Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/64dde0aa-4c9d-327a-a2e5-51af70d03cdc.roa
File: 64dde0aa-4c9d-327a-a2e5-51af70d03cdc.roa (raw, json)
Hash identifier: gPInyGcebitF9VzNkI66OLuTDbfAxDGHAR9IYS3Ad+0=
Subject key identifier: FE:C6:B0:C8:40:0D:54:6F:D4:8C:F2:2D:A1:73:D7:F2:28:A9:F9:88
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840BB5A5E889816C66C02F8C100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/64dde0aa-4c9d-327a-a2e5-51af70d03cdc.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.159.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:5a:5e:88:98:16:c6:6c:02:f8:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=97449b7a-ba5f-48d9-b5ec-1adbb90d5a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:fc:16:c4:62:39:44:21:31:28:58:06:01:
73:00:17:65:cc:e3:33:94:02:c4:84:f0:cb:77:af:
f6:24:d3:80:fa:f2:3d:4b:32:4d:85:f6:03:52:43:
25:26:40:ca:b4:de:c0:8d:a3:a8:9d:94:79:0b:a5:
26:07:d2:3e:3d:67:06:c4:6c:73:3c:05:75:88:a3:
ae:5c:81:14:6d:8a:e4:a4:82:8f:59:dc:ad:ab:8d:
6f:91:81:dc:a6:8f:ea:48:8d:20:65:53:a3:23:1f:
3b:40:cf:a0:9b:75:d5:a0:50:57:06:8e:32:7f:d2:
53:a2:e0:50:9c:c6:8f:d6:25:02:2b:88:c0:66:97:
4b:90:4e:5c:14:d9:f4:29:31:20:9e:5a:4b:65:a3:
09:2c:94:58:98:46:e8:f3:7c:5b:da:69:35:38:1f:
b0:8b:62:cc:aa:3d:bc:cb:18:2c:d5:ba:2f:2b:79:
70:66:41:a6:2c:86:73:33:2b:69:b3:1d:cc:38:b5:
fe:54:93:b5:75:8f:7e:2c:02:74:64:23:1e:5e:c8:
f9:f6:7b:f4:fe:51:b2:88:3e:63:0a:6f:77:36:bb:
26:a8:74:3c:4c:a5:fa:b7:50:dc:a4:5e:7c:9d:f1:
74:52:cf:a9:7b:e2:40:0a:1e:05:45:cd:61:ae:a3:
f8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C6:B0:C8:40:0D:54:6F:D4:8C:F2:2D:A1:73:D7:F2:28:A9:F9:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/64dde0aa-4c9d-327a-a2e5-51af70d03cdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.159.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:d4:bc:99:29:59:3f:96:41:0b:e2:f5:60:66:e9:02:f1:c5:
c1:18:85:b0:a3:3d:ed:84:d7:d5:65:dc:b1:65:46:14:1e:c5:
3f:94:06:28:ad:42:0f:f8:5f:25:5b:1b:8f:cf:96:c8:40:2d:
89:e0:2a:31:ee:e9:2b:7c:cf:36:f6:65:23:74:f1:7e:88:bd:
6e:fa:30:44:cb:a2:e6:34:fa:39:d6:ef:20:1e:00:28:61:07:
6c:00:fa:46:83:97:84:12:03:e0:5b:cb:3f:f7:2e:d4:da:d4:
15:e1:fa:e7:80:b6:03:5f:95:f2:f0:e0:28:3a:c9:d0:9b:92:
b5:d8:9e:0d:ab:1a:d0:31:19:18:1c:0d:56:07:d3:10:81:2a:
f0:c6:74:ce:c8:be:27:3b:6b:83:ce:25:0a:18:92:60:3e:a7:
ec:27:fb:71:dc:06:73:90:af:bf:44:6c:8c:9e:09:6c:ae:b5:
cf:a8:7b:78:a0:0f:d2:88:ce:a4:6a:d3:39:f9:ce:59:7f:25:
e8:26:54:95:0f:54:66:77:40:3d:79:17:38:61:9f:cd:4f:c4:
30:e6:4b:b3:4c:e7:c0:a9:53:00:e0:14:5f:9d:72:bf:74:c5:
fa:8b:81:e2:c8:07:6f:c5:ad:0c:71:5e:2f:cb:05:90:ea:21:
50:ec:12:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:17:18 2025 by rpki-client