Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3cca2d0a-0e27-3bc8-b8cb-774c9d09f9ef.roa
File: 3cca2d0a-0e27-3bc8-b8cb-774c9d09f9ef.roa (raw, json)
Hash identifier: haCWfN5nadDy0hB19mzjrQCeReAXM2MO1uZuw5294wo=
Subject key identifier: 11:2B:DD:B0:18:08:19:C0:CE:C6:00:13:2E:93:64:3F:6A:9D:13:3F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DB2F60B58546CE2FF1E918B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3cca2d0a-0e27-3bc8-b8cb-774c9d09f9ef.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 31 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b2:f6:0b:58:54:6c:e2:ff:1e:91:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : May 31 04:00:00 2022 GMT
Subject: CN=1011bbb2-19ea-42ac-92c3-577399afd8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:12:41:5e:a8:8b:99:c5:fb:29:a3:4f:83:5c:
c0:4a:91:6d:00:94:93:94:8c:d1:9c:b8:a4:21:65:
76:c1:06:09:22:ec:3a:13:bc:ae:d7:81:2c:18:8c:
bd:bd:71:66:fd:bf:5d:b3:6f:98:ff:b0:12:37:c6:
78:57:8f:e9:b6:d6:d8:63:58:89:50:34:62:6f:ea:
bb:7c:86:40:d8:ab:a2:83:b4:ff:35:b4:fa:22:b2:
50:8d:8b:8b:f1:10:af:99:96:a2:61:ce:26:fb:14:
fb:7a:e9:80:3f:47:a9:87:74:c5:42:45:d6:c5:8d:
19:67:bb:8e:6e:95:e8:84:83:a2:7f:24:b8:11:ba:
34:ef:11:54:94:77:33:e2:ae:c0:37:61:ee:84:7e:
90:f1:a0:8e:81:14:2f:c7:1e:9a:11:45:91:a9:19:
31:e9:69:7c:a2:56:8b:3d:96:c1:24:12:01:36:93:
81:df:5d:38:fe:95:78:fc:d9:68:81:d3:3f:7b:02:
89:5a:e4:40:05:c8:64:24:dc:a2:81:48:df:6b:7e:
d3:b0:a8:5f:e3:5c:cb:cc:c7:fe:c1:59:5a:76:f2:
df:8c:5c:04:68:91:33:7b:09:26:2b:fc:71:cd:04:
d8:fa:dc:0d:d9:02:64:de:71:b0:4b:27:3a:42:6b:
be:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2B:DD:B0:18:08:19:C0:CE:C6:00:13:2E:93:64:3F:6A:9D:13:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3cca2d0a-0e27-3bc8-b8cb-774c9d09f9ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:df:5c:de:ce:4b:11:8e:b3:9e:02:9e:44:7e:a6:7c:da:dc:
7b:56:81:ce:74:97:28:96:49:7a:e2:c3:53:b3:8f:0c:7b:3a:
d1:25:3c:f3:7f:e1:77:6f:e8:f5:1a:51:45:78:4c:32:14:79:
6b:85:6d:1a:9e:7e:a9:2c:f2:e0:29:39:f0:e8:38:e6:7c:24:
a7:c0:62:26:65:bd:84:a2:4e:cc:b3:7c:eb:61:ec:7a:0d:15:
22:8d:d6:c5:9b:c5:db:fe:fa:24:ce:b2:45:c9:ce:ea:53:1f:
d3:60:3a:7f:f6:75:14:cc:23:a0:09:0a:0b:07:a5:c1:5d:63:
f1:81:7e:e2:f6:07:02:38:20:07:cb:e6:32:e4:3c:2f:04:23:
f1:fa:23:82:ae:bc:d3:89:e7:f5:9c:69:1c:65:c8:ed:62:d4:
ea:05:e0:cd:8e:55:98:3b:4f:2b:1c:dd:73:27:bc:b7:0e:9d:
ff:0e:c2:dd:8f:9d:78:91:96:fa:bc:7c:61:c6:0a:a4:14:b7:
ce:17:11:0d:88:bc:8a:38:7f:29:dc:ea:48:2f:d7:05:bf:f7:
a6:6b:ed:fe:e9:87:55:bd:c8:63:ab:be:7d:68:03:31:89:cf:
6d:d6:d8:2d:23:d3:58:65:fe:0d:62:ce:af:d2:f3:21:4c:6a:
91:69:3b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:43 2025 by rpki-client