Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/323ff8c5-dbd5-3db7-af80-ae983591c33c.roa
File: 323ff8c5-dbd5-3db7-af80-ae983591c33c.roa (raw, json)
Hash identifier: RDAHYuM0KFLSJptlR8/w4J8v5cmPF5BHp6gUUsOsiRE=
Subject key identifier: D8:33:EE:FD:4F:46:4C:C5:AC:60:1B:0B:32:73:03:18:22:92:3A:C8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840245DE73CBF0DC3177CD23640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/323ff8c5-dbd5-3db7-af80-ae983591c33c.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:5d:e7:3c:bf:0d:c3:17:7c:d2:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=0ca1a388-8f57-4c07-a4de-dfd27053c7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:42:9f:51:20:74:0c:77:6a:d2:d7:33:d9:
8d:b1:6b:1e:63:49:33:90:72:79:d8:07:ab:2c:5e:
63:f3:ca:b1:2f:6b:07:6f:61:9f:68:83:62:6d:2c:
01:a5:14:2f:95:8e:31:ef:cb:36:37:de:a7:9c:1d:
a2:bb:1c:c4:c4:49:59:f8:34:c1:06:25:e6:07:6e:
34:f0:8d:86:96:51:a7:48:b0:bf:09:10:d1:d9:9b:
4e:3a:70:e2:34:d3:53:40:99:68:d0:30:e9:d1:1d:
06:8c:18:68:ae:74:92:62:aa:21:3e:a2:90:5b:71:
ba:51:e5:30:d6:49:34:aa:da:0f:57:25:8d:8f:09:
88:84:c7:09:53:e8:60:12:ec:a1:c7:58:17:88:70:
78:da:c8:de:c7:e7:63:dc:7c:61:ac:0e:92:fe:15:
23:da:33:71:ae:65:09:14:b4:07:7c:51:2a:e4:ac:
c5:5b:47:a7:52:b4:7a:3d:0d:32:aa:de:eb:02:88:
4e:57:bf:b8:e4:fa:b6:ee:8b:15:cd:17:cc:e5:4f:
99:65:fd:7c:74:5a:c3:99:34:a5:dd:94:34:ea:75:
f2:1a:69:a6:ef:93:d4:3e:4e:28:40:5a:59:f7:3b:
0e:a0:b9:63:5a:ad:c3:63:b5:e6:2d:16:8c:65:1f:
dc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:33:EE:FD:4F:46:4C:C5:AC:60:1B:0B:32:73:03:18:22:92:3A:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/323ff8c5-dbd5-3db7-af80-ae983591c33c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:90:d0:c9:81:0e:15:13:ce:65:03:1f:20:48:7e:24:21:b0:
c7:89:12:8a:2a:fc:90:77:e4:42:1d:0e:b6:cd:9a:36:73:e7:
5e:8d:78:c0:0f:72:17:de:34:4e:2d:b2:26:82:b3:0e:b4:b3:
d8:48:4b:8f:0d:50:6b:bb:00:c8:1f:f1:e0:37:6d:8f:3c:e7:
f4:a3:a9:9d:ad:3b:11:2d:d3:e6:e9:2e:69:66:16:56:83:9b:
61:fd:08:90:67:f4:f5:16:50:0e:a2:7c:43:f9:be:2c:2e:52:
cf:89:ba:37:e4:92:ec:34:78:ba:cd:d4:b9:4c:2a:e7:a2:a5:
0e:9e:d8:eb:2a:9e:2b:d9:21:34:62:7f:9c:b6:7b:ae:3d:aa:
aa:ff:06:27:ab:18:0b:34:37:57:ed:3f:9f:e9:32:b7:9e:8e:
4c:b4:4a:56:d9:53:4e:b6:fb:6e:23:40:49:c0:e9:81:bf:04:
b5:87:ba:9f:e8:99:28:86:96:91:86:0a:65:28:c3:e7:18:e7:
62:34:bf:be:f3:ba:76:e8:37:e3:78:0c:c6:21:6e:eb:be:76:
cc:fb:a6:da:db:00:c6:03:87:1f:c6:8c:28:be:22:33:1e:f3:
4c:d2:46:5d:4c:94:6b:d7:7c:a4:07:ce:40:f5:8a:c6:02:96:
8c:94:ed:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:54:09 2025 by rpki-client