Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5190678b-3bf6-3e66-9956-7ca6af85350a.roa
File: 5190678b-3bf6-3e66-9956-7ca6af85350a.roa (raw, json)
Hash identifier: WSKJPczIdpJ6KP1JlHp//Cvy5Hrf9s+oahBjbgRmI6M=
Subject key identifier: FF:A5:C1:CC:D2:A4:52:F9:11:BA:EE:63:4A:7F:6D:BF:5D:17:A8:F2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD0CA1729F447FB86DDA7AB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5190678b-3bf6-3e66-9956-7ca6af85350a.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.168.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d0:ca:17:29:f4:47:fb:86:dd:a7:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=60636d6c-d248-409c-860b-7554ae49a4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:9e:96:b3:b1:37:ec:e2:d4:97:89:bb:1f:
7e:b1:eb:42:de:77:86:4a:9f:5f:91:cc:5d:5b:0e:
dc:d1:73:3c:d1:a2:74:bb:92:e0:75:67:95:18:81:
53:95:4a:ff:e4:c2:92:74:4c:20:87:db:92:19:fd:
e4:48:ba:0b:dd:33:24:17:4f:48:6b:4f:94:44:c6:
cb:dc:06:26:6d:51:19:03:46:7f:69:cd:c5:3c:c7:
6b:d7:f0:81:fd:f4:f6:21:19:32:d6:c6:b2:38:78:
a1:c3:42:40:94:d2:59:bb:f8:40:94:9d:77:27:26:
b3:27:46:8b:2b:63:bd:2e:a3:69:0e:1d:c3:bf:2a:
ba:ff:50:76:5b:9a:3a:c0:48:cd:04:cc:04:33:fb:
bc:88:f3:85:da:a0:cc:ed:32:4c:3c:8d:e9:7f:25:
17:a0:26:32:c8:2d:99:95:50:5e:e5:ca:dd:e2:35:
56:cb:1a:0f:4c:93:21:8d:f7:27:03:bb:e2:32:e1:
b3:61:60:14:ed:53:66:a0:71:c6:e8:18:9b:24:98:
e9:b8:03:9b:fc:71:54:00:05:12:9c:bd:85:be:19:
76:99:ca:e9:4f:fc:5e:67:22:09:6d:45:a5:07:dd:
8b:82:15:f0:14:20:ed:5c:67:83:16:d7:0d:15:b9:
1c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A5:C1:CC:D2:A4:52:F9:11:BA:EE:63:4A:7F:6D:BF:5D:17:A8:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5190678b-3bf6-3e66-9956-7ca6af85350a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.168.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:10:03:32:ff:74:af:6c:f2:02:38:d4:6d:84:99:d5:1f:cd:
79:88:c8:87:0b:10:e1:d3:06:57:4d:ce:63:1b:a8:ab:94:a5:
45:a5:3e:b9:b9:c5:de:01:0f:32:47:68:61:0d:c5:66:49:8e:
77:1f:cb:1f:3d:3a:7d:50:6a:ce:56:27:fb:0c:03:1d:f5:ff:
08:38:04:3f:81:ae:87:27:bf:ec:de:15:bb:cb:1f:67:50:2b:
4f:5a:ee:25:29:a9:a4:a1:a1:15:d2:e7:d4:79:e2:4a:7a:58:
f8:37:06:8b:a2:ff:fd:42:17:5e:36:d0:71:05:7f:3b:a1:3e:
1c:3d:53:b0:85:97:d2:2b:d2:f3:b2:20:fa:9d:d7:ae:c4:29:
51:e5:de:63:c0:1a:fc:fb:fb:4d:b0:17:00:d5:ec:9a:1f:4b:
ec:44:63:da:53:2a:89:1a:07:d1:16:6a:f2:a9:26:bb:14:82:
6a:6a:a0:49:96:70:73:b8:29:f2:40:55:a6:29:72:3b:4b:78:
dd:98:fe:f2:17:dc:f3:ed:70:2d:63:58:91:b2:26:69:61:5e:
c9:cc:4e:65:33:a9:77:6a:7e:ad:16:4b:70:a7:6d:85:07:74:
5b:c6:cf:24:39:df:32:ce:09:35:f7:19:c5:24:57:cf:07:ae:
0f:ba:fa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:30 2025 by rpki-client