Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d097efa-d1a7-3e9d-b700-07fe7de9ab2c.roa
File: 2d097efa-d1a7-3e9d-b700-07fe7de9ab2c.roa (raw, json)
Hash identifier: s2j8fX5LSwT79otq0pLwM3Py12+VU4BDkQkxe7o8kys=
Subject key identifier: 8B:59:E9:55:0C:2E:C5:E9:81:62:B9:19:40:69:6A:72:32:1F:29:F1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F5321CA5C3973CCC14867B780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d097efa-d1a7-3e9d-b700-07fe7de9ab2c.roa
Signing time: Wed 21 Sep 2022 12:00:00 +0000
ROA not before: Wed 21 Sep 2022 12:00:00 +0000
ROA not after: Thu 27 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:53:21:ca:5c:39:73:cc:c1:48:67:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 21 12:00:00 2022 GMT
Not After : Oct 27 04:00:00 2022 GMT
Subject: CN=ab9ca75c-656c-403b-8735-cf94a7d36f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:fe:4a:75:49:e5:8b:a8:48:1d:86:a0:47:
fe:23:e9:a6:e3:78:f3:54:e7:d5:77:5a:28:88:0a:
ff:dc:2b:cd:ae:f5:fd:4d:95:af:98:33:85:b6:8e:
d6:fd:cc:da:83:52:35:06:74:aa:52:45:78:40:6e:
cc:e6:86:32:e7:54:02:35:04:c1:90:e4:09:77:5c:
e3:ff:15:f1:4f:10:50:3b:81:c7:d6:91:8e:d2:2a:
e8:1c:72:a1:11:be:23:0b:33:35:1c:5b:52:ab:5b:
55:ed:60:08:c4:5a:df:5d:ea:f0:e9:d3:b6:bf:3b:
aa:5c:13:d7:7b:f3:a3:cb:d4:e4:19:d3:d8:7a:bd:
bd:9c:ac:a6:12:15:48:8a:1d:8f:10:2a:a7:45:d6:
64:a0:c2:e6:c3:1b:2f:d4:86:fd:9f:94:c7:36:46:
56:31:1f:aa:97:f0:eb:4f:52:50:b0:f5:53:c6:74:
f8:91:60:ad:c4:5c:56:a8:d0:73:f4:44:80:a9:56:
34:54:fe:b7:a4:92:d1:4a:90:6a:62:5c:9c:0f:cd:
77:12:60:ca:71:2e:2c:12:1e:5b:9c:d0:ff:54:e1:
02:0c:0a:8f:64:2b:0e:68:5e:67:07:17:ae:55:75:
57:80:0b:51:34:bd:2b:27:18:dc:17:30:96:7a:ef:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:59:E9:55:0C:2E:C5:E9:81:62:B9:19:40:69:6A:72:32:1F:29:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d097efa-d1a7-3e9d-b700-07fe7de9ab2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:2a:58:51:d6:6d:7d:41:e9:4c:84:d3:20:34:3e:c8:4a:0e:
81:d1:e2:bb:d4:f0:cb:bd:79:d1:c5:31:ed:3f:cf:e4:b3:45:
4c:3b:82:d8:a4:10:70:92:db:13:86:b1:15:c6:a5:e1:e2:ca:
b7:2a:65:17:74:17:56:c5:ed:05:a1:97:64:bf:11:14:88:27:
de:97:f5:c4:95:04:fc:8c:fc:f6:90:c2:f7:91:23:6f:77:2b:
ba:55:d0:28:b7:6f:98:20:40:7a:38:a4:fc:58:85:48:c8:13:
f4:b0:04:4e:44:5f:0c:a2:80:42:f8:62:64:66:b9:28:bb:1f:
a1:ba:2b:d8:28:9e:33:27:03:99:fb:bc:8f:43:7c:f5:da:3e:
4d:fa:c5:3f:c4:0c:58:b8:0d:d3:9f:8f:b6:09:de:90:6d:82:
f7:38:4f:96:33:8d:ab:1b:53:b4:d7:13:64:c3:ef:b3:da:24:
4f:71:15:89:44:22:2d:da:ae:3c:ae:1d:a2:35:1a:88:65:0d:
03:6a:a1:de:f5:2b:2f:58:63:a2:8b:3d:42:e0:22:50:3c:07:
56:65:8a:05:a8:22:77:56:05:57:e3:54:92:58:2a:bf:bd:1b:
0f:d9:08:7f:61:c4:26:f1:af:38:e8:e6:e2:99:b5:90:20:6d:
10:33:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:46 2025 by rpki-client