Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43768e32-aa7c-324c-bceb-eee2324385ab.roa
File: 43768e32-aa7c-324c-bceb-eee2324385ab.roa (raw, json)
Hash identifier: aVsAt6jiJLhctapvKR2MdKqg6i+H5T0A78PFi9Ney8Y=
Subject key identifier: CB:97:75:A8:C5:44:EE:7D:B4:02:58:50:8B:00:64:99:7D:A1:15:8A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401AE2ED9745C2B3323EFC04C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43768e32-aa7c-324c-bceb-eee2324385ab.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.77.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:e2:ed:97:45:c2:b3:32:3e:fc:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=3a6d3d4d-d08b-4668-b674-89e8b931f246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:61:d4:f9:6b:3e:fa:bc:10:5a:f3:94:eb:61:
85:be:1f:11:d2:cb:02:2f:65:80:85:37:c3:44:7b:
79:4d:5e:3b:3b:27:8c:5e:2d:b8:4d:e2:7e:82:db:
42:c0:62:64:b6:38:b1:b7:83:e7:f5:e4:06:47:08:
e3:a6:82:f1:ca:55:98:52:4f:a6:66:19:fb:aa:fa:
fd:0b:d8:42:97:8d:ee:60:13:0b:df:27:98:e6:69:
93:7c:2f:b3:8f:f9:64:23:fa:2e:02:c1:b2:85:e7:
d9:69:25:4e:fd:81:cf:ef:28:fe:5b:60:85:39:4f:
f3:73:56:49:3f:7e:e2:a4:fb:65:d6:d3:46:65:44:
05:58:7e:8c:41:a5:97:b8:f9:45:01:63:12:8d:51:
61:f7:10:f0:01:65:3f:ed:99:c0:90:95:e7:af:54:
d7:1d:eb:d2:ad:df:f4:1c:81:91:4e:c6:90:15:f3:
3a:99:4a:71:ef:95:5d:a4:48:6c:06:00:c9:50:57:
71:a6:2d:c7:4d:16:10:25:3c:cf:df:63:95:8c:80:
11:fb:d3:d6:03:ef:db:03:70:3f:dd:96:5d:de:04:
a3:55:5e:aa:0c:5a:00:dc:e3:77:d6:60:6d:fd:e5:
f9:36:15:b1:ce:81:6e:e8:a5:a2:0b:3f:4e:71:bf:
32:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:97:75:A8:C5:44:EE:7D:B4:02:58:50:8B:00:64:99:7D:A1:15:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43768e32-aa7c-324c-bceb-eee2324385ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.77.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:0b:a4:ab:75:37:6c:2a:f6:48:9a:4f:47:6c:80:3d:62:a3:
bf:fd:26:7d:e6:e2:29:ae:fc:18:b6:40:e5:2b:78:2f:39:fd:
1f:60:3c:96:ad:a2:3c:dd:32:4f:07:d8:69:2a:ff:34:39:12:
f4:24:76:c8:20:59:80:67:e2:62:4f:e4:67:fd:a7:fe:68:e8:
18:14:c2:fc:2f:34:f6:82:04:fc:14:40:26:de:40:b1:56:04:
7d:ca:9e:3a:3b:d8:93:28:66:0e:39:d0:8f:66:53:c9:60:e8:
83:f9:46:bb:25:06:fa:6d:07:51:8d:bc:a9:80:61:e9:a5:1d:
4e:cd:84:8d:24:97:cc:e7:f4:7d:e4:22:6c:fb:8c:c1:c3:db:
d2:97:6c:a5:91:82:17:a4:c1:79:9d:b3:e5:c5:e3:fb:0c:58:
38:e1:55:79:8a:ca:52:40:c6:90:88:be:7a:d4:14:99:f4:fa:
a3:ee:58:aa:11:8b:6b:55:99:31:60:c8:02:3f:3e:c4:6e:03:
0b:5c:1b:57:fd:ff:73:1e:44:0d:aa:c9:ba:c7:4d:93:17:2c:
83:e2:e7:7b:ee:6f:c8:b6:54:d9:26:6a:8f:16:45:32:5c:8e:
1a:f9:e5:83:4a:91:c6:89:c4:de:cd:59:4b:82:61:f0:c3:32:
bb:a8:20:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:05 2025 by rpki-client