Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68fa8096-3842-3a15-a0bd-3a1b93066738.roa
File: 68fa8096-3842-3a15-a0bd-3a1b93066738.roa (raw, json)
Hash identifier: 414yNez7zr0teVa2jHhHfkiUwSftOTdKYf01DKX38ck=
Subject key identifier: 57:3F:3A:6D:84:65:0F:DE:1F:38:EE:A4:9E:D2:2E:06:C9:21:8C:98
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F54442850D45942F705BEAC40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68fa8096-3842-3a15-a0bd-3a1b93066738.roa
Signing time: Wed 21 Sep 2022 12:00:00 +0000
ROA not before: Wed 21 Sep 2022 12:00:00 +0000
ROA not after: Thu 27 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:54:44:28:50:d4:59:42:f7:05:be:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 21 12:00:00 2022 GMT
Not After : Oct 27 04:00:00 2022 GMT
Subject: CN=cbfba5c7-d495-46ee-af15-291883e8fb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:e0:a3:7a:a1:c5:6a:f3:1b:10:7b:00:db:
be:7b:03:09:96:cb:7c:34:92:6f:73:77:cc:fc:47:
df:e9:68:1f:04:da:93:a0:14:85:4b:22:44:02:b6:
d4:57:bd:04:cf:e7:25:dd:d3:17:86:c1:eb:ff:e2:
f6:35:cb:6d:aa:e5:30:41:5c:0e:70:18:18:69:2a:
fc:17:d9:b8:35:11:72:6a:0b:81:43:b7:e7:a4:d4:
b7:7f:35:7a:b4:96:f4:43:23:53:76:e2:5e:3b:c5:
e3:91:a0:96:21:e7:18:fa:36:6b:00:bf:ba:cf:36:
a0:68:73:ee:d1:f3:f4:18:c8:9f:93:0c:40:b0:52:
8f:25:0a:ad:5f:ed:7e:c3:8a:cc:bc:90:a3:50:81:
2a:0f:ce:ba:28:79:ab:1f:eb:c0:09:a1:fb:9b:78:
52:7c:7c:4b:a9:1e:f4:2e:83:63:42:78:2b:cf:ed:
87:83:be:00:73:fd:12:0e:c0:52:1c:43:9e:c2:fd:
82:d5:04:ff:f9:cf:34:f9:60:dd:36:15:1b:7d:25:
fd:73:23:26:12:c2:47:1c:b1:61:7f:eb:fa:5c:64:
33:62:ba:a4:ba:43:85:56:cc:d4:ef:97:bb:b6:aa:
89:0e:c9:9f:23:f7:8b:d0:ca:fa:3a:39:ab:30:a1:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3F:3A:6D:84:65:0F:DE:1F:38:EE:A4:9E:D2:2E:06:C9:21:8C:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68fa8096-3842-3a15-a0bd-3a1b93066738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:cb:92:64:72:86:5d:6b:56:84:b0:ed:fb:9e:b4:d9:a2:80:
ac:6f:98:47:f8:40:bc:73:da:94:f1:d6:10:98:3d:8b:77:07:
ed:7e:47:94:0d:12:19:07:95:af:b4:71:ad:8a:63:e6:a8:2d:
7d:9d:9e:9c:b5:44:62:7c:9a:84:e9:ff:4d:21:b2:e1:cf:b6:
e9:de:e1:d0:ca:7e:fa:5c:91:f0:70:d4:40:fd:f7:15:0d:d3:
f1:26:4d:49:6f:fe:ed:4b:d5:c6:a8:ff:7b:51:18:b1:6b:f2:
91:19:e4:83:57:9d:33:dc:51:9e:4b:23:42:8f:f3:d0:65:0e:
97:c9:09:f1:41:a3:cb:f2:44:d5:c3:bf:18:f6:e1:e0:4e:73:
a8:f0:b1:91:24:a6:b8:2a:f9:a6:3e:28:99:ae:b4:55:84:ef:
57:9d:08:8c:eb:e3:eb:6f:46:53:96:08:2d:34:00:36:7d:f0:
07:05:fb:b3:f2:da:e4:83:fa:fc:95:dc:a0:e7:13:99:91:e6:
97:19:30:26:d0:e4:7c:ee:70:2f:ec:23:fe:eb:3c:b5:7e:c9:
de:e3:dc:74:57:6e:35:76:82:35:b9:3a:2c:e2:c5:ba:ba:66:
a9:c4:d4:58:8d:17:90:13:5d:36:31:a1:d3:76:30:40:0c:94:
9a:56:9e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:20 2025 by rpki-client