Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37d70c8a-d997-34c0-867e-6e468cff90b3.roa
File: 37d70c8a-d997-34c0-867e-6e468cff90b3.roa (raw, json)
Hash identifier: /FwnUcoahBUJfos9G0fxJBvGjE8cFtr1G3tIeX/7/Fk=
Subject key identifier: F3:E4:C8:FE:EB:11:23:76:A9:7F:BF:6C:7E:17:AC:4A:EB:52:11:6E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF840A919F56D5CE5D6491E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37d70c8a-d997-34c0-867e-6e468cff90b3.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:40:a9:19:f5:6d:5c:e5:d6:49:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=bd022dfc-0ae8-427b-96e5-22707f46044b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:20:5d:60:4c:d4:9c:c3:ce:c5:f8:aa:94:
5d:a4:50:b7:a4:e2:e4:e3:d1:5e:71:f6:70:c8:52:
de:78:33:5d:f2:88:ee:2a:01:ce:51:3e:56:ca:e3:
2e:20:49:c9:4a:cc:c6:f1:eb:e2:3d:67:9e:d2:0e:
52:d1:ab:99:09:14:46:8f:16:8f:2b:cf:67:ee:cc:
cd:3a:40:77:f5:d7:22:a8:c2:5e:c8:10:2b:5f:c6:
45:57:c3:83:03:ad:62:39:31:a5:97:74:ae:6b:50:
3e:d7:f3:da:8f:1a:46:e1:ae:4d:05:32:4c:de:76:
84:70:56:5b:15:03:d1:6c:df:9e:33:a9:19:c7:02:
1f:79:20:78:d2:a5:f4:a8:cb:a7:7e:21:37:74:75:
86:da:e3:a0:41:9a:28:87:a8:68:52:88:ca:64:ca:
41:92:2b:9f:bb:2f:73:0f:a3:95:cb:f8:a8:2a:72:
af:87:10:b9:01:79:b0:c5:18:6d:e4:27:85:16:85:
be:2c:d1:72:df:90:12:1c:fd:b8:d2:93:50:40:58:
a7:ab:51:73:b3:7b:c2:0f:68:d4:e6:59:54:06:36:
71:32:a9:9c:84:b1:be:19:ef:8d:10:56:50:f9:78:
02:98:dd:84:1a:1c:b9:b0:5b:47:25:0e:73:c5:6a:
53:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E4:C8:FE:EB:11:23:76:A9:7F:BF:6C:7E:17:AC:4A:EB:52:11:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37d70c8a-d997-34c0-867e-6e468cff90b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:73:69:0a:2a:ec:50:0a:3f:ef:89:09:d2:19:fd:1c:44:85:
c8:d5:17:8f:5f:8a:b2:6b:e9:18:78:ef:4a:20:1b:5b:a3:02:
89:e9:21:41:5f:f3:f2:d3:5c:13:21:42:e7:d4:72:8e:8d:03:
80:44:ec:77:7a:92:60:76:e7:df:57:04:45:c0:ba:a3:87:1b:
d5:4d:b0:ff:0e:2a:ef:f4:80:d2:da:b7:ff:4d:05:9a:68:ad:
44:9a:03:b6:93:9f:2e:f8:64:48:c8:9c:c7:75:ad:1c:87:7f:
6d:b5:08:b3:d2:c7:8b:ea:b3:9b:33:0b:68:34:5d:1e:4a:94:
87:33:c5:28:9c:37:e1:6a:9c:2d:35:31:eb:80:5b:cb:8e:6c:
36:9c:9c:6f:f7:c3:a3:03:c3:67:f0:5f:dc:23:c0:ae:7e:f8:
06:89:a5:94:9d:c4:dc:48:a2:54:53:d6:d1:50:78:02:a9:8c:
30:93:56:13:5a:de:6e:24:eb:ba:c3:59:66:a5:c5:47:00:44:
4a:a7:e7:13:eb:a2:10:86:f6:c5:59:5b:23:ba:bd:02:1b:ca:
dd:72:3e:49:cf:4c:cb:20:7d:25:01:36:3f:3e:b5:51:12:76:
f8:ad:ce:26:df:fc:16:2e:0f:f8:6d:8e:27:98:18:5a:35:5a:
c1:8a:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:34 2025 by rpki-client