Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a6a7230-dd95-346b-803a-1c2023b72a21.roa
File: 3a6a7230-dd95-346b-803a-1c2023b72a21.roa (raw, json)
Hash identifier: PiKdeH2s04X3lkyK2pZQl1jW+Sb4zeWwfd9owETqjMQ=
Subject key identifier: 5D:60:04:3A:80:64:88:B6:05:86:90:B4:4F:AE:86:77:75:40:3D:D7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD12B11CAED47B61C01F9C0C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a6a7230-dd95-346b-803a-1c2023b72a21.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d1:2b:11:ca:ed:47:b6:1c:01:f9:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=eb236744-22ab-4675-b826-4899afc314f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b1:e6:80:68:26:6c:43:98:79:40:3d:2c:61:
93:87:fd:41:2e:92:1a:a7:21:fe:45:ee:ce:72:b1:
3c:98:68:98:9c:2f:be:ce:54:13:3f:2f:78:43:43:
c4:36:71:2f:55:81:a5:01:b0:aa:a3:48:db:6a:2c:
2f:53:ed:c8:51:9f:95:5e:6a:08:0c:e2:df:5d:ea:
8a:2c:2e:42:99:d5:54:00:f0:67:be:4a:64:e3:94:
29:09:93:32:a5:60:ce:cb:58:95:99:8d:41:7e:f7:
db:00:9d:fe:16:1c:79:ff:05:60:0a:41:07:5f:16:
04:11:ed:12:d2:9c:c3:66:54:bd:de:92:84:e2:b3:
27:78:ef:a0:f9:fe:cc:ac:2c:74:aa:b4:f3:71:3c:
49:2a:d9:51:fd:b2:80:f5:e3:9e:cf:e4:ea:d4:a3:
44:f5:d8:f7:b2:1a:02:87:09:f9:11:f3:a9:11:d2:
96:7f:a9:3e:56:05:27:0f:f0:e6:84:b1:7f:1a:18:
b8:91:42:35:02:ae:63:52:ad:7d:cd:9b:b7:2c:1d:
91:aa:f6:ad:c1:a0:bc:24:5d:ea:fe:f8:c2:82:ea:
84:8f:7e:06:04:da:c4:ba:e5:06:d2:ff:e2:fc:01:
f8:bd:50:42:ea:5e:99:25:e4:74:c5:85:93:81:7a:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:60:04:3A:80:64:88:B6:05:86:90:B4:4F:AE:86:77:75:40:3D:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a6a7230-dd95-346b-803a-1c2023b72a21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:ee:d4:dc:53:fc:0e:89:00:48:47:7e:e2:8e:7e:b7:c6:a7:
10:cf:7e:73:84:19:4e:7f:02:eb:3d:97:78:ca:54:e8:f6:de:
c0:08:af:c9:e7:fb:5d:30:a1:55:18:69:ca:a3:fa:27:08:92:
16:9b:4b:f3:0d:e1:bd:11:e8:a6:7d:ef:44:14:c9:31:c2:dd:
39:21:05:a8:aa:15:b1:dd:b2:76:40:58:d1:de:33:76:8e:63:
07:eb:11:1e:11:11:e2:9e:83:e9:b7:cb:2a:24:71:b1:13:6e:
d7:44:a0:7f:c7:ff:8d:22:97:3b:f2:77:cb:f9:ac:83:77:44:
22:17:53:28:ed:da:8e:e9:0a:79:e2:ea:a7:38:78:5d:e0:ac:
8e:e6:c0:c8:67:7f:e5:6c:33:20:24:70:d6:1d:34:ff:0e:26:
20:ce:6b:8b:56:2b:05:13:4e:a2:3b:12:6a:ee:ec:78:2b:47:
29:ca:d1:39:61:c2:7a:d1:25:21:ef:52:1d:f3:d5:c2:08:ef:
ef:85:c5:c1:28:51:8f:9f:c0:1a:c3:64:bc:6e:4d:a4:a2:5f:
eb:f4:0c:62:66:56:fe:7a:c5:67:16:15:42:62:d7:d3:27:e6:
e2:72:16:a3:82:b5:e7:39:25:7c:55:53:9a:a6:65:49:ee:5d:
40:42:cb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:00 2025 by rpki-client