Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39c30ea1-b90e-3886-a7cb-ef8e1fc0484d.roa
File: 39c30ea1-b90e-3886-a7cb-ef8e1fc0484d.roa (raw, json)
Hash identifier: ROaiqa3tEkksOsbiV06u+mNQZRRhyOhbrD6vKj0BQS0=
Subject key identifier: 4A:E9:EB:0A:92:05:BF:7E:B8:4D:60:3F:05:3C:A4:F3:D5:24:D3:6F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584065C4D97AD7D71D05EEE9B540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39c30ea1-b90e-3886-a7cb-ef8e1fc0484d.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:65:c4:d9:7a:d7:d7:1d:05:ee:e9:b5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=d033c05d-ca67-4b41-82cd-124aa7bdbaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:19:04:05:73:07:43:20:78:1d:13:6b:42:
9e:c7:81:22:2e:02:0d:90:54:cb:06:b1:98:4f:5a:
28:6d:d6:6f:e4:c3:68:1f:87:06:a9:72:84:a2:54:
29:70:39:a6:2b:14:d6:0a:06:65:78:bf:8d:bb:5e:
57:1e:68:cc:40:9a:b0:99:87:5f:3a:8a:ed:46:01:
86:b1:ce:c9:08:f5:b1:26:38:2a:d1:50:aa:c9:9c:
ae:4f:e6:0d:22:ef:2c:95:41:be:9f:fe:08:51:67:
72:e7:87:b3:7e:a1:24:38:97:8b:81:35:7a:39:6b:
32:51:50:6a:de:c9:2e:bc:30:a5:e7:1a:70:3e:36:
60:5e:28:50:6b:2b:cf:f7:4a:e3:36:f6:ad:ca:80:
b5:2b:da:b5:f4:51:31:d8:2f:9f:7a:4f:b2:9a:55:
b9:5b:8d:16:52:7b:9c:d0:94:fa:87:6c:c3:e6:f0:
20:45:11:7b:03:69:b5:38:90:56:70:01:de:92:0d:
7d:4b:50:a4:32:74:ee:cb:08:7a:7c:f3:a3:e1:a1:
17:6d:df:55:7e:08:ef:96:2d:ba:55:28:88:c8:b9:
ea:13:bb:44:47:ce:dd:48:7e:e0:1d:27:04:18:00:
d4:70:84:74:44:6e:82:c9:bb:4e:5f:80:a8:bd:71:
68:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E9:EB:0A:92:05:BF:7E:B8:4D:60:3F:05:3C:A4:F3:D5:24:D3:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39c30ea1-b90e-3886-a7cb-ef8e1fc0484d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:34:5b:df:44:19:36:fa:b8:f2:33:93:90:47:0c:57:a5:03:
c5:b6:b6:41:5d:01:65:d2:5d:e8:7d:d0:2d:3a:cc:31:9b:c7:
0c:5c:b7:c9:9b:05:1a:ff:60:ba:fd:59:a5:62:28:32:76:25:
21:08:fd:d4:7e:ea:94:c7:0c:cf:3a:ec:b2:97:6b:e5:03:6b:
1e:a3:64:44:af:38:47:f8:41:b0:42:f7:23:6d:6f:8b:6f:1e:
10:73:ff:18:98:5f:89:3a:81:31:97:a0:77:3e:fd:48:9f:54:
0c:7c:d5:51:90:ba:6a:45:16:58:c5:54:d8:f5:69:d1:cb:66:
ef:28:9c:6c:fa:3e:57:43:8c:b3:98:88:80:a3:c0:ce:00:b1:
71:90:50:9b:d6:c4:70:e4:35:75:92:f0:51:94:48:59:95:a7:
7b:61:11:27:bd:79:01:4a:d4:4a:96:20:a0:be:1c:fc:09:33:
bc:ad:4f:1c:2d:98:81:3b:08:23:e1:b1:a0:e2:79:ea:05:20:
03:44:06:f7:6d:a5:13:4d:b4:80:e1:27:db:4a:cf:67:f7:b2:
10:e3:e7:74:2a:24:2b:87:9f:6d:4a:99:6d:d9:de:41:ea:8f:
f5:1b:25:60:0a:5e:91:5c:8e:7b:0c:c7:c9:cd:5e:71:46:60:
bf:34:64:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:18 2025 by rpki-client