Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60ded0ea-7f09-3f68-8926-3a97893abc2a.roa
File: 60ded0ea-7f09-3f68-8926-3a97893abc2a.roa (raw, json)
Hash identifier: NT4SasO+dDM9gf2fP+zzwQS8Aoxu4Yje904jwM+yjsQ=
Subject key identifier: C5:A7:13:2A:D3:2C:20:DA:0A:BE:7D:F2:8A:F4:1F:63:95:7D:1C:90
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE3FF0296C656EE8700589B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60ded0ea-7f09-3f68-8926-3a97893abc2a.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.206.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e3:ff:02:96:c6:56:ee:87:00:58:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=b8c19a7b-5e52-4a43-9758-dd8452b73795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b2:b9:19:6f:82:81:ca:6c:f8:69:b5:4a:e9:
9c:31:9d:fd:d9:e3:83:77:45:5a:d0:48:5a:48:7d:
1b:35:06:fc:a3:47:76:ea:57:b5:68:35:b8:aa:3d:
3e:b6:93:47:31:03:f3:bf:20:40:3e:f2:a9:7f:4f:
ae:ad:dd:67:2f:e5:e6:26:8d:08:69:b8:35:4d:0b:
43:30:10:dc:50:6d:4c:3d:fb:83:d7:f2:86:df:05:
41:09:84:3d:fd:37:5e:8a:81:90:c2:4f:a9:3b:a9:
0c:0b:a3:25:2a:15:ce:5a:b4:f9:0f:6a:4a:43:8e:
f8:7d:7b:d9:c7:df:21:c3:6b:af:ea:ef:8c:62:47:
3a:7a:2a:a6:28:ee:c2:5d:41:db:23:9c:18:ce:95:
19:fb:5e:d2:93:29:e2:c9:08:4f:f2:47:1b:03:f2:
56:83:55:45:ac:d2:19:7c:3c:cf:c0:3d:59:11:5b:
1b:b7:f5:48:97:00:03:d9:3a:73:01:6a:64:7b:8f:
17:5a:c5:ae:93:38:ae:a3:8d:67:ec:20:48:b5:50:
96:41:f3:4b:bc:f2:e5:14:21:14:bc:82:d5:e9:62:
47:13:1e:d1:8c:b0:9d:23:b2:61:f1:df:fe:9b:d1:
54:4e:e7:08:58:15:27:5c:08:03:17:60:4e:bb:f5:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A7:13:2A:D3:2C:20:DA:0A:BE:7D:F2:8A:F4:1F:63:95:7D:1C:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60ded0ea-7f09-3f68-8926-3a97893abc2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.206.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:91:e8:65:3b:e5:03:f2:84:8f:cd:96:31:cf:de:77:9f:e7:
50:c0:4a:1a:64:16:88:5a:b9:30:a7:28:1c:8d:c7:bd:31:f8:
bc:a4:df:06:fc:70:d5:e8:6d:14:7f:bf:00:83:73:38:9a:40:
39:d9:70:a5:fc:2b:7d:68:48:a9:91:1b:7b:24:d3:2a:5a:06:
31:0e:8e:d0:a7:a4:2d:5d:dd:21:ce:8b:68:b0:59:ca:53:ee:
4f:06:db:ee:69:b0:3a:30:62:c1:38:f4:de:0e:97:35:c2:2f:
27:4f:f3:3b:80:9c:1e:83:5b:62:a8:ed:8e:7c:ef:c6:5f:55:
22:38:7b:f8:a3:e8:d2:c8:b1:0c:4a:79:4e:c1:2b:3b:f2:c2:
8f:d6:3a:3c:da:d8:f4:b1:12:af:8f:ba:47:33:57:01:8d:88:
81:a5:3a:b5:c8:f4:da:00:c2:48:9c:a9:dc:7d:0c:26:71:1d:
9c:63:8f:96:d3:73:6b:ec:fe:83:07:4d:07:b3:17:6b:3c:85:
c8:26:04:31:4a:3f:95:d6:7f:ce:58:2f:4c:fb:71:01:ad:a3:
1e:a8:c7:71:1b:be:99:4e:d1:3d:0d:27:84:5e:54:54:f8:ca:
f1:7f:ac:20:0a:45:eb:b7:a7:0b:57:17:eb:97:fb:f8:f2:5f:
37:f9:99:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:20 2025 by rpki-client