Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7174747b-3068-3a4e-bec3-5bca67dd4d2a.roa
File: 7174747b-3068-3a4e-bec3-5bca67dd4d2a.roa (raw, json)
Hash identifier: DJmtTfz0OtF0sUrjdEgaOerU2JI6XsQezaj9mYH1tKI=
Subject key identifier: 41:AA:7A:17:25:BF:67:18:89:20:43:22:15:D9:CC:55:62:03:36:97
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C0E889E9C47F7C74EC838100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7174747b-3068-3a4e-bec3-5bca67dd4d2a.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.94.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c0:e8:89:e9:c4:7f:7c:74:ec:83:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=c00d95bb-fd27-4a72-a74c-f6482a4dc82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:16:01:77:f3:69:c7:6a:69:86:1e:64:f8:
c0:ec:7b:11:e2:3d:d0:7b:b1:4e:f8:83:b9:7c:fb:
10:99:d4:5f:f4:7b:be:3e:b0:2d:2c:3c:d0:ad:78:
2e:35:b6:40:58:76:6a:0b:a1:92:53:44:26:ef:0b:
32:03:34:45:4d:ab:74:97:41:f7:58:4e:cf:4d:25:
f4:99:8e:1b:ec:3e:a6:b5:02:d6:1b:ca:71:f0:05:
d3:ad:f1:5d:30:96:f2:77:e1:fd:e1:38:d2:5b:a7:
68:33:50:c0:b9:be:67:04:25:f6:9f:86:45:cd:c4:
1a:5c:9e:96:48:90:04:66:73:8a:f0:ce:02:cd:83:
39:8c:d9:a1:34:33:21:96:d7:5c:0d:44:38:6b:53:
b1:ac:33:ca:a5:6e:24:27:3a:d7:8f:a8:18:6d:c9:
a5:52:ff:84:9e:21:c3:9d:62:84:fc:60:d4:ea:54:
58:42:ee:12:e7:71:1e:4a:a2:57:d3:22:35:01:0e:
d6:c0:a8:27:67:ab:3f:95:c9:7d:93:20:bd:b9:b4:
0d:93:5b:34:04:10:dd:f0:94:0f:28:a5:da:c7:c6:
7b:39:83:3e:c1:36:11:03:af:11:3f:52:1e:9a:b7:
10:e7:00:a4:fa:1e:23:68:e5:52:7b:88:d8:6d:9f:
0f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AA:7A:17:25:BF:67:18:89:20:43:22:15:D9:CC:55:62:03:36:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7174747b-3068-3a4e-bec3-5bca67dd4d2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.94.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:1f:93:6c:86:4c:01:59:a7:99:10:8f:e3:82:aa:db:86:db:
0d:33:b3:a2:51:bd:96:4d:29:8f:a7:6b:4e:0b:cf:50:75:02:
7f:57:16:7c:eb:d4:91:2e:c7:07:32:55:90:64:d1:e4:c2:cf:
f8:a7:9f:6d:ed:3d:d6:52:c7:44:1a:1d:75:95:3f:d5:b5:39:
76:63:ef:7c:a3:68:30:84:bb:60:aa:3b:c9:70:cc:45:84:fd:
ad:13:0d:96:c4:f5:60:1e:7f:2f:fe:ee:c8:4f:8e:22:ef:01:
d0:ff:3b:7c:c6:55:ee:35:dd:df:10:37:6d:4b:41:00:c0:26:
e0:0f:34:ba:9b:ae:ac:2f:87:ba:7d:cd:cf:49:ef:ca:f7:19:
60:ff:5c:73:60:b2:07:7b:70:97:9b:db:59:e4:4e:29:a1:e8:
4f:74:fd:38:36:c2:59:ca:4b:ac:dd:c6:5e:16:b0:81:ac:c6:
47:09:6c:84:53:3a:bf:d7:28:30:db:72:72:a6:b8:3b:52:fa:
03:1d:90:22:44:55:ad:d2:1c:a9:37:13:a0:06:de:0f:0e:cb:
b1:bf:40:a9:20:67:41:b5:4b:e5:3f:94:4f:fc:90:25:75:2d:
31:e4:ec:69:71:47:0d:fb:34:b7:c8:37:cf:4b:32:69:d3:fe:
96:37:0a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:57 2025 by rpki-client