Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3aab260b-7290-3493-b5df-281443f88723.roa
File: 3aab260b-7290-3493-b5df-281443f88723.roa (raw, json)
Hash identifier: vrQz0sI1ToIqeCyNvpvBAVBXH5EsVgctoqtxwfJzq5E=
Subject key identifier: B7:1B:95:62:09:4C:5A:74:BD:D8:60:DD:82:30:66:9B:0E:97:1E:7D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D1D519893533F71F5A4F8E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3aab260b-7290-3493-b5df-281443f88723.roa
Signing time: Sun 05 Feb 2023 12:00:00 +0000
ROA not before: Sun 05 Feb 2023 12:00:00 +0000
ROA not after: Mon 13 Mar 2023 04:00:00 +0000
asID: 16509
IP address blocks: 16.52.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d1:d5:19:89:35:33:f7:1f:5a:4f:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 5 12:00:00 2023 GMT
Not After : Mar 13 04:00:00 2023 GMT
Subject: CN=16b2fd82-15da-44fb-a9ce-b290280bd857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:e8:c4:8c:3b:a2:e1:66:f7:a2:e4:82:98:
17:73:64:67:af:18:23:cc:66:b1:89:37:f3:3a:1d:
b4:47:1a:62:4c:f2:a6:02:69:b4:e8:3b:0f:2b:73:
26:82:48:3d:c5:8e:ce:a7:a8:98:24:83:50:8b:3c:
93:c3:d5:e9:65:df:96:e9:11:d1:f1:23:83:6c:79:
25:7c:c1:6b:51:28:64:c9:ee:98:e3:c2:40:15:34:
2a:88:b4:91:0b:32:f2:0a:9a:de:8f:fb:56:3f:b7:
51:e4:7d:b0:0a:e3:82:5b:a5:e2:79:4e:ef:3c:5b:
d6:b8:7d:a9:9c:f0:e4:1f:9f:b4:25:83:94:03:c6:
56:07:bd:a9:cd:db:80:c3:27:2b:9e:5a:8e:88:aa:
9a:38:30:74:d0:af:b9:b2:da:f2:ad:26:8e:cc:80:
80:54:a7:0b:0e:27:d7:46:7c:a7:c6:e2:6a:c3:0d:
83:a7:a2:9e:c6:24:f5:3c:51:dd:f8:e3:00:b9:30:
90:c6:8b:1c:31:2b:ed:be:33:c9:0c:c8:99:6c:14:
25:4d:97:5e:0c:b5:9e:ee:f2:64:2a:6b:17:bd:dd:
08:bf:c9:25:86:00:4d:8f:e7:cc:ca:5b:61:71:5a:
42:68:fe:25:c3:41:9b:5c:80:98:7c:00:58:c6:77:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1B:95:62:09:4C:5A:74:BD:D8:60:DD:82:30:66:9B:0E:97:1E:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3aab260b-7290-3493-b5df-281443f88723.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.52.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:12:82:83:17:04:81:fc:03:f8:6c:32:23:82:0b:c7:ad:d7:
13:e9:f5:89:49:4e:1c:64:8d:c0:ac:a1:3c:b1:c9:de:ba:55:
41:d4:6e:84:66:22:43:1f:bd:1b:d0:fd:96:90:46:d9:0a:ad:
c0:c7:23:9e:06:ee:7c:35:92:37:93:86:33:2b:fb:96:1f:bf:
14:13:5e:d9:d6:39:cd:8f:e7:e0:d4:9f:c8:db:16:d0:66:a6:
e9:36:40:0b:95:01:29:d4:78:fd:b9:d0:6a:f1:84:69:ef:27:
cc:fe:c3:bb:6b:e8:3e:fe:54:72:a1:1a:52:bb:dc:eb:02:f4:
e4:b3:57:be:7f:ef:52:fa:0b:d5:43:26:33:18:5c:a2:c3:94:
d7:4f:86:2c:1f:60:7f:fb:d1:fc:3f:c4:df:0c:09:ec:49:52:
c4:07:5b:fb:29:81:f7:af:d0:3d:aa:d0:ba:3d:1b:21:49:a7:
12:90:30:28:65:de:49:aa:98:da:23:a5:e7:3c:6e:09:aa:a2:
eb:15:87:fc:9f:9a:11:b2:30:0c:c4:95:5c:50:35:c7:b8:6b:
fb:50:ba:45:cf:f7:d9:3e:14:97:06:5e:9e:49:b1:69:42:57:
b3:ee:ba:f4:30:2e:af:14:8f:7b:99:92:86:75:dc:4c:36:a3:
5d:5c:4a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:58 2025 by rpki-client