Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72d3bb48-8e7c-3593-b12f-88f37e2cfa2c.roa
File: 72d3bb48-8e7c-3593-b12f-88f37e2cfa2c.roa (raw, json)
Hash identifier: PWZ0rRYCcVuxFg/Gb5etgZC1zJh89r8lqZiOFQ05ziY=
Subject key identifier: B1:3F:19:FA:D6:71:66:D4:95:39:7C:E7:9F:3D:94:D2:8D:5D:74:0C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C79FF1BFD54E5F45B2AF84E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72d3bb48-8e7c-3593-b12f-88f37e2cfa2c.roa
Signing time: Tue 04 Jan 2022 05:00:00 +0000
ROA not before: Tue 04 Jan 2022 05:00:00 +0000
ROA not after: Tue 08 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.185.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:79:ff:1b:fd:54:e5:f4:5b:2a:f8:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 4 05:00:00 2022 GMT
Not After : Feb 8 05:00:00 2022 GMT
Subject: CN=f7f7aaf2-48d0-4af6-9174-feed31d6d867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c6:96:8e:70:a8:2a:a3:dd:d4:e6:c0:f6:91:
59:c9:9f:af:b2:ed:93:1d:31:63:a0:85:62:2e:d4:
b7:1f:43:99:d2:a9:35:46:68:fe:22:71:a7:d0:0d:
21:ab:4e:9c:4b:c2:ab:1d:0f:e8:5e:93:79:34:e4:
d3:9a:ef:97:26:df:29:6e:28:73:8b:d3:94:32:6c:
1c:61:42:66:5c:28:1f:54:f8:1e:fc:99:79:48:48:
ee:e4:dc:78:8e:76:39:e1:e7:96:12:74:4c:3a:68:
18:f3:6d:f3:29:46:74:db:94:7e:35:dd:ab:13:25:
7a:c8:01:68:b8:55:e3:11:26:d9:f4:74:99:e4:e6:
bd:8c:cd:9c:03:83:3b:87:6a:0e:44:da:63:7e:00:
3d:e9:d8:f7:76:77:35:6f:0b:ce:8b:ba:13:1b:91:
bc:68:c2:61:f9:d6:95:0d:08:0f:cc:80:2e:86:8a:
ce:65:e1:4d:d5:e5:82:49:0c:40:a5:90:6c:a2:16:
f0:bf:2a:91:2c:06:36:78:80:ae:fb:b0:5a:5b:19:
39:d8:79:40:c8:69:72:f9:2d:b0:8c:b5:45:91:02:
47:34:1a:72:9e:9b:11:02:97:92:e4:e1:2c:f5:ff:
1f:8d:f2:c7:07:c9:a0:16:2c:48:e8:b9:f7:7d:91:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3F:19:FA:D6:71:66:D4:95:39:7C:E7:9F:3D:94:D2:8D:5D:74:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72d3bb48-8e7c-3593-b12f-88f37e2cfa2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.185.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:87:86:e9:41:ec:f7:bc:f8:14:2a:81:fe:84:db:56:cb:1a:
49:f0:71:52:23:50:f7:d0:ae:ed:83:35:d3:13:ab:aa:71:de:
e8:5f:ba:ac:27:ed:0f:59:7e:b1:f8:4a:34:6c:18:98:da:0b:
07:3c:19:71:8a:fd:e8:cd:7e:af:bf:e1:31:44:1f:98:40:c4:
46:a5:22:31:61:d1:dc:55:f3:3f:b3:5f:69:ed:16:79:78:dc:
25:36:07:6a:15:cc:3a:65:b8:2e:b8:f6:f0:ba:10:26:1a:9f:
d4:6a:9f:b7:42:e2:3a:4e:97:63:b8:38:f0:38:5c:84:85:61:
55:0d:ec:f2:e3:17:13:42:dc:05:18:4a:80:6e:19:b3:b4:d3:
21:19:7b:e6:33:87:b9:bc:18:21:97:27:0c:24:a0:3d:fc:a2:
66:17:10:f9:d0:a9:e4:2e:7d:66:fb:12:5a:a9:88:76:73:84:
19:d2:bf:29:47:6d:bf:64:74:fd:c6:4f:0f:d9:fc:ce:de:19:
a5:86:84:a9:5a:38:7f:eb:83:d4:fb:b0:61:3a:b0:0b:f8:1d:
f1:72:03:25:59:68:c4:7c:3b:ae:3e:fb:4a:40:e6:47:a0:5f:
56:01:95:7a:7e:ad:89:17:c3:c1:8a:13:8f:79:15:26:1f:a8:
d7:0f:38:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:32 2025 by rpki-client