Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28ed3f5b-cf1b-32fc-bdd9-99cefaeae9e6.roa
File: 28ed3f5b-cf1b-32fc-bdd9-99cefaeae9e6.roa (raw, json)
Hash identifier: O2z5WK3dPE6C61oD6c9JwiRbAJKfqeXZe7F4fyMuaQg=
Subject key identifier: C0:47:38:7A:CF:56:69:7C:C4:9D:BC:BA:6C:46:38:36:69:6D:11:50
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584065B5F29C5558AB2AE51A5B20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28ed3f5b-cf1b-32fc-bdd9-99cefaeae9e6.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:65:b5:f2:9c:55:58:ab:2a:e5:1a:5b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=ee915cd7-f924-406f-86b9-9a7081ff69f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:f2:32:93:35:87:93:64:65:9b:75:33:91:
32:9b:0b:f0:04:93:38:a1:8d:5b:b5:35:d8:24:33:
6f:0a:5b:fe:0f:e8:e3:8f:0e:aa:73:0a:cc:ca:28:
81:7b:62:ea:aa:da:b2:c8:b4:dd:1e:c9:99:8c:96:
a7:fb:01:0d:bd:85:cb:9d:31:81:8a:25:6e:d9:27:
a3:7e:b0:b0:fc:f0:e1:60:da:5e:3a:fa:59:3e:5c:
37:7d:cf:d9:b4:ca:da:05:85:7d:53:fe:37:a3:0b:
9e:4e:d8:8a:d8:10:60:c8:e8:74:02:1d:7c:44:2e:
26:4b:84:f5:20:08:d5:c3:3b:2e:ce:21:d4:f9:91:
28:6d:68:9b:0b:77:cc:9c:33:56:e6:9d:d0:3a:8f:
86:dc:13:8a:42:08:38:52:2c:b1:f5:36:c3:33:29:
07:36:4d:67:43:ce:e9:6b:b2:6f:50:2d:44:d0:44:
71:92:bf:ae:50:da:92:bf:30:11:8a:43:8e:80:d0:
47:68:85:30:e5:41:16:22:fe:21:a5:18:73:96:e9:
25:35:d9:1d:a8:7c:66:f8:ad:7d:ba:6e:90:dc:f6:
78:55:9b:1b:9d:f8:bd:b9:16:df:32:ff:28:e9:ae:
2b:8b:c7:c4:67:78:59:5f:15:b9:53:30:68:fb:70:
03:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:47:38:7A:CF:56:69:7C:C4:9D:BC:BA:6C:46:38:36:69:6D:11:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28ed3f5b-cf1b-32fc-bdd9-99cefaeae9e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:08:96:ec:65:c9:2a:12:bf:9d:f7:5b:de:55:02:f4:1c:09:
4f:7e:a9:ba:2a:47:55:ad:bd:47:45:89:54:08:07:9f:c7:59:
c9:38:1b:65:c5:34:3d:22:b0:22:57:bf:1c:c0:b9:05:22:bf:
72:19:63:4f:6a:74:95:7a:d4:ac:b2:d8:db:1d:be:3b:41:e6:
62:63:5f:c0:df:ea:24:c4:cb:63:e3:d9:af:7c:22:ea:00:89:
af:6d:74:51:15:a8:dc:10:01:a5:09:c6:f6:d0:8d:82:24:78:
67:3e:0b:b6:c4:96:e5:26:c6:e5:38:be:ab:57:d3:2f:4f:fe:
39:9a:15:f0:c9:61:1c:01:62:e1:12:78:65:0f:13:32:31:58:
d4:41:31:cc:4d:d3:65:64:d2:02:ec:41:e5:02:db:2b:4e:06:
e7:88:29:de:86:2a:0a:48:fa:1b:e9:cc:46:24:29:7c:24:15:
a6:cc:1b:30:ba:8b:16:c2:a7:e7:75:66:a0:15:28:35:c9:5c:
bd:06:d9:61:5f:70:ed:3b:72:2f:a9:62:59:53:f2:57:0e:9a:
9c:2b:cf:08:6b:91:79:6e:55:49:9e:d1:23:49:37:62:e8:87:
7e:5e:95:25:5d:23:57:ad:53:ce:58:73:3f:be:05:45:83:21:
10:f4:92:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:28 2025 by rpki-client