Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d960a33-18eb-32a6-930d-5996c6ebec73.roa
File: 3d960a33-18eb-32a6-930d-5996c6ebec73.roa (raw, json)
Hash identifier: scrtkhMA+v+fbvvshBXPajLukyIIGs/9YrTw+Zdh73c=
Subject key identifier: 27:1B:8A:DB:21:24:C0:6D:CD:AC:1B:57:BE:39:96:36:03:FD:EF:40
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D8B9D5EC0A77EF50D14B75F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d960a33-18eb-32a6-930d-5996c6ebec73.roa
Signing time: Tue 12 Apr 2022 04:00:00 +0000
ROA not before: Tue 12 Apr 2022 04:00:00 +0000
ROA not after: Tue 17 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.115.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:8b:9d:5e:c0:a7:7e:f5:0d:14:b7:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 12 04:00:00 2022 GMT
Not After : May 17 04:00:00 2022 GMT
Subject: CN=bfb4bca7-76ca-413d-8081-d499614b2f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:30:25:5c:cd:22:f8:2e:03:01:fd:5b:72:27:
9c:e5:0f:1b:41:8e:2e:bc:16:6f:0f:4f:68:00:87:
73:0d:ed:09:35:0a:23:6a:d2:dc:44:f1:51:52:96:
6f:3e:1b:17:1c:48:38:e2:75:e2:ea:32:a0:79:43:
c5:66:23:6f:20:ee:af:fc:64:ef:73:65:40:5f:fd:
42:bf:46:88:90:bb:d1:21:42:77:24:1a:45:55:79:
6c:58:6f:6e:e0:b6:e3:90:17:c3:79:3c:31:42:61:
4f:91:a1:7b:36:ad:c6:4c:43:47:9e:27:80:b7:36:
b5:3d:3e:e9:04:d9:15:58:bc:51:d2:a5:c5:60:f7:
09:19:76:9d:d6:13:30:e8:95:5a:24:77:c8:e1:00:
d4:2f:ae:36:34:d1:f2:d4:30:b1:ef:b8:f5:58:53:
ff:b3:64:b7:d4:ee:e0:98:2e:dd:84:97:8a:20:da:
16:23:fd:46:a8:de:89:1f:3e:11:21:fe:1d:06:4c:
79:04:ae:16:dd:89:3c:33:1d:f8:8d:b7:ec:0a:18:
e3:76:1a:b4:74:2c:06:5e:6f:b1:b4:01:20:1b:5a:
c5:3e:f6:36:81:07:a0:56:a0:25:f1:95:c8:60:b0:
2c:39:08:47:24:7b:32:19:bf:1d:bc:8d:30:15:19:
5f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1B:8A:DB:21:24:C0:6D:CD:AC:1B:57:BE:39:96:36:03:FD:EF:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d960a33-18eb-32a6-930d-5996c6ebec73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.115.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:21:bb:7b:b8:76:b8:72:32:1c:61:67:9b:24:7a:6b:b9:21:
47:68:42:d5:82:fe:8d:60:ff:94:f8:12:37:67:a1:96:2f:7d:
28:68:bb:2c:8b:bb:26:83:51:98:9c:d3:2e:d1:cc:2f:b2:e1:
3e:75:66:25:00:1c:a0:39:bc:43:d7:75:28:db:4c:7e:a7:34:
4f:bf:20:13:8b:de:91:d9:5d:6a:9c:b9:d6:b3:bb:57:78:6c:
ea:de:43:c3:e8:e2:ee:b6:b7:30:96:31:6d:ed:d3:fb:94:70:
d8:e0:2d:77:0c:0f:67:50:63:bd:68:c2:ce:8b:0e:f1:30:3b:
0a:18:67:72:6d:25:14:dd:69:5c:4e:9e:ee:29:f5:bc:40:f3:
23:3f:16:b7:f2:21:6c:f1:b4:bc:4b:0c:ef:67:21:fc:95:bf:
12:f8:0f:88:7c:85:a5:37:ee:f1:89:c9:ad:8e:03:be:5c:1c:
17:f0:21:6b:b4:09:ec:2a:bc:81:06:13:44:f8:39:74:62:88:
30:bd:4f:f0:49:67:63:36:f5:db:d6:08:01:44:98:ef:a2:30:
8f:f4:68:c3:81:f5:ac:8d:67:06:90:e7:c7:6e:de:6c:c3:7d:
c4:9a:21:02:92:2e:c5:32:34:88:08:61:73:10:98:13:32:26:
a7:23:5c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:04 2025 by rpki-client