Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43a01398-439d-35c9-80fd-a1df8b63a3be.roa
File: 43a01398-439d-35c9-80fd-a1df8b63a3be.roa (raw, json)
Hash identifier: pcdItUrEonQLxWFwnyCg13JeSOghIDX+qPVKX0lqSio=
Subject key identifier: B7:90:1B:85:30:30:64:3D:0F:4E:04:00:23:34:30:0D:43:D0:99:7D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF2E10ACB8F3231825707E900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43a01398-439d-35c9-80fd-a1df8b63a3be.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f2:e1:0a:cb:8f:32:31:82:57:07:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=d883862f-57be-4e7d-9865-acc105a9fd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8e:fa:50:1e:f7:e0:49:23:05:6f:ec:fe:bf:
4a:99:e9:ed:3a:d4:b1:4c:ac:18:6a:9a:27:8c:ed:
ef:00:49:e5:fd:26:ac:87:5a:be:57:5f:88:b4:56:
d6:e5:bc:38:e0:3c:41:78:e7:8d:4c:cd:23:6f:fb:
ca:38:f0:76:37:28:af:b0:06:c6:b8:49:f4:63:29:
04:55:6e:61:af:03:bd:87:ec:d5:81:86:15:9a:97:
61:a8:b8:df:43:b8:4c:27:4f:00:5e:b9:8d:a2:87:
c0:96:a4:85:ff:20:56:3b:e0:9e:95:7b:de:5f:57:
f9:e6:d1:69:22:7b:27:16:df:2f:28:78:03:8d:f5:
ae:9a:57:97:d8:0d:55:0a:0d:59:72:f4:ec:5f:4c:
47:e0:e1:a1:7d:60:50:3d:fe:4b:66:5b:4e:13:7a:
f7:e0:10:49:96:d8:d8:a0:9a:be:14:0c:78:e4:1b:
0c:99:78:e3:e5:01:fa:78:51:d6:3b:63:f4:b2:e5:
25:f6:98:e6:4c:35:e3:4b:4f:8f:32:04:ef:b7:4a:
74:9b:a5:c7:a3:b8:fb:15:10:6c:3b:36:e9:8b:11:
73:90:ae:38:d2:93:a0:a1:71:23:f9:25:e7:9a:19:
f5:81:b0:ee:c7:54:be:30:17:b3:be:4b:53:16:8d:
c5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:90:1B:85:30:30:64:3D:0F:4E:04:00:23:34:30:0D:43:D0:99:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43a01398-439d-35c9-80fd-a1df8b63a3be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:bf:ba:d0:3e:a7:63:8c:bb:1e:40:d5:07:56:57:89:ee:de:
27:3d:d2:d1:7b:62:32:2b:91:1d:61:06:69:bc:a1:b8:83:df:
96:fc:b0:2d:5f:18:57:44:2f:d0:6e:a7:93:0f:c6:3b:b9:4f:
9c:86:52:89:f4:a0:f2:6c:18:97:e0:d8:e9:a3:49:30:db:45:
e6:40:a5:8a:54:b1:ac:26:72:f0:cc:87:f9:8e:35:7e:8d:a7:
e5:0f:6f:d9:3c:fe:ab:21:de:2c:b4:64:4f:52:8f:43:66:5e:
63:71:e0:21:9a:fa:83:eb:6e:d4:09:92:6b:22:24:e0:f8:e2:
9c:83:de:64:aa:ab:72:0b:be:fa:b0:e7:29:69:a3:c1:84:3f:
5d:cd:70:e6:62:c5:32:dd:14:0c:74:f5:61:82:0c:38:33:97:
b0:94:92:16:cd:47:37:e9:c0:db:4a:d1:a8:d1:8b:71:3e:83:
8b:7a:64:2c:e0:68:44:e4:02:c0:48:3d:10:4f:10:b9:f4:b5:
aa:bb:ce:26:8a:94:13:3b:bc:00:25:c4:33:11:cd:29:b3:1e:
98:c1:41:f8:29:9e:e2:08:1f:0c:d6:be:1d:49:a7:c1:86:48:
50:43:a1:9e:70:40:9e:7a:5c:39:4e:9d:91:b5:02:ca:d4:4c:
27:39:bf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:49 2025 by rpki-client