Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/36ed0d83-d922-3221-a2c1-ca593795a4eb.roa
File: 36ed0d83-d922-3221-a2c1-ca593795a4eb.roa (raw, json)
Hash identifier: geUmNqbyxLN28LQvZDmfZLqgdJ5f89WSHGrxm464/Po=
Subject key identifier: 0D:96:9A:C8:5D:74:CA:A5:D1:75:94:DA:12:EB:79:F5:07:9A:62:A9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403EA7D5899030F58D33229200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/36ed0d83-d922-3221-a2c1-ca593795a4eb.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.48.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:a7:d5:89:90:30:f5:8d:33:22:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=a3e1a16a-080c-4677-b0a3-287d2e21de0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:6f:e5:36:11:5b:de:de:db:34:29:43:0c:
38:c9:f7:e8:90:4e:67:34:16:42:a1:91:6c:7e:84:
17:70:02:4f:be:49:26:37:ea:61:5e:b3:70:ac:29:
29:62:6b:1a:f7:b7:04:0d:a1:ad:77:49:b5:f4:5b:
aa:8c:6f:31:19:34:91:00:1d:cd:46:dc:a5:74:ce:
b1:4f:2f:c3:e9:e7:aa:74:74:f6:b9:ee:38:ff:73:
d2:e3:16:4a:a9:c1:87:d1:42:f0:b0:a4:47:9a:dc:
f5:be:bd:54:6b:64:23:58:8d:90:e8:77:f1:80:5e:
7a:83:92:fa:89:3f:5a:e5:6d:2a:2f:42:7c:51:d1:
d1:bf:ee:0e:3a:f2:85:fd:ba:51:be:28:af:82:53:
d9:99:df:1f:d2:6f:a3:66:17:20:f1:7c:dd:d6:e3:
71:a9:5d:74:46:45:73:52:8f:21:f5:c0:e4:d5:94:
c5:c7:42:8f:a6:e5:7d:db:c1:ca:01:59:15:10:a9:
ec:fc:d4:17:74:af:7e:3b:84:1a:7b:bb:5a:e9:ad:
54:d4:31:31:33:4a:3a:ad:10:bc:e1:80:a5:e5:bd:
e0:80:90:46:80:b6:b4:07:5f:15:ca:3d:c2:63:6f:
31:64:bb:8e:44:c5:2f:0a:b1:0b:79:44:94:28:8a:
73:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:96:9A:C8:5D:74:CA:A5:D1:75:94:DA:12:EB:79:F5:07:9A:62:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/36ed0d83-d922-3221-a2c1-ca593795a4eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.48.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:b6:bb:37:60:72:9f:44:65:a7:4d:f6:38:6c:38:5d:56:6e:
4f:3e:4b:dc:2f:6e:30:ab:eb:f2:11:ca:d3:d3:8a:e0:d1:c3:
92:b3:f8:fa:be:fa:62:87:b7:e3:16:4d:9c:c3:59:f9:05:82:
ea:0c:e2:92:be:e8:3e:fa:b1:09:f7:b1:10:37:5f:75:40:e9:
b0:cd:50:22:9d:b7:be:62:00:8a:08:76:60:25:93:55:d4:c5:
6c:f1:76:ec:d9:ba:20:61:a2:c6:c1:e9:a8:2c:64:d1:36:72:
a0:40:6e:64:97:a4:b6:35:81:cb:61:7c:9a:c5:53:93:bf:68:
14:d8:76:98:c1:82:02:75:7f:56:c2:81:06:0f:ca:8c:f8:0b:
7d:3b:ee:cb:5a:cb:92:a7:bb:49:a0:33:74:f6:74:75:b7:4a:
71:27:2b:61:81:6a:0a:a5:d0:fb:1a:e2:85:d0:e4:55:c2:36:
f6:17:97:e0:2e:6b:6a:21:5d:e8:f3:f4:36:0f:ac:38:c5:71:
bb:2d:d4:bc:53:04:4b:18:9f:40:3d:54:7c:16:83:8a:62:ab:
0b:65:47:82:15:36:ee:05:89:58:f5:28:b4:e5:eb:ca:4f:97:
c0:73:bd:a2:b4:9b:4c:6c:7f:2c:cb:34:55:a9:69:19:02:05:
73:5c:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:26 2025 by rpki-client