Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3493da1b-3003-3404-81a5-6d26e27c43de.roa
File: 3493da1b-3003-3404-81a5-6d26e27c43de.roa (raw, json)
Hash identifier: btT+wGTtru4OJyPNhGN4Jff8+8W66LP9h/BTXRt7OWw=
Subject key identifier: 9C:62:C3:B3:54:6F:60:2F:0F:F5:D2:2C:08:DA:11:EE:25:A1:15:1E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2F6DF2BBE848F80BCB8E4700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3493da1b-3003-3404-81a5-6d26e27c43de.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.99.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:6d:f2:bb:e8:48:f8:0b:cb:8e:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=334433e7-1dd7-4773-9939-bdc8711dbee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e6:58:c4:cf:91:73:0c:d2:ff:30:36:cc:cc:
42:d7:ae:75:35:5a:cf:56:32:e1:5b:89:e1:e2:20:
ac:85:5c:e8:f4:17:29:21:f6:b7:ca:6c:97:0d:24:
57:55:0c:36:1e:07:7a:6e:2b:63:09:5f:ed:51:e8:
ba:5e:17:fd:bb:e6:60:dd:1f:e8:df:b0:b8:bc:1d:
e1:0a:4a:f7:bf:9c:d2:0f:cf:13:80:65:41:58:6b:
d7:b8:e9:97:8c:43:d5:12:4f:42:d3:45:f0:f4:62:
a3:1a:ad:0d:8e:60:d8:0f:41:38:99:7d:bf:7e:0b:
cb:27:23:b0:2b:c3:ae:6a:af:bb:37:3b:2d:c3:72:
21:5a:fe:ff:12:0d:ce:58:6f:cc:1e:cd:ea:47:5f:
b4:65:4f:39:10:35:2b:69:63:b7:ac:b4:bf:7e:28:
a2:ce:ec:9d:c8:29:10:f3:7a:73:0f:21:5c:05:57:
95:d4:56:0a:dc:fa:32:28:a7:08:13:ab:ec:ff:b2:
6b:4f:ba:37:82:d8:88:60:65:df:f8:05:c4:ec:b3:
d7:5e:c6:11:b2:f0:45:43:1c:6c:9a:f4:d1:bf:ad:
fe:e5:8a:69:79:83:90:c1:b1:ca:da:17:3b:e8:6e:
f1:1f:52:b8:8b:01:59:aa:60:4a:77:34:3f:e6:88:
e6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:62:C3:B3:54:6F:60:2F:0F:F5:D2:2C:08:DA:11:EE:25:A1:15:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3493da1b-3003-3404-81a5-6d26e27c43de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.99.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:59:7f:93:36:9c:27:12:bc:22:69:0a:6b:cb:c4:76:8e:8c:
72:d5:54:fb:b8:a0:01:3e:5c:8b:fc:c0:22:11:f2:42:ff:4d:
4b:16:02:ee:23:ab:3e:93:14:35:00:50:8a:90:be:23:8a:e5:
97:fd:74:31:0c:f3:b2:fd:b7:bc:a9:d4:ef:e1:53:ce:09:47:
02:c7:93:9c:cb:d4:aa:1c:ab:d7:62:ff:0f:bd:bc:6e:6d:df:
73:ed:1c:90:de:9a:5a:fb:e3:6e:03:cf:80:62:83:a2:2d:bb:
ca:ea:8e:99:be:e2:e7:f9:99:41:bd:4e:ec:38:4a:e6:f4:33:
7d:b3:ef:39:75:0d:9c:a2:8d:da:41:ee:ea:7d:48:98:14:81:
32:08:dd:91:67:c5:c8:c2:0c:e9:41:f2:15:d1:9b:54:9c:f8:
c5:26:59:3c:1f:0b:31:ef:97:fc:0d:6c:d2:ff:fb:39:45:1f:
d3:32:71:58:12:36:77:a5:6a:ca:68:34:b1:d6:e5:de:bc:a1:
ec:b3:77:79:66:dd:c2:7c:8a:7b:2d:7a:b4:31:a0:a9:56:c0:
cb:9f:3e:da:0a:97:af:11:7b:fd:ed:83:fd:40:42:91:8f:f9:
af:01:85:9c:82:80:af:45:83:8b:bc:ea:81:0b:26:a9:29:14:
0f:5f:6f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:50 2025 by rpki-client