Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/402d1d10-c0cc-3e3b-8a71-2a1e7b633a2e.roa
File: 402d1d10-c0cc-3e3b-8a71-2a1e7b633a2e.roa (raw, json)
Hash identifier: ypVFx08BrWxIxlJr+kWifz/Tdjlj9vR/sURujVG5JR0=
Subject key identifier: 1A:66:18:F0:37:29:64:8A:36:17:FC:5A:70:94:35:6E:21:A5:63:EB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CC80D36C5F603B70C407DCE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/402d1d10-c0cc-3e3b-8a71-2a1e7b633a2e.roa
Signing time: Tue 01 Feb 2022 05:00:00 +0000
ROA not before: Tue 01 Feb 2022 05:00:00 +0000
ROA not after: Tue 08 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.74.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:c8:0d:36:c5:f6:03:b7:0c:40:7d:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 05:00:00 2022 GMT
Not After : Mar 8 05:00:00 2022 GMT
Subject: CN=24ae9177-99bb-47e0-9c3e-71f98ab09076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6d:0d:1d:8d:6b:e6:b7:5d:83:b9:22:a6:f9:
8b:e6:6d:eb:60:b3:1c:5a:27:1d:0a:52:f9:a6:9d:
4a:36:00:2e:6a:e6:96:23:3f:12:34:1d:26:44:61:
55:13:01:bb:c9:07:61:65:4e:13:06:58:d8:11:29:
48:b8:08:f5:6c:f3:50:59:0d:55:ff:d3:c7:34:9b:
34:a7:d7:c4:cd:22:0a:3e:5a:e9:38:cf:95:57:e1:
6a:90:4a:45:86:5b:81:8d:60:8b:b2:e6:72:ed:ca:
fc:09:56:f3:8d:79:8b:5c:f5:53:60:c2:0d:70:eb:
95:6c:17:ec:e3:dd:a8:e9:28:dd:65:4e:00:15:07:
b6:b7:38:ac:b7:54:18:83:24:41:74:93:9a:75:7d:
25:b8:9d:2f:a2:4a:a8:9a:fb:01:71:f7:13:d5:fa:
6a:8b:70:74:7c:b9:38:4d:5f:3d:dd:df:2a:ca:93:
83:38:9b:4e:88:9b:ca:c9:f6:9d:28:89:8b:37:55:
b8:a6:ee:5c:94:32:3a:a0:34:c0:1c:5d:f3:46:16:
88:e5:86:7f:7f:9a:fb:8c:cd:86:92:7f:85:a3:30:
61:5e:13:af:4a:9c:e5:99:97:75:c0:df:c1:6e:ab:
a8:81:28:dd:fb:6e:16:0e:ee:10:b1:b8:e0:2b:90:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:66:18:F0:37:29:64:8A:36:17:FC:5A:70:94:35:6E:21:A5:63:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/402d1d10-c0cc-3e3b-8a71-2a1e7b633a2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.74.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:29:2d:e2:50:ad:22:c8:10:6a:e8:04:fa:f0:28:c2:22:9b:
84:14:dd:bf:3b:cb:3d:f7:15:c5:de:5c:e9:10:e7:b1:f9:22:
fe:10:bf:d1:2b:f2:7c:06:65:e9:54:53:66:ee:64:bd:27:b5:
99:68:53:a0:a8:71:29:48:6f:7f:69:09:3d:b9:c9:70:85:ee:
5c:da:d6:34:bd:61:5d:dc:7c:b0:87:e3:d7:c3:67:e6:f6:ec:
cb:71:01:a4:d0:18:e5:2b:1f:f4:b3:2b:6a:58:c7:86:e0:f8:
b4:87:dc:fa:2d:b6:bb:7d:cd:58:4a:6c:f5:1c:27:e6:94:34:
33:01:0f:51:47:96:f7:4f:3c:2b:42:5f:f6:14:f9:1a:26:45:
07:11:3c:c1:6f:a3:a9:e9:97:53:0b:a3:84:d8:00:6a:b8:08:
6f:57:62:87:45:d8:55:1b:ad:3b:d7:17:41:1c:cd:1a:dc:9a:
84:dc:8b:25:a7:7e:99:52:fc:98:92:1e:04:6d:ca:cf:36:a3:
89:38:c2:8c:f4:9a:ba:d4:58:2b:a0:f5:6b:55:04:0d:77:54:
cd:25:22:0c:23:a6:91:ab:83:55:9c:23:a4:c3:fb:72:c3:79:
16:4a:ae:43:a8:c8:9a:c3:40:2e:65:cf:69:f6:a2:47:76:db:
fa:2e:fd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:01:58 2025 by rpki-client