Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5640a0c8-7887-3151-8553-f007772fa80c.roa
File: 5640a0c8-7887-3151-8553-f007772fa80c.roa (raw, json)
Hash identifier: 1QLEErhZlxsZB9nWroyKhHuyiOtgbWzjb+BcoSmmBvU=
Subject key identifier: 11:2C:28:DB:84:87:FF:CB:10:45:31:10:02:57:DA:D0:47:39:AC:44
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DBE0A57C9E8D4398848D17940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5640a0c8-7887-3151-8553-f007772fa80c.roa
Signing time: Fri 29 Apr 2022 12:00:00 +0000
ROA not before: Fri 29 Apr 2022 12:00:00 +0000
ROA not after: Sat 04 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.15.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:be:0a:57:c9:e8:d4:39:88:48:d1:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 29 12:00:00 2022 GMT
Not After : Jun 4 04:00:00 2022 GMT
Subject: CN=e74dfd65-ef64-42f8-9d35-feec6166bd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:ac:7a:42:45:b9:8f:33:65:4a:66:0f:c8:
11:48:16:79:cc:85:c7:12:7f:22:92:98:be:26:9c:
d9:3c:85:53:7b:9d:00:c8:b5:65:96:b8:9d:de:7d:
50:80:e1:ba:e1:8e:d4:27:99:f8:29:07:45:13:90:
0a:65:03:2a:6d:56:11:9f:e7:b0:44:05:51:c2:50:
99:12:5d:51:2f:b1:da:87:90:52:a7:2a:9e:87:ac:
eb:ad:8a:7c:8a:70:a2:27:74:e5:ec:46:48:51:e6:
ae:21:a7:bb:c1:5d:46:ed:4c:60:96:cf:f3:d5:d0:
f2:01:a6:68:5c:2f:41:4a:00:9b:e1:b5:cc:bf:da:
0a:fd:74:e5:2d:85:ca:8d:51:5d:ca:76:19:db:82:
3e:60:9b:15:5e:4e:70:28:b3:39:eb:15:6b:f2:86:
ea:e5:b9:f9:70:b8:2f:bd:c3:a5:f0:ba:9b:5b:fc:
c9:4b:46:07:e8:f0:36:35:4a:bd:26:b3:b8:5c:48:
9d:45:b3:9e:27:16:6e:bf:3a:fa:47:27:55:79:75:
4c:0f:26:d3:fc:83:74:4b:95:5a:22:38:68:06:ae:
6c:c7:1f:9b:62:2a:a2:e6:ad:27:56:c0:da:44:14:
10:b8:85:77:3c:64:97:c1:e7:0e:60:4f:9b:d7:2d:
29:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2C:28:DB:84:87:FF:CB:10:45:31:10:02:57:DA:D0:47:39:AC:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5640a0c8-7887-3151-8553-f007772fa80c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.15.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:7e:b4:ad:73:cc:c7:2f:f1:35:84:0f:e8:dd:0d:58:19:d9:
70:af:59:4a:6e:38:1f:87:03:33:39:a5:87:d0:43:6b:06:7e:
ad:f1:35:50:49:17:ec:f5:5c:f4:f0:62:70:66:c2:99:26:60:
ea:13:a7:88:16:9d:73:03:b1:1f:e8:6d:f6:fd:ec:cf:f4:65:
bc:14:f5:64:02:c3:20:c1:b1:aa:6e:df:7f:08:bf:21:4b:ce:
eb:e4:17:65:0b:a3:ab:a3:86:cf:24:87:9c:2a:28:cf:a2:70:
af:9d:29:91:c5:72:1e:d8:1a:48:3a:e6:ea:1b:de:97:3e:02:
d1:e4:85:1f:b8:20:e0:a8:ac:bb:e5:a4:07:f9:73:b7:cb:66:
6a:aa:a9:d5:0f:71:d8:fd:8d:db:8c:b4:7c:77:c0:3d:ee:4f:
3b:2a:3f:e5:4e:af:84:ab:1d:64:04:a2:29:5d:47:68:d9:d6:
6a:2d:6b:77:80:7d:33:57:b4:13:a6:9c:2e:df:54:94:18:32:
52:5e:a0:b8:1d:e7:3b:2b:e0:0c:11:5b:e1:24:b0:4a:70:48:
26:19:4b:fd:09:f3:5d:c2:6f:53:cb:9c:21:80:f3:54:68:34:
58:21:33:aa:4b:49:79:b3:ad:77:db:13:ec:f4:84:fd:e3:c0:
c2:47:c8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:15 2025 by rpki-client