Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47a95587-cdf9-3b52-aa04-1b269261c06a.roa
File: 47a95587-cdf9-3b52-aa04-1b269261c06a.roa (raw, json)
Hash identifier: ntn8rwDQHv/aYCefAr4tuK+zeTJR4ImwFXRvMOq1zio=
Subject key identifier: 21:30:84:1A:A4:A6:7B:4B:91:CA:28:58:85:60:A6:07:81:5C:67:E6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583ECFE44BCA634DDA8FC8481040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47a95587-cdf9-3b52-aa04-1b269261c06a.roa
Signing time: Fri 05 Aug 2022 12:00:00 +0000
ROA not before: Fri 05 Aug 2022 12:00:00 +0000
ROA not after: Sat 10 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.26.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:cf:e4:4b:ca:63:4d:da:8f:c8:48:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 5 12:00:00 2022 GMT
Not After : Sep 10 04:00:00 2022 GMT
Subject: CN=d953d02f-91fe-47a0-80e7-6209b1977754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:05:85:bf:e0:e5:a1:00:ff:58:10:bd:db:
1b:85:b0:e8:cd:0c:73:0e:0a:19:7b:d8:3a:35:fb:
56:13:37:b2:41:7b:2e:a7:bb:ed:35:dc:56:c5:4a:
b0:e0:de:6c:f0:07:ce:0f:96:dd:ba:0e:53:01:1a:
9d:71:eb:6c:59:ce:29:7e:dc:f4:73:32:b2:ed:c4:
8f:a3:a6:d7:34:58:f8:70:32:29:34:8c:01:4e:19:
40:b1:54:ee:c0:22:03:6d:2d:7d:1e:dd:ce:5f:41:
a0:3c:20:bd:1f:5b:eb:ab:26:ae:0b:ed:df:77:cb:
35:3c:71:e8:92:3f:13:1f:0d:11:1e:60:1f:24:5a:
b1:31:0d:d2:21:bf:f3:62:9a:fa:50:85:6d:40:92:
eb:a6:e9:8a:67:f3:4c:ba:50:4a:96:a8:72:01:b5:
9f:20:1c:53:04:2b:ac:b4:1e:26:e0:4d:76:51:8c:
6a:f8:7a:88:92:50:53:e5:e3:3d:7d:57:f7:61:60:
8d:47:ea:15:8f:a7:23:8b:81:6e:a1:7e:e6:ae:05:
60:d3:fa:39:2b:cb:df:d9:cb:bb:33:44:42:6f:f0:
3e:82:68:9c:e0:f7:19:2e:74:f2:9c:5f:2a:0d:91:
79:4c:30:da:33:16:df:34:a8:e7:70:33:7b:6a:7d:
04:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:30:84:1A:A4:A6:7B:4B:91:CA:28:58:85:60:A6:07:81:5C:67:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47a95587-cdf9-3b52-aa04-1b269261c06a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.26.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:52:06:85:92:43:8e:c0:dd:fa:de:9f:c9:68:4c:36:d3:6e:
12:a3:58:64:6e:67:f3:b9:f2:d1:b6:95:89:e3:b1:f7:ce:d3:
4e:16:d7:f5:85:8b:7f:5c:26:6c:1b:95:4d:ee:a2:50:9e:23:
5f:da:4a:bc:03:e9:90:e8:52:39:38:89:2d:40:66:d5:f9:8d:
d6:64:6f:95:9f:b0:e2:7a:9f:59:dd:24:d5:f6:af:3c:ed:23:
b5:49:53:f3:c1:c1:a9:38:48:4c:d5:09:5d:67:1b:68:7c:6e:
3b:88:4c:f2:6b:e3:13:44:05:d9:d8:24:9a:05:96:fb:f7:55:
52:f2:af:57:15:3b:ea:31:9b:e9:0d:cb:14:a0:d8:bc:fc:b1:
ed:3c:48:28:cb:04:78:91:6d:18:20:4d:d4:eb:9c:0a:35:a1:
66:73:d9:f0:7a:35:39:99:00:ae:22:2d:ef:75:ff:eb:3b:78:
a5:15:ec:3c:4a:5b:d2:27:42:4d:6c:4e:73:9c:f8:b0:d5:2e:
8a:17:f2:48:4a:3f:f7:c3:7b:d8:82:47:8e:55:f5:b8:a3:52:
95:cb:4d:7d:81:b3:17:dd:89:9b:31:7f:b7:ff:ce:70:48:17:
a4:50:0c:5e:19:44:6d:4b:bd:9b:46:8c:bb:52:62:02:f0:f9:
82:24:bb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:59 2025 by rpki-client