Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fdf0c25-2bcb-3e34-a758-551a23fa0844.roa
File: 2fdf0c25-2bcb-3e34-a758-551a23fa0844.roa (raw, json)
Hash identifier: xqBYqAUYl+eHbfSjWo3+Z/SDeszREWkHOlFjFSGuRnY=
Subject key identifier: 8C:6C:BF:2F:A8:26:13:0B:98:E8:4E:1D:E4:ED:59:1D:1A:67:75:32
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D9078903BB6FB3998D8FE9CC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fdf0c25-2bcb-3e34-a758-551a23fa0844.roa
Signing time: Wed 13 Apr 2022 04:00:00 +0000
ROA not before: Wed 13 Apr 2022 04:00:00 +0000
ROA not after: Wed 18 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.146.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:90:78:90:3b:b6:fb:39:98:d8:fe:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 13 04:00:00 2022 GMT
Not After : May 18 04:00:00 2022 GMT
Subject: CN=1ac8a04c-a198-4d3c-b506-68719a4911fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:bc:64:60:c3:94:42:6d:a9:98:26:64:6d:
65:6a:78:01:66:c2:07:53:6c:b3:f4:c1:2e:21:10:
c0:65:69:aa:d6:c6:c8:6b:8c:1f:05:6b:c3:77:44:
24:0b:f4:8f:89:86:0d:39:66:cf:d4:08:5f:3c:3e:
1c:da:62:88:3f:38:bc:d4:95:80:c3:1c:1a:74:6c:
52:c9:12:41:b1:b8:4d:58:f2:ee:48:99:8f:a0:ad:
d3:88:48:d5:5d:25:53:b6:9f:f0:7f:89:af:49:ed:
d9:1b:ea:a0:a3:7b:59:3f:3e:4b:7a:72:19:8d:70:
42:5f:47:91:32:94:8d:37:a0:0a:98:58:de:70:be:
5a:c4:d2:8a:13:21:ac:30:39:0c:61:0c:81:21:d5:
96:ee:58:5f:78:b2:86:0e:24:16:83:64:54:63:8c:
b1:7a:5d:4c:3e:32:d5:4f:42:62:e2:63:97:00:e1:
50:3c:bc:d4:4b:fc:3a:04:2a:55:4a:9b:de:33:22:
26:9d:f2:33:b7:fd:89:ba:f0:87:99:25:bc:89:42:
0a:a3:12:4b:98:71:22:e1:54:bd:39:94:1b:af:09:
4d:13:ba:fc:df:e2:83:91:13:c4:ff:fa:5a:02:a1:
e9:22:35:01:c4:63:21:c3:80:c8:f7:0e:c1:f3:f6:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6C:BF:2F:A8:26:13:0B:98:E8:4E:1D:E4:ED:59:1D:1A:67:75:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fdf0c25-2bcb-3e34-a758-551a23fa0844.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.146.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:d8:d6:93:18:3d:98:21:9c:cd:23:c2:31:1d:98:5f:a6:1b:
4c:24:80:2a:65:71:85:31:aa:46:4c:a0:23:17:57:ba:b5:d3:
be:7c:d5:a0:c6:80:0b:a0:85:f0:fb:7b:d0:d0:5b:d4:34:6b:
bc:8e:2a:85:0e:7a:6c:91:3c:b6:e6:51:f7:7c:b2:83:78:b9:
e8:7e:30:0d:48:08:35:1a:c9:4d:9a:f4:e8:b8:d4:4c:80:20:
1c:50:8c:90:36:bd:9d:be:44:50:53:a3:9d:0c:eb:70:50:09:
d4:f2:79:99:44:bf:14:02:37:0a:ae:6b:58:03:e0:9f:5f:f8:
4a:93:4e:25:fd:0e:22:51:78:6e:cc:a5:ce:b5:57:53:b4:3d:
8e:99:70:eb:5f:31:01:f1:61:7c:9b:5e:d4:7d:b7:9e:c5:69:
6f:cf:bb:96:03:aa:92:58:eb:93:a7:0d:96:a8:06:c7:51:6d:
a2:de:f5:2a:80:d8:ca:99:a2:3c:d5:50:47:f4:a1:32:1c:b9:
56:b6:fc:8e:97:32:0c:7f:de:42:6c:72:04:bf:89:c2:d7:cf:
f9:e1:a8:28:fe:3b:d9:d4:45:79:7f:a5:a9:17:70:cc:2a:bb:
3d:b4:80:e0:db:e9:5e:1b:0f:0b:b7:49:17:8a:83:07:01:d6:
6a:b1:05:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:53 2025 by rpki-client