Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e540ad9-21f9-3e40-be4d-b32d0e1768db.roa
File: 7e540ad9-21f9-3e40-be4d-b32d0e1768db.roa (raw, json)
Hash identifier: RXvscPIaflp19qbH/kFLy1hNBSipkA3Ma0b05OzbUvY=
Subject key identifier: 62:AB:E6:CD:53:EE:B9:61:FC:46:17:CD:B3:89:9C:78:7F:94:2D:32
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584068632E9F2C97DF03E730F280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e540ad9-21f9-3e40-be4d-b32d0e1768db.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.189.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:68:63:2e:9f:2c:97:df:03:e7:30:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=5fa301cc-875f-4da1-8eed-53648eca1dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:a6:a5:25:cc:01:36:bb:d1:25:30:b7:86:
53:65:86:be:72:4c:99:21:e7:c5:89:67:0f:88:d3:
08:a4:0e:4a:d1:ca:2a:8a:02:73:88:0e:b0:f7:1e:
2a:86:dd:c3:c5:e5:d5:e4:f2:58:a8:9b:b3:ec:0d:
a1:25:6c:e6:3e:9b:f5:b5:18:e5:d8:37:79:6e:13:
8a:6d:85:28:f1:ee:d3:90:38:a6:b4:e1:89:ea:45:
65:7c:e8:46:b8:6d:84:f9:5c:d6:ca:a4:48:65:57:
f6:a7:21:01:0a:f7:42:11:44:65:92:ef:e3:71:b9:
3e:34:30:6e:66:01:47:d0:44:d4:23:19:67:4c:69:
4f:c5:11:07:ec:2b:45:ed:e8:13:ee:1c:05:89:69:
fa:91:10:04:2d:fb:71:ee:ea:be:5b:9a:28:dc:49:
cb:51:ce:43:92:69:cc:dc:70:d4:ed:a0:7c:2a:05:
f5:08:2a:cf:f6:d7:65:a4:10:71:49:4b:0b:10:22:
3f:ed:5e:26:ec:f1:56:25:17:00:02:e2:6f:8f:0b:
a1:69:79:65:9c:7d:91:1f:74:ea:49:6e:a2:71:4a:
57:f5:da:64:11:6e:c5:c3:c5:2b:52:08:63:fa:92:
40:1b:8f:ba:7e:57:dd:23:59:86:83:62:d2:de:8d:
18:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AB:E6:CD:53:EE:B9:61:FC:46:17:CD:B3:89:9C:78:7F:94:2D:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e540ad9-21f9-3e40-be4d-b32d0e1768db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.189.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:75:d7:dd:88:5b:c0:c5:b4:2f:62:6f:eb:6b:70:ea:b4:3f:
63:55:da:2d:26:65:d5:e1:ef:4c:ef:22:03:23:bd:4b:42:bf:
a6:ec:23:a1:b1:63:07:2e:90:ee:8f:5f:86:b4:62:bc:84:4a:
b7:bc:cc:c1:ca:4c:74:d5:48:f8:0a:6c:96:ce:4f:52:45:44:
be:50:0f:f3:e2:97:52:70:2f:64:d6:60:75:e0:5f:cc:07:2a:
4f:42:23:9d:84:eb:9e:75:9d:8f:33:5b:d5:ab:08:93:b2:21:
ed:74:bd:b6:49:d5:d7:e3:57:8b:2d:c7:f2:8b:c4:da:04:94:
a8:80:9f:af:0b:87:78:6e:02:71:d3:c6:0a:12:93:ef:7c:95:
06:98:28:f5:44:ef:0d:f0:a8:f7:c4:e5:ec:23:c6:03:1e:58:
fc:bd:e2:60:ed:cf:0d:36:27:fd:f6:ac:03:72:90:77:f8:50:
07:27:6b:f9:d6:ee:3b:18:1b:87:dd:50:36:91:6a:35:66:87:
cb:bb:b1:2e:55:e3:ba:29:53:c5:75:ff:dd:01:2d:10:8e:28:
57:79:08:28:59:42:ed:39:9e:58:5f:58:37:d6:c7:36:ef:4c:
40:60:61:4f:cb:e7:cd:b1:e4:28:47:91:eb:68:28:9c:fd:7b:
16:81:23:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:48:35 2025 by rpki-client