Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c76a664-f43d-3ac7-95d0-ea7a22bcc58a.roa
File: 1c76a664-f43d-3ac7-95d0-ea7a22bcc58a.roa (raw, json)
Hash identifier: f2b10EqfBxGYrXwH/Jh21YrGv6hkrP8wO9IrEP1lWMs=
Subject key identifier: 94:92:2B:E7:C5:04:10:FC:61:38:81:5B:40:37:C4:A9:D1:98:F1:2A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F0D391BBDE6AD8B77BFB44E40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c76a664-f43d-3ac7-95d0-ea7a22bcc58a.roa
Signing time: Sat 27 Aug 2022 12:00:00 +0000
ROA not before: Sat 27 Aug 2022 12:00:00 +0000
ROA not after: Sun 02 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.214.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0d:39:1b:bd:e6:ad:8b:77:bf:b4:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 27 12:00:00 2022 GMT
Not After : Oct 2 04:00:00 2022 GMT
Subject: CN=c5fa7209-9c9b-475c-b7e3-1a0a05dcdc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f5:1b:51:d1:67:f3:e9:dc:cd:bd:eb:23:00:
36:37:5b:b9:c5:ea:0a:29:59:29:30:67:fb:4d:29:
99:d8:5c:dc:97:d1:6d:af:11:8e:ef:b9:e6:57:13:
f2:44:60:80:ab:d8:f4:8f:8e:0f:61:a7:2e:7c:7c:
69:e8:61:e6:9d:00:da:37:47:7b:1d:46:cc:1e:3d:
b6:7e:79:d7:bc:eb:a4:a0:9b:87:8f:67:3c:24:86:
6a:11:72:90:12:17:72:c4:d7:61:cb:ad:9b:a6:ce:
8d:1e:49:e7:22:42:b1:69:45:ae:ed:a4:44:e4:21:
21:a8:45:4d:77:a6:d4:8a:44:11:2e:70:e1:01:5b:
ed:d0:b4:4d:e2:18:cc:cf:5e:9e:6a:cb:3c:7a:09:
64:c8:a6:52:7e:1d:e6:ff:51:03:f0:16:cc:07:e7:
7a:11:3c:22:8a:25:79:d8:b1:b7:e7:05:d8:ab:f4:
f1:8b:f3:3f:61:99:56:47:04:4a:98:33:cc:82:02:
a3:54:78:46:50:ce:2e:f5:30:c5:88:e9:c9:13:dd:
57:f8:23:e1:bf:bd:ba:a1:c6:8d:34:90:49:88:20:
7b:53:e3:25:24:15:1e:14:24:20:8b:6e:23:1b:c9:
f1:d8:06:c2:5f:98:80:aa:29:98:91:97:a4:11:b0:
74:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:92:2B:E7:C5:04:10:FC:61:38:81:5B:40:37:C4:A9:D1:98:F1:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c76a664-f43d-3ac7-95d0-ea7a22bcc58a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.214.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:86:3e:85:34:b7:ab:53:b7:e3:bc:78:0b:b3:a9:fe:02:67:
1a:3b:af:d7:5a:02:90:9e:f5:36:55:80:c1:c3:44:4f:ff:00:
2f:89:4b:ef:07:05:ac:18:e3:c9:f2:1c:03:32:44:6b:04:96:
10:ec:4c:b4:54:67:51:3d:7f:45:f8:06:5c:ab:7b:b4:b3:a0:
8a:47:95:d9:cb:80:fa:ff:d4:a7:ba:87:7f:24:d5:5d:c9:33:
36:d9:ef:05:4e:41:3c:0e:ba:96:0a:38:6a:03:3b:2a:46:c1:
c7:22:52:ab:2d:52:3e:ae:6a:8e:2b:6c:53:c8:0f:ff:17:62:
45:6c:4e:c3:8f:41:4c:6f:f2:14:25:a6:61:5a:21:5c:71:a6:
98:4b:96:81:d1:6a:b5:d8:a4:62:9e:47:e2:49:05:f3:26:e0:
d5:78:33:b8:6e:21:24:1b:3e:12:c9:f4:90:26:8c:ac:f2:cc:
3a:14:17:df:44:4b:80:95:5f:cf:f5:da:95:3a:2b:7b:f5:ee:
51:a6:48:e2:79:e1:e7:9b:9c:63:4b:0f:42:2e:d9:73:e1:55:
39:86:b6:3a:50:4c:41:69:8c:23:42:d6:b4:81:58:50:b2:ed:
55:12:fb:24:b6:1a:7c:e2:13:74:a7:d9:8a:ef:45:d9:02:28:
ca:6e:03:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:42 2025 by rpki-client