Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/688f4da4-26b9-3bf3-bfa9-efd9a6e245d5.roa
File: 688f4da4-26b9-3bf3-bfa9-efd9a6e245d5.roa (raw, json)
Hash identifier: oeDZmOa5MgT22+YhVHOpKVLCuGTj/iovdwFY4Hr6yck=
Subject key identifier: 09:CD:2C:1E:32:F2:1E:D7:9E:C2:02:A4:C0:FC:E5:7E:71:F2:90:84
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584024401FE00AEAC4CF16674BC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/688f4da4-26b9-3bf3-bfa9-efd9a6e245d5.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:40:1f:e0:0a:ea:c4:cf:16:67:4b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=bb073faa-1b7a-4d12-855a-cd5e901860bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:77:9a:3a:8b:8e:26:b1:f6:7f:8c:b3:46:
e2:28:14:89:52:c1:09:01:c5:00:48:34:a7:b7:a9:
d1:0d:2c:15:c8:60:2e:c0:9f:a0:a1:51:55:df:4b:
a0:1d:96:8a:4a:8a:0e:41:cf:9a:20:60:ab:fe:3b:
9c:5b:14:c2:cc:b2:aa:c9:69:00:89:22:4b:da:94:
d2:a2:25:f9:61:fe:0f:60:85:a5:ba:8a:76:ce:a7:
33:8a:12:2c:d9:3f:cd:74:78:00:72:2f:3a:6c:bc:
9b:1c:f0:3e:84:56:2a:03:e7:4c:38:41:35:1b:5e:
68:ed:48:d5:be:97:70:a4:41:74:56:ce:fc:44:19:
85:3b:f4:7c:e5:42:0e:10:34:37:e0:25:81:6c:cc:
94:c5:73:9b:5c:23:9d:a4:42:dd:a4:b6:a0:64:48:
45:78:56:14:99:7f:2f:99:7c:c0:b9:92:7e:74:76:
52:ac:18:01:7a:4f:16:92:cd:05:c1:c8:9c:65:93:
fe:64:68:68:01:80:a0:2c:78:24:92:ca:bb:f6:78:
08:d1:e1:fd:fb:dd:ce:f2:b4:6e:f6:40:8e:0e:79:
14:c4:bd:81:f4:1d:96:b5:a5:56:ea:99:45:27:38:
b3:c8:e1:69:40:4e:b0:c3:22:af:80:e9:f0:ad:b3:
a1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CD:2C:1E:32:F2:1E:D7:9E:C2:02:A4:C0:FC:E5:7E:71:F2:90:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/688f4da4-26b9-3bf3-bfa9-efd9a6e245d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:4d:c8:5b:5e:69:b7:45:c9:36:93:e4:31:f8:66:0d:24:7e:
5c:30:4f:e4:5e:3b:c5:16:15:ea:73:30:13:71:fd:8c:fb:ef:
a7:84:0c:6a:14:3f:02:d8:c5:c3:a3:db:0e:46:76:ca:2f:2f:
8e:9d:f0:5f:49:4e:d4:b5:d7:ed:04:39:f2:65:c3:f5:45:58:
29:d5:c7:0b:12:78:2e:d8:b7:7c:eb:08:c7:1c:e0:69:8e:21:
32:ce:77:12:6b:83:38:7e:62:f5:cf:f6:d9:72:e9:44:54:85:
e3:61:92:d4:7c:3c:f4:f4:09:c6:48:50:de:28:c8:a5:9d:4d:
cb:f6:78:8c:91:f1:bc:37:e0:46:c0:81:01:50:a3:54:2e:80:
ca:a2:d2:66:61:96:2a:c2:a4:69:63:5d:62:91:b6:7f:d2:3d:
e2:99:12:9b:14:88:bc:3f:19:86:32:52:c3:df:89:00:62:65:
bf:e6:0c:09:dd:5f:76:63:7e:5a:aa:61:57:eb:2f:cf:62:43:
cb:68:f3:ea:a6:fd:47:45:c3:93:bb:ee:9a:e9:b2:7a:d5:54:
2c:1c:7d:5c:5f:09:a4:98:cf:4e:dd:c3:c2:d8:52:fa:cb:22:
7b:c0:86:34:c2:35:58:90:3b:5e:02:6a:02:f4:e2:f6:01:1f:
38:b9:85:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:33 2025 by rpki-client