Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d2d1c99-5954-308f-9d7f-0a04a8f1a175.roa
File: 7d2d1c99-5954-308f-9d7f-0a04a8f1a175.roa (raw, json)
Hash identifier: 0bEG3tNM6oxsGm9UwfIZCOyZRQ3q4JkF1KDJ+MZlgEM=
Subject key identifier: 3C:90:A2:69:C4:03:43:DD:3C:E6:30:EA:08:24:A3:C9:03:38:E2:BF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2F6E585A3CA78648A39A4C60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d2d1c99-5954-308f-9d7f-0a04a8f1a175.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.121.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:6e:58:5a:3c:a7:86:48:a3:9a:4c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=de97baf5-299a-43f0-b348-ddaf462c58ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:0a:62:c6:75:0e:b4:ad:82:78:f6:41:c4:
11:c9:f5:38:4d:cb:b7:34:d8:02:ce:f2:e2:74:f9:
a4:da:45:8b:47:23:e8:45:95:4c:25:4c:18:5e:e8:
22:e8:0c:4a:8e:b8:4e:9d:df:3c:a1:a2:3b:fe:27:
3c:d5:47:6a:40:ee:d8:09:c3:dc:ba:07:30:24:95:
e4:1e:19:75:b9:53:9b:a5:2d:25:49:f0:dc:6b:f3:
29:f2:c8:44:44:24:2d:34:a3:da:7d:6d:65:9c:6f:
d9:8a:d9:e5:4f:6f:ee:8b:1b:bb:5e:84:f2:75:aa:
a0:27:af:c2:0d:84:40:08:40:3f:34:a5:7e:73:cf:
9d:4f:af:7a:06:e3:8b:83:c4:1a:64:89:68:de:af:
e1:1f:0b:c7:91:56:ab:a4:67:39:69:48:a0:5c:d3:
76:96:c6:66:56:00:11:3e:fc:8c:aa:1d:15:c3:a4:
67:af:34:a4:4f:1f:53:08:70:cc:81:8f:00:cb:0a:
a2:d8:4f:eb:98:5e:73:b8:a1:61:56:1c:b9:c5:ae:
d1:df:27:3c:ea:a8:a5:e1:98:cc:1d:3b:ee:3f:a2:
b5:5d:9a:db:33:76:0b:40:10:f6:54:e1:d2:cb:44:
ce:32:66:05:d2:05:ac:00:91:a2:c4:18:cd:b4:e9:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:90:A2:69:C4:03:43:DD:3C:E6:30:EA:08:24:A3:C9:03:38:E2:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d2d1c99-5954-308f-9d7f-0a04a8f1a175.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.121.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:48:05:ad:7d:1b:d9:a8:18:a1:77:64:ce:ba:5d:1b:a7:2d:
3d:92:84:25:dc:df:d9:82:75:42:bb:7e:e3:64:f2:b0:5c:c3:
a6:95:23:a3:75:3e:40:24:ad:f9:f7:d7:0c:e9:c4:6b:20:c6:
6b:b8:79:a2:04:c9:c2:c8:7c:7d:a6:0b:28:ed:d0:aa:ea:8d:
9f:1c:cb:e0:35:d9:d1:ce:16:18:4a:58:8c:d6:b1:e4:86:57:
7a:fe:2f:ed:11:c7:3c:d1:75:74:2c:e8:5f:8e:27:ae:7e:36:
61:49:5a:83:24:df:cb:00:00:62:6a:7a:ed:b4:79:da:15:aa:
10:75:3b:73:ce:83:43:2e:d7:32:6b:f9:64:67:cc:a5:6b:38:
7b:20:0f:ba:df:0a:a6:16:4b:59:0c:27:84:90:a1:d5:8b:72:
95:64:74:43:38:04:a9:1e:90:33:03:19:5d:83:2e:e2:5b:01:
e6:b8:a2:cf:fd:7f:53:c1:bf:29:45:fb:d9:c7:27:8e:7e:a6:
bc:70:9a:4f:5c:25:3b:e1:17:56:95:37:b5:69:aa:b2:4e:00:
d8:13:21:5d:c9:a4:9d:a5:a4:3e:a9:cd:26:06:00:18:14:2e:
85:94:a0:c3:7c:d2:99:8c:82:1e:9e:97:db:ea:f4:94:0e:70:
f3:ee:a7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:36:32 2025 by rpki-client