Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6c46ca5c-6ffc-3d84-a064-95a5ffe72a31.roa
File: 6c46ca5c-6ffc-3d84-a064-95a5ffe72a31.roa (raw, json)
Hash identifier: wtrBqxLs09Jh198Lt9KIisWvx4QMJjUXRHAjEQCFM+o=
Subject key identifier: 3C:AB:DE:3F:DD:D9:6C:96:87:BE:B7:B6:3A:BB:0C:B0:95:33:FD:18
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401ADB8DF581DB1DE566B96880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6c46ca5c-6ffc-3d84-a064-95a5ffe72a31.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.104.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:db:8d:f5:81:db:1d:e5:66:b9:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=a7493bc7-2567-489a-b772-3e2afdcf757e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2c:c4:70:d3:fd:23:11:6a:8f:f5:aa:4b:c0:
bc:69:4f:b6:73:a3:29:3e:75:8b:79:75:60:4f:14:
49:7f:2d:81:80:22:f1:15:d9:5e:c0:c2:35:31:12:
5c:2d:be:86:98:da:47:af:f5:03:e1:57:2a:59:4f:
9a:09:5b:68:33:8c:10:04:7c:05:1d:f7:fe:aa:1d:
f5:df:3b:1a:ed:d2:84:63:0f:fe:49:45:e9:38:4f:
25:85:52:bd:e6:e5:7f:fa:f6:3e:80:33:1e:37:b4:
25:57:1f:41:4a:7d:92:c7:d5:2f:46:9c:2c:d1:fd:
f3:25:56:5d:7f:54:1e:3f:8f:d6:6a:b5:23:4d:1b:
7a:62:6a:37:18:91:4e:ff:af:e4:ff:1a:36:8e:4e:
a2:00:75:7d:bd:f9:a5:24:4e:f5:96:3a:db:02:e2:
ac:96:bc:f4:81:0e:3d:b7:b1:92:06:80:dc:7f:13:
dc:f6:98:47:e2:15:30:42:0a:21:2b:80:a1:cc:e1:
cb:de:06:a9:d5:bc:3e:31:5f:2c:00:87:94:f7:66:
0b:25:bf:e2:ab:a1:b5:89:e3:eb:53:76:e2:e2:c4:
f6:e1:ce:a8:55:f6:ba:a0:75:c9:5d:fb:09:30:56:
4d:d9:bf:9f:f3:cc:2f:ee:42:4c:91:df:ec:d7:dc:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AB:DE:3F:DD:D9:6C:96:87:BE:B7:B6:3A:BB:0C:B0:95:33:FD:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6c46ca5c-6ffc-3d84-a064-95a5ffe72a31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.104.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:85:ef:6a:ca:11:80:49:92:93:1a:b6:90:45:2b:2a:8d:40:
b6:4f:68:1c:80:9a:7d:25:ac:4c:41:3f:4f:ad:21:df:5b:8e:
38:27:62:66:1d:bb:1c:f4:c7:36:b2:18:10:56:53:19:3d:4a:
ec:94:be:a4:32:22:b3:e2:8f:f4:5f:04:bc:04:cc:44:e7:a2:
d7:5a:9c:8b:84:e1:8a:38:c7:3c:d3:35:2b:56:aa:32:9d:1b:
fa:2a:cb:4a:12:83:2b:7f:87:47:0d:57:09:73:eb:15:3c:4e:
15:eb:fa:51:ba:59:89:9e:c6:0a:30:15:f9:76:52:65:24:52:
09:80:f1:dd:73:63:88:bb:d8:7a:bf:02:33:98:d3:f5:80:bf:
77:ed:35:03:71:99:ab:4c:77:cc:ca:90:57:09:9a:a9:6c:f6:
b0:79:40:c0:97:d5:45:56:81:57:97:a4:11:fc:26:7f:93:a6:
a6:71:b4:b8:a0:5e:94:9f:8f:ae:01:43:ce:55:87:35:49:4e:
1a:5b:da:53:aa:a9:f7:27:46:fd:31:a2:9e:0f:4a:17:51:42:
38:ec:4b:a5:6a:7e:94:e6:7f:e0:89:e3:43:5f:e6:71:cd:9a:
08:b7:26:22:60:ed:38:1f:3f:c9:8c:63:c1:fc:4d:36:25:a2:
4e:e7:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:57:16 2025 by rpki-client