Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7369d5ac-6d43-32e8-976f-e22be670fa28.roa
File: 7369d5ac-6d43-32e8-976f-e22be670fa28.roa (raw, json)
Hash identifier: w++L8zyqWzcaKXnQ92LDWRHmYvJvgaYuM3lYCjvrlQc=
Subject key identifier: D2:56:A2:F8:87:AB:D0:B4:DA:B5:AC:74:F7:D7:85:FF:53:BD:59:75
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2F48DB722809767687E40320
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7369d5ac-6d43-32e8-976f-e22be670fa28.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:48:db:72:28:09:76:76:87:e4:03:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=b0dfa145-823c-44cc-a167-0bee5110d0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:76:7b:a2:15:d3:8c:b5:ee:a3:54:db:09:
fc:d6:43:51:19:46:aa:42:7d:c9:20:f0:1d:cb:58:
a0:51:63:d0:e0:dd:83:53:df:49:8b:2e:3b:05:ff:
99:eb:eb:78:36:21:c6:56:8a:11:44:96:c6:7b:8c:
8a:8e:5e:37:df:98:d6:e0:fc:34:a2:b0:f6:49:d7:
a5:85:d0:ca:f0:d4:27:2e:ce:d7:ac:ac:b2:e6:79:
65:8b:d9:cc:3f:8a:95:85:3b:6a:22:b4:4c:3d:7d:
a1:7a:53:19:ec:7c:ad:47:f1:02:af:58:de:92:2b:
01:03:5f:e0:d6:ff:aa:b9:76:af:01:6d:f5:c6:97:
5c:48:9e:2a:b6:e3:b3:66:cb:79:03:70:4a:45:ad:
76:d9:e9:c5:38:90:a8:39:e0:e5:7d:76:1b:71:f5:
53:55:e7:f6:c5:a0:aa:73:68:54:56:0f:a4:c0:40:
c6:91:91:07:67:9e:9c:59:00:c1:50:99:f7:90:04:
c6:b2:3d:28:20:de:99:f2:04:a3:75:30:39:d9:36:
e9:5e:65:9b:9d:0a:55:e2:b4:55:08:db:b3:d1:4f:
f8:35:d0:db:48:0e:f9:32:57:ca:3e:c1:14:f6:a6:
80:7d:88:fc:ef:d6:8c:c9:7a:0a:83:15:03:9f:d1:
45:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:56:A2:F8:87:AB:D0:B4:DA:B5:AC:74:F7:D7:85:FF:53:BD:59:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7369d5ac-6d43-32e8-976f-e22be670fa28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:22:22:21:f9:08:71:70:fd:5a:0f:67:24:c5:5f:6c:88:91:
f9:68:94:10:a6:eb:44:78:37:d4:33:71:61:21:a5:c2:90:62:
b4:db:af:23:f8:f8:f1:60:13:e7:e7:ef:d3:9a:9b:f4:0d:9b:
51:6b:42:95:da:24:f3:dd:ab:99:73:a3:17:40:70:72:f8:7a:
1e:4f:9d:72:6a:8e:30:63:15:84:9e:6b:07:85:36:1c:3f:c5:
1d:8b:8b:77:91:07:3b:1d:d2:e8:a0:16:81:87:c2:08:2e:56:
74:9b:49:d4:58:38:f2:bc:a5:94:34:64:ae:0a:8a:81:de:62:
26:a0:35:09:b1:94:ee:31:c4:4a:af:a5:cd:9b:a7:d4:54:59:
02:6f:b7:95:e8:38:a2:f8:90:17:88:bf:ba:c2:c1:ae:39:b6:
70:6a:b5:30:36:cb:c1:f5:9d:15:be:18:4c:25:21:01:1d:e8:
bf:e8:84:e4:b4:f4:ac:e5:bc:a4:b9:c2:eb:36:c5:01:7f:8c:
b2:34:00:d7:48:2f:d8:f9:c5:2b:19:bf:d3:87:38:c8:69:aa:
b0:ad:56:33:1e:4f:3e:da:da:92:f2:d5:d1:77:71:8d:f3:f9:
f4:fb:44:20:da:bc:b6:6c:18:d1:0f:71:79:60:24:9e:8c:cc:
0d:0c:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:13 2025 by rpki-client