:f8:0f:33:2c:76:2b:d6:5d:e9:e8:e4:3f:fb:
be:fe:0a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:46:18 2025 by rpki-client