Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/285683a9-40c5-3193-993f-6356ad01d418.roa
File: 285683a9-40c5-3193-993f-6356ad01d418.roa (raw, json)
Hash identifier: ZJaCYwhwu3Pb3tNHTbfDX3SbWUZbMYq5wrv2uR7BN0o=
Subject key identifier: D8:B6:2E:90:D7:7E:2B:AF:2F:D0:6D:13:25:42:FE:CE:0B:6F:17:81
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404BA798BAB245FC3154760BC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/285683a9-40c5-3193-993f-6356ad01d418.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:a7:98:ba:b2:45:fc:31:54:76:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=7782d52f-62a8-4596-addb-57acfb9d4e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:99:88:d9:cf:1c:4c:3a:63:8a:81:63:7b:0b:
b9:56:0d:f6:c3:8f:59:d1:46:7e:2a:0c:66:2e:35:
0a:b3:75:34:53:b2:d4:45:f2:72:6c:3a:f5:4e:fb:
6f:f6:f0:8a:01:94:f2:f9:62:b0:ba:bb:74:1a:99:
e4:95:98:89:bd:ce:c5:78:67:4e:6f:b2:b8:3e:1e:
06:5c:6e:eb:08:72:bf:cd:27:d4:ca:dd:38:73:d7:
eb:67:e5:bc:7d:b9:c8:7e:3f:5c:86:86:4b:8f:c6:
67:e6:be:ba:ef:9a:1c:45:1f:cd:e4:3c:de:78:fc:
40:3c:11:f0:7f:46:25:ed:08:d6:de:c7:0d:32:c1:
ac:d0:c9:01:47:d0:fd:f7:65:2d:c9:f0:78:3f:ed:
11:96:38:37:f9:71:6c:f7:58:55:87:2e:5e:f5:2f:
12:7e:fc:cd:96:2d:3b:0c:50:f9:99:34:52:13:4b:
54:58:2c:72:ce:35:c1:e3:89:df:9a:a7:98:1a:ce:
89:75:c9:16:10:68:e8:33:3a:fc:1c:98:33:0a:d8:
be:0f:46:16:72:73:7b:5c:b0:e7:3e:00:bf:da:1c:
c7:93:f0:2d:86:a5:93:92:14:07:14:38:55:9d:bc:
d8:43:8a:56:ef:af:23:2b:a2:57:12:da:76:a3:01:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B6:2E:90:D7:7E:2B:AF:2F:D0:6D:13:25:42:FE:CE:0B:6F:17:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/285683a9-40c5-3193-993f-6356ad01d418.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:55:55:68:9a:87:33:9d:f1:58:d5:ef:dd:f0:9e:40:20:32:
14:56:b1:fc:a1:16:8d:f3:d1:f6:bb:8a:ac:99:4d:a7:fb:3a:
c4:07:ce:46:b5:95:fd:15:b5:a6:35:fb:99:12:34:42:ac:f2:
ab:64:cd:c2:96:1b:f9:4f:4c:2b:ca:a7:19:e4:96:83:51:c3:
9a:fe:b1:1b:5c:c2:57:07:84:63:d2:3a:7e:b8:6d:9f:a2:53:
5e:a0:76:af:2f:47:e5:25:9c:41:e1:bd:ad:8c:67:b2:4d:ed:
2c:c4:7a:a0:dd:93:5b:dd:f3:9e:b7:ed:87:fa:31:14:c3:e7:
a9:f0:0b:34:a0:38:ee:66:1e:e7:54:ae:f3:05:ef:18:c3:bf:
a4:b9:b6:04:cf:99:56:36:36:62:62:1b:f8:6e:b2:07:f1:ef:
23:71:85:92:ba:41:ee:f5:3c:a7:17:f3:93:e7:be:65:50:81:
88:74:06:03:0d:d9:25:d1:b9:a1:14:bd:8f:fe:9d:33:7a:11:
9c:93:54:c9:a1:2c:5b:d0:5c:ac:5f:42:81:a0:0e:e4:fa:28:
ac:15:88:10:ae:3b:f2:ff:99:a0:4a:ac:29:47:ed:1e:d3:03:
03:50:49:91:ac:bd:90:90:77:04:02:ac:6b:9b:e2:70:36:cb:
dc:33:a8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:09 2025 by rpki-client