Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c97ad3a-336b-30fb-bb08-e54748dab5d6.roa
File: 3c97ad3a-336b-30fb-bb08-e54748dab5d6.roa (raw, json)
Hash identifier: Ki2IAet9FxAoS3CCWYf63WgKhgJBjuII36CPjkTRXe4=
Subject key identifier: 4F:ED:C4:04:2D:E2:88:2D:F6:7D:08:E9:F0:A1:9B:96:B4:69:BF:27
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DCBCBB1445D29BB74F16CD880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c97ad3a-336b-30fb-bb08-e54748dab5d6.roa
Signing time: Wed 04 May 2022 12:00:00 +0000
ROA not before: Wed 04 May 2022 12:00:00 +0000
ROA not after: Thu 09 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cb:cb:b1:44:5d:29:bb:74:f1:6c:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 4 12:00:00 2022 GMT
Not After : Jun 9 04:00:00 2022 GMT
Subject: CN=a3ea50d6-be83-42c1-ad7a-34f9e39a064c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c0:a0:55:46:cb:36:53:66:cb:ad:69:fa:e8:
28:15:9e:f7:33:88:3f:2b:7b:d7:7d:3c:44:8d:51:
93:5b:ac:ff:d6:0c:52:63:ce:0d:36:09:31:4f:ae:
7a:f2:86:f2:aa:45:32:19:ae:86:e8:71:a3:38:5b:
6b:a2:89:a3:40:59:52:93:72:8e:0c:71:b3:f4:14:
ce:c4:cd:b8:86:4e:af:a0:89:a0:58:fb:8d:d7:95:
37:f6:61:25:94:f3:3d:2c:c2:41:56:4f:a8:ee:56:
08:31:5f:2b:0f:10:a1:67:c8:c6:2f:fc:e4:9e:5c:
ae:89:31:7c:e4:a0:17:a4:9d:80:2d:ab:33:9d:af:
9c:49:89:60:35:6b:ee:0d:f4:de:37:1b:03:c3:45:
b1:b9:ed:4d:93:c3:fc:64:a8:ae:c9:d4:4b:1b:63:
fd:2e:1d:1f:d6:45:9f:98:ff:2e:f0:11:dc:99:2a:
a1:ff:fd:54:7a:fd:67:9f:16:4d:ca:e4:f5:c4:32:
49:cc:c0:5a:a0:a4:63:80:f8:c8:3d:1f:c4:5b:33:
5c:34:9e:e6:27:bb:ef:9f:b8:1b:6e:c2:1b:6f:50:
5b:ac:49:bb:1f:cc:1f:a1:65:9c:02:76:9a:17:20:
58:ef:b1:25:8d:6b:ab:aa:4b:d3:0d:bb:60:a0:86:
fc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:ED:C4:04:2D:E2:88:2D:F6:7D:08:E9:F0:A1:9B:96:B4:69:BF:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c97ad3a-336b-30fb-bb08-e54748dab5d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:b0:66:5b:51:11:e1:82:6a:f7:72:2b:15:63:d3:c6:5a:50:
30:44:53:ab:b4:44:4f:46:42:30:25:b9:b9:5f:8e:6c:f3:9e:
17:5b:e5:e2:41:be:95:42:1b:66:15:0c:7e:f8:ca:7f:d5:0c:
31:74:3b:0b:47:3e:7f:bc:5c:bc:8b:3c:8c:a5:8c:97:e5:d8:
96:e0:16:a6:ad:d2:b0:33:0d:bd:ec:0e:d2:e6:e9:3c:c6:8e:
e9:29:fe:4d:bf:39:1b:9b:1e:d1:81:17:44:fd:15:10:c6:30:
a6:d1:73:c9:54:dc:52:fe:5e:97:37:40:62:a4:e0:de:c5:7e:
9e:0f:57:62:e4:f8:33:7a:7d:f4:a9:80:62:8a:00:ae:de:7f:
b1:2b:59:e8:2b:1c:1a:86:b4:ab:0e:67:bb:e3:a8:2f:59:ba:
a2:bf:64:d5:aa:56:07:45:5b:77:9e:d1:0e:74:4b:0f:a8:b5:
40:97:d3:e8:10:28:e0:d8:77:d2:cf:94:50:f5:d8:92:b1:e1:
31:2f:73:19:3b:b3:37:a0:d6:b5:29:e6:c9:46:87:3e:2d:1a:
9b:60:fd:86:bf:8c:84:c0:a5:f3:fb:3c:24:30:db:d2:6e:2d:
44:60:d7:5f:6f:cb:d5:bf:e9:fd:33:9c:93:2e:36:ad:5f:67:
e1:64:18:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:02:33 2025 by rpki-client