Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3be65baa-b978-3af3-8965-20b989aabe85.roa
File: 3be65baa-b978-3af3-8965-20b989aabe85.roa (raw, json)
Hash identifier: xwEvZ82ZtmkXum50uLqvck2vXAJMLpY0j1ShvWcw1ug=
Subject key identifier: AE:B9:27:36:B5:82:B4:30:64:B5:F3:94:E3:C9:D2:B7:D6:AF:46:9D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408CA67E0F5B47CD7C2AB5C100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3be65baa-b978-3af3-8965-20b989aabe85.roa
Signing time: Wed 11 Jan 2023 12:00:00 +0000
ROA not before: Wed 11 Jan 2023 12:00:00 +0000
ROA not after: Thu 16 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.122.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8c:a6:7e:0f:5b:47:cd:7c:2a:b5:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 11 12:00:00 2023 GMT
Not After : Feb 16 05:00:00 2023 GMT
Subject: CN=d2e41dd0-3636-4171-9472-f815af11232d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:f8:5c:36:c0:8f:fb:d2:00:9c:95:de:f6:
59:45:df:1a:51:7a:fa:3a:9b:b2:b0:5d:3e:ef:27:
ef:03:57:61:4e:3b:76:83:34:a1:5b:b0:11:af:44:
98:86:0c:3d:f1:f6:92:4a:c2:7b:ba:08:62:9b:d8:
49:ca:7b:f4:65:5b:e1:8e:11:a3:4c:ef:af:f1:70:
05:1b:79:20:80:c5:72:92:ff:a4:e9:ef:1b:7e:b6:
a4:4c:ff:85:cd:ff:fb:db:b7:bf:d2:b3:a8:9a:68:
90:34:51:bf:99:93:30:e6:31:e0:ec:fe:35:ac:bd:
86:69:cb:52:b7:7f:2d:74:fa:7e:88:0d:8c:b2:90:
c7:ee:e0:c8:d2:1b:44:87:c2:ba:c3:2c:36:65:56:
50:44:fb:84:a8:26:ab:bd:1a:ff:33:12:b3:51:8e:
d0:52:0d:62:bf:e4:7d:19:e6:97:5a:16:b1:81:bd:
d6:87:c9:47:57:40:59:41:bb:60:cc:0e:22:3d:06:
67:29:07:cc:28:0b:28:77:b9:96:c3:3f:9f:b3:6d:
af:d3:ad:20:bc:a0:d4:a9:dc:fb:3c:bd:7b:91:14:
f4:09:3c:77:6c:37:9b:3e:53:ea:dc:8d:3b:b5:51:
d6:5f:4a:1b:55:6a:bf:f3:d9:30:72:a9:44:0a:3b:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:27:36:B5:82:B4:30:64:B5:F3:94:E3:C9:D2:B7:D6:AF:46:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3be65baa-b978-3af3-8965-20b989aabe85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.122.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:bb:55:8f:c6:83:54:d7:d2:3f:3c:46:f9:49:50:c2:44:7d:
02:59:f8:57:eb:8b:17:0f:1f:39:2b:e9:8b:8f:dc:5c:88:aa:
bb:d2:e5:10:ed:65:75:89:c0:6b:05:71:f3:cd:f6:bb:19:1b:
1f:78:07:c5:ab:5a:b6:3f:53:0e:f6:ef:6b:47:f7:85:06:97:
39:63:41:80:f1:a2:d0:f5:5a:19:b9:7a:18:45:a4:d8:bb:1b:
cb:3f:4e:c0:51:1c:97:da:80:71:5b:04:51:30:36:94:23:a2:
09:e8:19:11:86:a5:b2:c2:a3:1d:fd:c4:a7:2d:6d:0d:16:d4:
57:fc:88:86:0b:d8:90:2f:45:73:c3:38:b7:d9:b1:8c:5f:89:
47:90:91:8d:98:5d:e2:9d:4a:88:65:85:fd:8a:09:fe:f7:e5:
24:45:de:86:24:ee:8f:08:73:82:c5:29:88:95:56:13:5b:8f:
2c:b0:a2:ba:0e:a7:7b:31:03:5d:29:fd:11:f9:f6:6e:69:88:
9f:62:6a:7b:b8:72:92:35:ab:72:c0:a1:47:4d:a3:5c:1a:53:
47:dd:20:a1:54:83:38:df:75:72:63:c9:61:ce:89:24:33:63:
aa:17:62:78:9f:98:80:22:ba:30:19:f8:d0:33:bd:17:1d:4f:
d4:e2:8b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:28 2025 by rpki-client