Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5915d1c0-9c98-311e-96b7-de5736b4adee.roa
File: 5915d1c0-9c98-311e-96b7-de5736b4adee.roa (raw, json)
Hash identifier: vW4RTo1HX8OscWuZiOAeebBkQ7zlGRAgmwRyeQGzy5E=
Subject key identifier: 9C:AB:D2:EE:EA:45:11:22:EB:28:4D:CD:16:73:31:A0:7E:98:BA:5C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584065301E067A4C048727108C70
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5915d1c0-9c98-311e-96b7-de5736b4adee.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.27.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:65:30:1e:06:7a:4c:04:87:27:10:8c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=bc987196-c709-4360-9b77-7e0a88ffcae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:28:30:26:64:79:5d:bc:e4:ba:30:11:75:2c:
17:bb:58:8a:3a:43:48:f0:26:3b:fa:8e:e0:41:86:
ba:19:93:7e:a5:4a:80:e1:e7:6b:c8:5b:13:c2:a0:
95:cc:1b:ff:95:e4:b3:00:da:a6:9d:cc:a4:0f:aa:
1e:b2:0a:1d:04:d7:ec:3f:c9:cd:23:5c:c5:c4:a3:
51:ad:f1:95:10:c8:ce:fc:c1:67:5a:22:a6:2b:4d:
42:ca:bc:ff:8b:92:20:0e:8b:db:6f:28:33:b2:e4:
62:6e:52:28:2b:34:9a:b0:9e:7f:a5:68:c1:b5:32:
ea:69:92:43:79:07:e9:5c:1f:b7:e0:0d:cd:9e:ae:
dd:fa:57:45:11:6e:c5:19:8c:fc:78:43:ec:85:2d:
b9:01:98:25:a5:a4:1f:39:c7:48:28:a6:7c:c9:ef:
94:89:fb:f1:40:c5:af:71:47:67:a4:5c:39:f9:fd:
eb:d5:96:98:b8:a7:f3:2f:9c:5d:db:06:95:0a:72:
d5:4c:66:30:16:97:e1:fb:13:d4:90:15:51:64:c9:
d3:3f:ee:fd:42:09:c5:1d:a7:f5:0f:f4:80:be:44:
90:a6:c5:84:44:8d:c6:8a:f2:ee:79:47:19:1d:85:
93:de:fa:2d:c5:d4:bb:47:a0:08:0c:80:a3:07:d5:
3b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AB:D2:EE:EA:45:11:22:EB:28:4D:CD:16:73:31:A0:7E:98:BA:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5915d1c0-9c98-311e-96b7-de5736b4adee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.27.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:91:db:21:fe:e2:eb:22:ad:a0:f1:41:28:25:d4:30:f1:15:
a9:93:e2:04:1d:36:b1:7d:f1:a4:0f:cb:8d:35:a3:ce:3f:42:
5f:aa:7f:d8:dc:72:2f:40:a3:c0:12:74:d3:c6:08:a7:3e:24:
b1:67:a9:4e:22:74:b5:6d:dc:b7:28:ed:1e:b2:5e:ad:43:9c:
48:53:5f:79:59:b1:81:ae:d6:ed:a0:5f:46:1e:a3:9d:30:1d:
f9:2f:f4:66:08:25:f1:82:e8:88:86:03:af:ef:66:3e:e3:aa:
38:31:91:5a:cb:62:46:01:84:fe:a4:a3:68:63:da:aa:c1:d9:
46:3d:8a:8d:0e:82:bb:c8:5a:c5:f8:c2:49:ba:f3:8f:5b:e5:
d5:95:61:34:4e:0a:c8:d4:c4:70:30:de:f3:96:fd:b5:46:7e:
db:3e:40:e9:45:ae:5a:3f:be:15:fb:79:d5:94:23:d1:dd:98:
24:44:3e:bb:b1:24:2b:37:8f:99:1d:f8:a4:dc:f4:01:5d:2b:
f3:09:13:0b:ae:df:3b:f3:65:3a:0d:24:62:46:c5:68:2b:f8:
0e:82:dc:b4:50:b7:6c:ad:db:53:7b:5f:86:52:b0:de:be:d6:
b2:fc:38:a9:dc:b0:e9:71:68:53:b1:ee:bf:bb:a9:08:53:60:
97:fe:cb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:00:28 2025 by rpki-client