Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/576eb13d-a76b-36c6-be84-da0362a47bcf.roa
File: 576eb13d-a76b-36c6-be84-da0362a47bcf.roa (raw, json)
Hash identifier: XZDtoi/kV+IaAYueNWTS/aqlfyP++4fnW3jhUvWJqKg=
Subject key identifier: B5:EE:95:8D:38:23:D1:33:39:93:9A:D3:81:F4:5C:82:02:6D:AC:2C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406493CF26BD0B31A9937C4D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/576eb13d-a76b-36c6-be84-da0362a47bcf.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.156.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:64:93:cf:26:bd:0b:31:a9:93:7c:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=038887d8-3c93-49f1-bdb4-87d2a99b0ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:a5:43:5f:f7:55:e9:af:e0:5f:bc:b4:27:
3c:f2:f8:c3:51:5e:3b:76:39:9d:3c:68:53:dc:12:
83:6a:58:7a:d4:93:4f:4f:ef:15:b4:1d:24:49:56:
33:fc:43:4f:c1:e9:6a:7f:b8:d1:09:b0:8d:6a:d4:
dc:a5:ae:91:d7:96:23:bc:4e:2b:6c:61:73:8e:78:
71:bf:c3:e2:e3:00:ea:cf:51:55:23:ee:52:38:58:
28:c4:73:0d:f6:ac:66:45:71:83:f1:84:45:a9:3e:
f0:c6:ac:14:1e:f4:c4:63:ab:97:a1:07:56:c3:f3:
38:d3:79:d9:5f:ae:ac:03:34:3d:0a:0e:0f:d0:6a:
93:42:26:56:08:01:6e:16:c0:ce:b0:14:8c:58:e1:
a9:c4:74:e8:72:ce:ef:cd:d5:fd:d9:10:32:8f:16:
00:60:c5:60:ed:10:86:68:55:7a:66:3c:c3:99:09:
8a:50:f9:e8:43:0d:bd:ca:ee:3d:46:7d:28:40:6d:
35:54:6a:68:f9:ca:bd:a6:23:59:fe:48:39:ea:9b:
8f:c0:0c:3d:82:98:15:c9:be:82:2d:2a:19:79:1b:
fc:ec:de:75:76:b8:e6:5b:4d:b7:5e:d5:fe:94:6f:
cf:62:58:8d:0c:76:08:5b:b1:eb:83:3a:d6:cd:6e:
38:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EE:95:8D:38:23:D1:33:39:93:9A:D3:81:F4:5C:82:02:6D:AC:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/576eb13d-a76b-36c6-be84-da0362a47bcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.156.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:79:41:de:13:5b:61:36:cf:f3:8d:8e:3a:71:56:08:34:0a:
7f:31:36:bf:8d:d5:43:24:26:2f:49:5b:35:70:18:08:f2:30:
ad:2f:78:f8:ac:05:30:45:ef:c8:6a:f8:1f:74:93:f1:b5:eb:
0a:fc:20:7e:08:db:e9:3c:44:d9:cb:80:c7:0f:e2:92:18:9a:
49:55:b9:3c:c3:26:4d:10:47:0f:c4:35:77:b7:89:77:93:ea:
65:06:b9:b6:91:bd:24:5c:de:26:77:23:c2:fa:e0:6b:7f:6d:
65:a2:3e:4b:a5:e2:da:64:36:0a:73:f6:5d:69:72:d6:bc:56:
2b:52:30:47:8d:66:01:47:20:42:33:0a:fa:6e:a4:9f:7f:f4:
14:80:ea:e4:6b:d9:c7:c8:a5:11:7b:fc:f4:4a:dd:d5:de:f7:
69:aa:d9:b3:37:31:65:2e:aa:12:ce:58:7b:81:2e:1b:a6:e8:
91:ae:e5:6e:cb:a3:5b:97:c5:59:3c:88:33:d7:a5:28:6f:39:
70:c3:62:f7:5d:f9:68:44:59:1e:14:be:0e:bd:78:41:39:86:
51:09:90:d6:62:46:33:94:11:d5:de:85:50:e7:21:bf:93:e4:
ca:bb:0a:74:bb:31:f6:66:37:da:d5:5d:d3:90:b4:d8:68:85:
18:59:53:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:13 2025 by rpki-client