Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3853e1a3-998c-3815-97eb-29fc7a0fa40a.roa
File: 3853e1a3-998c-3815-97eb-29fc7a0fa40a.roa (raw, json)
Hash identifier: MWi2cTxaO7AzwltEhr3Ueeik+QqMPpZ9CW+P/+EsBMI=
Subject key identifier: D6:7D:B2:AE:4C:B5:87:03:16:31:64:DD:0A:81:9C:07:8F:5E:30:27
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CB9AEE46339507EA74C377200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3853e1a3-998c-3815-97eb-29fc7a0fa40a.roa
Signing time: Wed 26 Jan 2022 05:00:00 +0000
ROA not before: Wed 26 Jan 2022 05:00:00 +0000
ROA not after: Wed 02 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b9:ae:e4:63:39:50:7e:a7:4c:37:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 26 05:00:00 2022 GMT
Not After : Mar 2 05:00:00 2022 GMT
Subject: CN=4ae35b33-b437-4497-b918-7ac9d18fb39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:1c:b0:36:b0:35:56:4a:d7:29:c2:d4:57:
3c:bf:1f:43:a4:20:36:5c:71:b5:0b:1f:ed:8a:a2:
26:6c:00:80:db:13:9b:9c:2f:b1:57:45:00:aa:fa:
9f:03:79:b2:29:cd:8c:f1:f8:34:2d:ac:40:01:47:
27:ee:8a:f9:e4:8e:c1:bb:b2:e0:2a:67:40:07:70:
f1:89:76:b9:a1:47:74:7e:72:18:72:0d:ba:a8:92:
c5:56:8b:da:60:98:c6:be:0f:b5:5e:65:ee:22:ff:
f4:7c:cf:9b:ef:de:d9:34:f1:93:29:01:bc:a5:af:
a3:e3:85:d6:22:e7:8c:8f:8e:ed:0a:e4:4b:ff:2e:
44:ad:93:92:8e:9c:d0:2f:89:24:43:d4:8d:fa:31:
5f:fb:5d:56:95:93:09:b6:71:e7:6f:7e:19:1e:48:
54:03:52:1c:29:da:2a:08:c0:17:7c:47:c4:c8:17:
4c:95:bd:4e:d8:5b:2c:26:29:e0:14:73:06:c1:73:
a9:f7:0a:64:1d:17:58:6d:c7:fa:b1:7d:ff:09:e4:
bb:90:4a:6d:d9:7f:bb:4a:7b:e3:93:57:56:41:4d:
d4:65:ae:61:8c:33:82:a4:71:49:a5:e2:f1:26:07:
27:00:f5:9d:28:cb:85:93:12:aa:10:a1:b5:97:70:
70:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7D:B2:AE:4C:B5:87:03:16:31:64:DD:0A:81:9C:07:8F:5E:30:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3853e1a3-998c-3815-97eb-29fc7a0fa40a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:4e:a0:05:ae:60:96:cf:98:7f:29:a9:cc:5f:e0:7b:ba:de:
e9:97:72:6a:a0:c8:bb:21:4b:59:34:93:35:63:56:f8:50:e5:
0b:b1:d3:64:e1:24:52:bc:bc:eb:45:68:c8:c3:92:27:61:82:
ee:27:6f:8d:ed:44:d0:a0:62:8a:d3:ea:12:f6:54:dc:f0:85:
0d:a9:25:09:50:30:a2:59:02:2f:2d:5c:72:3e:9b:fa:3e:b6:
7a:3c:88:a1:2d:ca:14:eb:0a:0b:9a:bc:cd:f9:fb:4a:5e:c5:
ab:b9:f6:6e:40:c5:fd:0b:70:62:e5:f0:f9:7b:6c:84:ba:73:
38:08:4c:42:6e:12:a7:f9:cd:86:e0:56:2f:11:2c:91:d3:82:
93:73:54:97:bf:06:c1:94:7e:2f:9c:42:ab:1b:05:ad:d2:10:
09:1c:85:e2:49:bd:01:5c:c0:9f:02:ea:95:ac:37:6e:c0:0c:
44:b9:0e:78:a4:c1:0b:6d:bd:1e:95:e2:f9:2b:69:33:0a:00:
65:e3:43:a2:43:df:84:49:bc:39:c4:cb:0c:49:b7:39:56:47:
a0:1b:2b:50:a8:90:c9:04:3a:38:93:d4:61:86:b9:e7:eb:79:
00:83:0e:ed:e5:36:40:5e:78:68:34:1d:b4:95:30:e1:1a:18:
f4:ed:44:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:06 2025 by rpki-client