Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f2197be-f6df-3d51-a398-02bb473bdeb9.roa
File: 1f2197be-f6df-3d51-a398-02bb473bdeb9.roa (raw, json)
Hash identifier: aqy9GHLNFrFUXGX5P9WBuZs6GLu5LtVa5rbkt3++2tk=
Subject key identifier: 51:43:57:85:90:74:A9:E4:D5:A8:E2:82:5E:A9:C7:D6:E3:20:71:84
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584064CF32091384069CD45CE400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f2197be-f6df-3d51-a398-02bb473bdeb9.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:64:cf:32:09:13:84:06:9c:d4:5c:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=ef157e5c-418d-4937-bbbf-13f3eee5d844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:30:6b:33:52:45:2f:fc:6b:f2:f0:24:7f:
e6:fd:a4:1d:00:bb:e1:de:58:cb:76:a9:21:9e:70:
ad:34:ad:e4:3d:be:90:a6:dd:ee:53:bd:c8:a5:0c:
30:e0:b2:4f:89:a3:a3:9b:eb:be:3d:ce:ef:76:dd:
1c:b3:43:1a:c4:a6:69:25:ab:2c:7c:e9:09:4c:23:
ac:df:78:0c:f0:a4:6c:32:cb:dc:88:53:ff:18:37:
2b:2e:e9:a0:2a:dc:cc:83:56:5f:18:3c:6a:d9:f4:
70:d7:ed:ff:cf:07:22:69:c6:4f:2d:52:73:bb:10:
32:96:81:f9:65:2c:0e:1f:b3:6e:e8:23:19:a5:54:
23:a0:8e:08:70:ec:aa:fa:4c:d4:ab:c7:3a:b9:b7:
a7:f8:c7:a3:01:d8:96:57:06:a4:f8:8e:77:b2:fe:
61:e5:6c:c2:f6:9f:4b:4e:3c:73:c8:4c:11:a6:56:
43:59:98:fa:65:66:11:93:cb:3f:49:4a:22:74:63:
54:d1:7e:56:02:94:4a:50:f8:96:53:dc:19:33:6d:
06:29:d0:ee:e1:8e:e8:75:c9:36:8d:50:52:8b:fe:
67:de:b6:4e:31:ea:9b:59:fe:1b:b3:e7:f9:a4:51:
4a:b3:a7:d7:dd:35:06:c2:1e:4f:60:77:88:fa:2b:
2a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:43:57:85:90:74:A9:E4:D5:A8:E2:82:5E:A9:C7:D6:E3:20:71:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f2197be-f6df-3d51-a398-02bb473bdeb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:94:05:a5:7e:06:d0:3a:7f:b2:50:aa:71:f1:7f:38:3b:bc:
b6:71:9b:fa:3c:14:13:b7:65:04:15:ff:b8:54:57:76:fc:91:
1c:0c:a8:a0:76:45:25:a4:55:8b:c4:bf:0c:d0:8e:5a:74:c1:
fc:8f:37:2d:88:ac:13:4c:51:8d:3d:1a:6b:9d:e2:5c:57:bf:
20:52:c2:c8:f1:39:a5:5f:26:13:85:c3:6c:6f:75:fe:e9:43:
0f:8e:31:2b:e8:32:f4:8d:58:68:67:c3:cb:45:88:1b:63:16:
66:42:ba:ac:34:c6:5a:ca:05:f0:b2:28:cf:d9:7c:c3:48:f9:
32:c0:29:d2:b0:2c:bd:35:e4:9f:5f:8c:c6:f6:5a:13:20:5d:
04:77:4b:e2:81:d6:bb:0b:71:5e:af:84:5e:13:4d:92:85:ad:
c4:8c:7b:83:95:90:1f:d0:2f:d2:59:ed:22:f9:6e:63:7c:49:
8a:6a:52:aa:d8:66:13:b1:20:3a:e1:52:09:47:bc:5c:18:da:
0c:11:88:b2:15:e8:dd:a1:6b:03:fe:c5:e8:d4:34:41:20:bd:
3a:f6:56:b3:60:29:24:b3:fd:5b:72:60:4a:46:b1:66:75:20:
fa:48:1b:b3:3a:3c:a9:f0:2d:0e:1c:49:20:6c:59:6e:4e:ef:
dc:f9:2e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:31:05 2025 by rpki-client