Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2873b30a-737b-3909-bd80-8e5b33fa0b4c.roa
File: 2873b30a-737b-3909-bd80-8e5b33fa0b4c.roa (raw, json)
Hash identifier: 8CTTh0U7OHFQlD5Tun74hsTfWOECC3bTNmSLQAac+cw=
Subject key identifier: D3:57:B2:22:A5:38:B9:86:71:DC:46:D3:03:66:7A:F6:29:00:40:54
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D16477EE414E491FD9B187940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2873b30a-737b-3909-bd80-8e5b33fa0b4c.roa
Signing time: Tue 01 Mar 2022 05:00:00 +0000
ROA not before: Tue 01 Mar 2022 05:00:00 +0000
ROA not after: Tue 05 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.74.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:16:47:7e:e4:14:e4:91:fd:9b:18:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 1 05:00:00 2022 GMT
Not After : Apr 5 04:00:00 2022 GMT
Subject: CN=8761d4c3-5942-412b-9e59-157d01bb4fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:5d:dd:68:54:c2:6f:28:1a:3c:43:cb:96:
91:7e:7c:fb:d3:cc:9f:06:a9:79:9e:36:0f:ed:00:
35:a1:ca:f3:35:a0:8c:1d:c3:29:ed:42:40:f1:05:
07:8f:a7:05:8f:e6:c4:c7:26:20:56:d8:73:b6:82:
39:b2:17:c0:0b:db:b1:00:bc:d8:c0:aa:cf:df:70:
28:8e:a5:b3:f2:84:85:71:e0:72:30:71:a3:b9:17:
00:90:0c:25:c9:3b:29:45:55:68:6f:4e:15:a7:f4:
bd:24:54:88:7d:7a:b4:4d:bb:bb:e4:9e:00:37:00:
f6:8f:72:37:19:00:3a:d2:f4:24:48:1d:58:56:47:
a3:94:e4:15:71:3c:b5:3f:37:2b:ce:ac:0a:b5:0e:
47:b0:c9:c6:df:3c:4a:b4:2d:b1:b9:50:dd:31:4e:
ae:c0:dc:53:6c:65:10:9b:f4:8e:b3:11:3f:c4:b5:
a9:ce:4e:66:7e:43:71:f1:da:1b:5b:ee:e3:89:ff:
51:0a:a4:4c:27:48:46:35:a1:0f:30:cf:f5:7a:00:
d3:b2:6e:e7:44:f0:f9:32:19:2e:4e:4d:1b:19:24:
e6:29:c9:40:c1:6c:a7:a0:66:c6:38:31:7b:6f:7a:
52:bd:f2:a1:9a:77:5d:59:2b:b9:0f:76:93:97:65:
69:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:57:B2:22:A5:38:B9:86:71:DC:46:D3:03:66:7A:F6:29:00:40:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2873b30a-737b-3909-bd80-8e5b33fa0b4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.74.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:1f:4b:f7:f1:12:cc:7f:20:00:8d:bd:6f:8b:29:b9:85:b4:
cd:7f:81:b5:a1:0a:1a:ee:c4:d2:f3:dd:07:99:3c:0c:70:05:
96:1a:e1:63:74:cd:be:f7:2d:66:59:95:34:81:44:0e:03:35:
08:b6:d4:7f:48:3d:87:a5:c6:d8:2a:93:37:0b:06:06:b1:fb:
1d:18:f5:84:6e:ab:fe:6a:f7:4a:dc:4f:81:a8:19:ed:87:70:
76:81:f5:20:aa:6b:d9:d0:8f:c6:a1:9e:8f:26:ff:57:0f:a0:
3b:7f:70:d3:fd:72:ee:3b:52:fd:71:0e:be:6f:db:5e:ff:bc:
6b:93:5c:f6:fd:39:6b:e0:11:d8:c9:78:1b:6e:1c:b8:b5:79:
f8:02:ce:a1:d0:f3:08:ca:aa:a8:0e:f9:c6:02:53:5a:1c:e5:
96:fd:ff:93:e5:76:8c:b0:c2:8f:7a:40:a1:79:c3:03:39:e9:
15:fc:0f:e8:a9:56:f1:bc:91:70:5b:a8:37:35:50:d1:ec:1a:
23:aa:f0:c7:d0:e9:57:ae:02:25:c4:8f:3a:07:fd:37:bd:2b:
67:87:b4:ad:0e:9a:11:c8:04:5e:71:25:47:f4:18:0b:d7:45:
b0:a0:ad:85:e8:40:fe:0b:f4:15:9a:20:b9:4f:c3:33:e5:d8:
cd:96:ab:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:26 2025 by rpki-client