Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3eab80d9-6157-30bd-82da-49f5ace04359.roa
File: 3eab80d9-6157-30bd-82da-49f5ace04359.roa (raw, json)
Hash identifier: MT3Ny92FuIrQrqzHdmxTq0XSm5TJWjXb1GLnbqR+y40=
Subject key identifier: 82:2D:99:EA:16:C9:DE:9E:39:B1:EA:1D:6E:BE:BC:F5:E8:E5:B1:0C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E49C5D3CBB3B4FEA088508260
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3eab80d9-6157-30bd-82da-49f5ace04359.roa
Signing time: Sat 18 Jun 2022 12:00:00 +0000
ROA not before: Sat 18 Jun 2022 12:00:00 +0000
ROA not after: Sun 24 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:49:c5:d3:cb:b3:b4:fe:a0:88:50:82:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 18 12:00:00 2022 GMT
Not After : Jul 24 04:00:00 2022 GMT
Subject: CN=add61793-a640-4a8b-a7be-58ffaf84ffd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9a:0f:a8:d0:8f:f7:8b:d9:56:3a:e4:84:1a:
a4:36:65:9d:74:36:fb:3d:3c:40:d9:1a:97:73:82:
38:ad:c9:e3:94:81:a3:ce:4c:89:7e:59:99:36:da:
f3:f8:10:00:72:9e:08:8e:59:71:f4:2d:27:b9:73:
33:3d:c8:1b:51:69:f1:df:18:2f:2c:26:72:d4:5d:
5f:4a:45:f4:02:57:e5:36:f0:10:be:d5:3d:3f:f4:
c8:2c:4c:74:48:51:a4:7d:50:35:84:59:8b:2f:c0:
a5:0f:0d:3a:69:c3:ec:f6:44:d8:13:38:52:c5:92:
2d:ee:08:1a:b7:9a:19:31:4e:bd:d1:c3:2c:43:fb:
98:ab:6c:d9:2d:8f:1d:93:5d:0b:3e:63:60:28:61:
5e:11:1f:6f:fd:09:9a:2b:b0:36:33:11:f3:96:24:
68:02:80:88:91:20:5a:9e:8b:91:35:0c:a5:96:04:
80:1b:bd:b4:ea:33:1b:1b:a4:4f:7e:06:ef:f4:40:
1e:0c:bf:65:cf:5a:d7:e8:ba:8e:5b:5f:c1:fb:6b:
d9:4f:54:9e:95:74:81:9f:af:ba:93:28:a4:b0:73:
c7:6f:45:7b:d3:13:c3:19:47:0a:46:28:a5:9d:e7:
7e:ae:6a:28:98:f2:44:b5:42:3e:e1:f4:8d:09:dc:
a1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2D:99:EA:16:C9:DE:9E:39:B1:EA:1D:6E:BE:BC:F5:E8:E5:B1:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3eab80d9-6157-30bd-82da-49f5ace04359.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:d3:8a:23:88:42:08:27:a4:97:f1:e4:1c:d8:c2:11:39:61:
f7:d4:4c:a1:9e:7d:d4:11:92:cd:59:01:40:0d:13:fa:1e:8e:
84:55:45:86:e7:ba:fc:10:2e:fa:73:56:fd:27:69:41:ad:ad:
a9:bd:b0:9d:3e:67:d5:f9:57:ee:03:b7:88:55:2c:9d:d9:45:
64:e2:66:41:24:11:cc:f7:3f:06:c0:30:13:f9:4c:7c:25:11:
a2:60:f1:14:28:95:5f:af:f3:6b:4a:19:30:99:44:5d:2d:f5:
fc:88:3e:b2:33:ed:26:d2:6c:26:d0:38:7d:39:8c:d1:52:4f:
37:bb:05:68:3e:74:fb:ea:46:03:6a:53:ca:f3:aa:cc:7a:cd:
cb:df:5f:7e:31:10:99:88:c1:29:18:a7:9d:36:6e:f1:6e:6d:
96:bc:55:ec:12:00:c5:0e:d7:2d:c4:23:77:ba:06:b5:13:2d:
39:25:ef:a5:d5:eb:69:3f:6b:6d:5a:fc:32:91:ef:a5:5f:4c:
15:d7:4d:2f:b8:3f:c7:ee:70:3e:ad:ce:eb:4a:bd:ba:50:f0:
f4:5f:7c:fa:e6:5c:16:fc:8e:98:51:7a:e5:12:08:31:2e:1f:
52:ba:55:c9:39:c9:e2:43:dd:d2:78:68:f4:45:08:56:9b:b3:
a9:fe:ff:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:13 2025 by rpki-client