Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21369aef-844e-3e6d-93e0-4a5e85a6f44f.roa
File: 21369aef-844e-3e6d-93e0-4a5e85a6f44f.roa (raw, json)
Hash identifier: t4Rhrj67XvRQwTbkAVCmKCoTaQTBbyhxxjjT2JhCcBQ=
Subject key identifier: 2C:00:0B:EE:A7:C1:71:E9:7F:B1:B7:A6:30:0A:44:AE:FC:40:5C:4E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6EA7ADBD9A7033B11319A6C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21369aef-844e-3e6d-93e0-4a5e85a6f44f.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.214.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6e:a7:ad:bd:9a:70:33:b1:13:19:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=5c0ba11a-d3e3-445a-9f1e-49731e72622b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:59:ea:07:4f:f8:90:dc:79:7a:39:d5:ef:
7a:d0:10:ac:6a:22:c9:ea:aa:af:f0:4b:90:23:89:
72:47:54:78:c3:56:8a:69:77:5a:6a:58:78:f9:92:
90:3e:c5:06:2e:3f:b4:bf:98:fa:c5:b0:5e:58:de:
c1:5c:c5:dd:a1:64:c0:e5:b6:76:55:51:41:4a:58:
45:10:db:cd:28:1e:4e:0d:53:13:b2:b4:89:84:84:
e5:aa:99:b5:3d:4b:61:3b:30:4b:d9:ca:38:8d:16:
89:0e:0c:51:09:61:40:c9:60:12:81:8f:79:22:2d:
c3:6a:0c:e8:9f:75:50:a2:d8:63:29:8f:a1:e4:14:
17:15:a4:b7:50:e1:7b:d8:fa:59:26:5e:ad:76:42:
2b:cc:32:da:92:5a:d9:a8:6e:97:1c:dc:7d:06:e2:
d8:df:bd:68:0a:75:da:c1:b7:6e:62:0c:86:d0:ee:
7b:ea:87:45:69:b0:b2:72:a1:e5:f5:5b:f2:d6:be:
54:b1:ff:a9:09:be:79:e3:fd:33:6e:03:da:e2:7b:
0b:fc:36:30:a5:91:3d:f5:93:31:79:be:5a:57:46:
d2:22:b3:70:52:21:e8:90:ce:93:aa:36:47:63:6d:
81:e6:5d:5e:ba:46:69:a1:62:6f:e9:af:9e:3a:61:
50:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:00:0B:EE:A7:C1:71:E9:7F:B1:B7:A6:30:0A:44:AE:FC:40:5C:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21369aef-844e-3e6d-93e0-4a5e85a6f44f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.214.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:87:df:9d:01:83:4c:cc:46:21:39:f4:c5:a4:40:98:01:c0:
a1:af:3b:43:49:67:df:bb:ab:12:ea:ff:0c:57:fd:08:b6:a9:
be:f7:1f:02:75:6b:14:13:b2:10:a6:13:18:5d:9b:14:b1:f8:
ef:35:b2:ad:be:53:d8:bd:19:d7:7d:0a:74:15:22:07:04:a1:
db:c0:dc:3b:37:71:18:0d:e3:a3:a8:f8:da:ee:00:2d:e0:6e:
92:7e:59:05:93:90:e7:01:e5:91:86:a8:ca:dc:45:46:ff:ed:
ed:03:56:b7:d9:81:59:df:7c:a2:12:b7:2e:95:40:99:14:b2:
31:2c:49:25:b0:82:b1:6b:c3:59:fe:96:02:ed:d9:c3:e0:ce:
52:18:5a:77:19:ef:8d:71:e6:12:62:40:d4:50:67:d6:09:f2:
37:7d:97:d4:7b:21:63:6a:ae:ed:ce:68:3c:b4:e8:a6:c1:bc:
be:1f:f8:44:70:8e:f9:5d:ad:84:e7:6a:37:ae:eb:2f:cd:bd:
17:30:e0:34:65:7f:ea:b9:28:53:92:2c:b5:39:21:da:fa:44:
df:a2:65:60:a7:87:b2:db:35:65:bb:9b:9d:68:d1:cf:e0:c3:
96:d9:26:02:bc:4c:6f:3c:6e:2c:fd:3c:d4:bd:a8:15:2b:68:
49:81:bd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:47 2025 by rpki-client