Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39ca45d6-2564-30a0-8546-e01baaa2bdc3.roa
File: 39ca45d6-2564-30a0-8546-e01baaa2bdc3.roa (raw, json)
Hash identifier: XJ6Jj8wcW0n0cnMN9eW12nm375K9NT/lmXrLbOlDKtg=
Subject key identifier: A3:C6:75:5B:42:EB:D1:27:93:B1:83:8C:EF:D9:F0:E4:0A:84:7C:B2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F0D40A40554A81357D5D28300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39ca45d6-2564-30a0-8546-e01baaa2bdc3.roa
Signing time: Sat 27 Aug 2022 12:00:00 +0000
ROA not before: Sat 27 Aug 2022 12:00:00 +0000
ROA not after: Sun 02 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.206.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0d:40:a4:05:54:a8:13:57:d5:d2:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 27 12:00:00 2022 GMT
Not After : Oct 2 04:00:00 2022 GMT
Subject: CN=b4a12525-b0a2-4b6c-9866-d85a5fcf9a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:47:ae:b1:f5:0d:d5:39:93:b0:3a:c3:74:
70:d3:d1:6c:d7:fe:d1:d9:13:d8:8a:4e:6e:9b:f9:
93:2d:a3:5d:56:26:27:f3:e7:9f:40:1c:4d:66:e0:
cb:5a:ce:96:bf:84:27:59:9d:c0:ca:3e:03:ca:4d:
5d:56:40:bc:1a:d8:af:50:e9:aa:d1:7a:4a:1e:d9:
6e:96:f2:90:e5:5c:85:7f:d7:8f:78:0b:40:6c:e1:
23:ba:92:5d:c2:40:3b:9d:7d:da:53:3c:ca:f0:6c:
0f:ee:11:a7:68:ac:2d:a3:99:4d:d5:80:4b:1e:42:
5a:6b:fa:96:e5:56:ed:48:c4:91:39:de:ed:64:ef:
98:ba:f3:b8:02:7e:32:3a:5c:2e:98:ba:2d:db:b5:
7f:15:26:6a:39:99:65:f4:4f:57:f3:9a:58:8c:6e:
89:0b:ad:80:55:81:cd:f4:71:65:93:6a:45:63:e9:
e1:47:77:8b:f4:fa:c8:52:7a:64:96:a7:04:f0:bb:
a1:b1:3f:65:53:14:19:f1:42:30:01:8f:bb:83:e8:
64:0d:b5:58:ef:25:e4:a2:48:45:c2:98:0d:23:a1:
a0:68:70:35:4c:32:59:94:f3:3d:c9:9f:37:10:23:
63:71:77:4f:8b:2c:b6:f5:f1:b9:6a:23:bf:84:29:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C6:75:5B:42:EB:D1:27:93:B1:83:8C:EF:D9:F0:E4:0A:84:7C:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39ca45d6-2564-30a0-8546-e01baaa2bdc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.206.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:b3:74:a5:08:4b:5c:bd:1c:db:92:b6:fa:94:a8:ef:70:b0:
e1:c6:aa:f8:c9:de:72:7c:0e:1a:2e:f7:a1:0c:45:02:74:74:
98:be:85:27:d7:14:30:7e:4f:49:b9:15:86:f7:da:96:44:2c:
67:fd:3e:ac:0a:3d:b9:5d:51:d9:53:91:bf:61:5c:0f:87:be:
ef:53:71:9a:80:5f:7f:28:37:e6:85:85:24:f7:7e:19:d9:6f:
e9:86:67:c2:f2:42:fd:17:6b:d7:62:c6:37:57:ea:4b:52:19:
32:c4:ae:e8:d7:49:ca:84:4d:17:b0:af:64:68:a3:b0:ee:9f:
d5:e9:92:29:42:da:60:21:91:12:c5:80:2e:5f:81:89:49:e8:
de:07:fa:3c:3c:85:b1:da:27:f9:1e:29:24:2e:a7:2e:a1:9c:
d9:55:84:12:2e:e7:04:06:88:cd:e5:8e:1e:6a:10:e4:4d:02:
99:81:5b:c2:25:f4:f2:ee:3f:af:f5:1c:5e:d6:82:71:fd:ad:
23:68:cc:0d:53:de:08:d7:41:4c:24:94:0e:a3:9a:e1:20:c8:
9b:bf:9e:44:56:2c:e2:84:5e:1e:89:6c:b5:50:88:c3:28:8f:
5d:83:4e:8b:87:de:f6:10:ed:09:9d:b7:42:6d:cd:67:81:86:
6e:6b:42:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:04:58 2025 by rpki-client