Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c431c34-8e41-371a-9c19-817e087e0984.roa
File: 1c431c34-8e41-371a-9c19-817e087e0984.roa (raw, json)
Hash identifier: Lu6vbt9MLVcDG6mKfv3n68U6EoQld3SAFlFpSakEsYw=
Subject key identifier: C1:D6:0D:8B:9C:DC:D6:7E:33:8F:B3:9D:10:DB:FA:99:67:CD:FD:58
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA43CE8C8FCD6E915DE362980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c431c34-8e41-371a-9c19-817e087e0984.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a4:3c:e8:c8:fc:d6:e9:15:de:36:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=1902bfa2-a171-476a-87a4-1cc1c8bd4dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7d:37:48:17:f8:be:45:64:c4:6a:bf:54:99:
a7:45:ec:56:e4:fa:25:1b:fa:24:f7:85:92:33:de:
e6:c7:31:07:c2:c7:d3:a1:4b:8e:a7:d3:06:eb:2d:
03:18:46:98:6b:d8:3e:56:a3:c6:1e:ac:d0:73:08:
11:c2:db:fe:35:79:e3:c5:ba:61:3d:6a:e2:fe:7d:
56:24:76:e7:1e:5d:3e:1a:2f:e2:87:e0:17:28:0e:
86:9d:60:e5:b6:d2:c1:3d:40:ff:c4:a3:b6:34:d6:
8e:b3:e1:db:e6:39:65:0b:b1:1c:29:7f:c7:28:18:
7f:5f:04:8d:72:2f:ac:de:08:68:48:86:ee:00:2e:
85:e0:b7:79:8f:0c:ef:4c:a7:58:cc:0f:c1:66:99:
38:58:59:23:67:3f:ed:bc:a2:d8:b7:21:c1:e3:19:
b5:3e:1f:10:85:47:70:bf:27:f0:64:59:5a:89:df:
48:76:00:bf:68:3e:91:8c:af:cd:33:00:dc:cc:eb:
a0:e9:de:cf:d8:fe:e9:ee:a9:b4:f2:f0:ab:de:1a:
af:40:d8:9e:d7:b8:c2:b6:61:1d:42:d1:ed:7a:c4:
6d:cc:6b:2c:da:a7:48:54:5e:31:e4:cb:f3:8a:68:
43:1d:59:da:40:4e:08:de:44:3c:cd:60:2a:20:c5:
e8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D6:0D:8B:9C:DC:D6:7E:33:8F:B3:9D:10:DB:FA:99:67:CD:FD:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c431c34-8e41-371a-9c19-817e087e0984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:5a:a2:78:cb:2d:f4:f0:8a:0a:42:3f:4b:0e:13:c6:76:9a:
62:6a:bf:98:3f:f1:63:60:29:93:14:9e:d9:6f:f5:7c:45:0d:
54:a0:09:29:6d:27:54:a9:61:b2:ac:91:e8:42:b7:fd:76:83:
87:4c:cc:72:12:57:b6:89:53:09:84:ab:50:ca:0f:0b:c7:14:
fe:a8:90:dc:cf:8c:9c:07:fc:bc:b7:90:db:7c:53:37:b3:60:
cf:9b:4a:b4:39:67:18:3d:b9:03:8e:a2:62:c2:4e:00:34:58:
f1:36:78:ca:3e:f5:96:a6:32:50:87:f5:56:54:20:b6:5e:66:
d4:22:5a:87:b3:89:8e:d2:2a:c2:98:0d:b5:f4:7e:d7:4e:fd:
21:a7:fb:6f:36:a4:d7:a8:d7:f6:82:fb:3a:c2:8a:b0:02:76:
54:33:78:df:9c:c7:57:c1:00:e9:30:3b:c5:93:68:c1:ac:d7:
7e:76:ba:0c:3a:23:f1:7e:3a:b7:62:0a:86:2e:4c:dc:77:65:
77:5b:de:c8:58:73:4d:0e:04:ee:d8:d6:0d:05:69:bf:5c:bb:
d7:fd:90:9d:f3:7b:b2:f5:60:08:66:18:8f:ee:a2:22:41:29:
b6:5e:b5:67:21:0c:97:cd:15:00:70:35:4a:87:2d:62:2d:fe:
32:d0:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:16 2025 by rpki-client