Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70817b75-3dc9-39b4-83d3-f0c2c2c0afd1.roa
File: 70817b75-3dc9-39b4-83d3-f0c2c2c0afd1.roa (raw, json)
Hash identifier: 3kdFhA6D0n1TE/SG7seWu3esY9G38qcqk1S5I7ir5Ag=
Subject key identifier: 61:E1:21:E0:62:A3:19:CF:AA:AB:07:03:F0:57:A3:3D:4E:1D:09:9A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B39E21E2F0075ABBE827EEA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70817b75-3dc9-39b4-83d3-f0c2c2c0afd1.roa
Signing time: Wed 25 Jan 2023 12:00:00 +0000
ROA not before: Wed 25 Jan 2023 12:00:00 +0000
ROA not after: Thu 02 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.23.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b3:9e:21:e2:f0:07:5a:bb:e8:27:ee:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 25 12:00:00 2023 GMT
Not After : Mar 2 05:00:00 2023 GMT
Subject: CN=3e57b943-dee7-4bf3-8cf1-693c1f34d8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:48:4d:c3:4b:06:b6:68:f5:d6:cf:90:1d:
26:8c:e9:1a:3a:e9:19:76:9b:0f:ea:3d:22:36:b6:
2e:c9:78:e8:78:4f:1c:53:f2:dd:76:a8:92:8e:e1:
4b:97:a9:8a:99:04:34:06:d5:79:aa:44:25:f9:72:
67:4a:ff:e3:c3:82:d9:6d:96:87:bf:c0:b0:8d:cf:
cf:62:6a:c7:16:e2:d1:4c:4d:7f:be:f6:bf:50:a6:
ae:5f:ad:64:4c:b3:ac:57:6a:2a:07:ed:e9:e9:1a:
31:74:02:11:a6:4a:30:52:cd:57:9e:fc:5b:a4:5a:
50:43:da:74:88:60:a9:92:9a:21:55:ad:2a:ca:f6:
17:69:f2:d3:ef:03:67:03:77:8d:1f:07:b4:05:2d:
19:5c:fb:78:c6:6f:1f:ff:73:07:06:c7:59:3a:95:
10:b1:d5:09:40:c0:f3:cc:46:08:1d:5a:f7:5a:30:
a5:30:a5:49:c0:0f:bd:fb:cb:24:3f:1f:44:ff:fb:
d6:5b:ed:ba:27:5d:2f:58:17:1e:d8:eb:d9:63:6f:
cc:2b:50:10:dc:50:5b:f7:e9:11:4a:75:75:87:ed:
e2:c6:1d:7b:d9:19:59:a8:da:d3:4d:f3:9b:75:c9:
82:f5:4d:a1:98:f9:c3:48:82:73:f2:6f:f2:9f:0d:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E1:21:E0:62:A3:19:CF:AA:AB:07:03:F0:57:A3:3D:4E:1D:09:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70817b75-3dc9-39b4-83d3-f0c2c2c0afd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.23.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:6d:11:6a:6e:af:ca:53:e1:c8:cd:e2:69:cd:d6:f6:4d:75:
e8:74:a4:62:03:72:6b:3a:c6:95:81:2a:71:6a:7c:f6:fb:93:
6b:7e:11:3c:85:12:15:4d:77:50:f6:3e:42:14:62:5f:82:65:
5b:a0:b2:64:ec:a6:1f:e7:28:9c:a9:71:39:c5:62:5e:01:99:
f9:de:c2:a0:ae:98:45:fc:24:1c:ee:93:c4:45:9b:a3:56:f8:
b4:bb:fe:47:06:db:66:84:87:1c:fb:fe:20:8c:7b:3a:ea:91:
db:b2:51:46:d2:27:74:ac:8d:ab:64:3f:77:f6:59:bf:84:3f:
0f:90:39:76:c4:88:5f:42:dc:d2:ab:62:6f:bf:64:bc:4a:f0:
ac:5f:04:f0:34:e4:00:7f:f5:b6:d3:99:74:f0:1f:5f:e7:d2:
98:98:fe:b0:11:cf:72:2b:c1:3b:ab:59:96:4a:ec:9e:54:f8:
2c:74:22:14:1c:4b:88:7b:11:09:8f:f6:bf:30:61:e3:cb:8f:
ee:ef:7f:a8:99:14:76:30:40:50:05:a6:61:cd:a0:b3:4e:9b:
cd:0a:bc:30:9d:25:2b:1b:ae:58:05:52:e2:8c:c9:f1:0a:53:
10:a3:ae:34:63:43:0c:0c:70:47:25:6f:fa:46:d6:23:b3:90:
13:db:eb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 10:19:46 2025 by rpki-client