Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8410ac99-1ffc-3e37-b3f7-cee62818f55c.roa
File: 8410ac99-1ffc-3e37-b3f7-cee62818f55c.roa (raw, json)
Hash identifier: WdmrQgfN74mrYROPS1R4k0q/ZG2omEVRCAJmqOgU4g0=
Subject key identifier: DD:E2:28:0F:7E:90:7E:0D:BA:83:9D:E0:6B:86:15:EF:08:9C:B4:3B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EF0940002DACE5C303DA22700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8410ac99-1ffc-3e37-b3f7-cee62818f55c.roa
Signing time: Wed 17 Aug 2022 12:00:00 +0000
ROA not before: Wed 17 Aug 2022 12:00:00 +0000
ROA not after: Thu 22 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.118.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:f0:94:00:02:da:ce:5c:30:3d:a2:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 17 12:00:00 2022 GMT
Not After : Sep 22 04:00:00 2022 GMT
Subject: CN=5559ae9d-46bc-4b20-93a5-a99fc7eb16d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:f6:41:37:ad:92:dd:f4:19:d7:9a:17:27:
be:d3:c0:35:49:d2:ac:07:82:d9:02:f2:7b:37:6a:
02:44:5b:c2:70:f9:c6:d1:41:bc:91:9d:49:9e:52:
f4:a4:fc:c3:43:9e:39:d1:7e:fb:fc:b3:99:70:5b:
3f:11:49:c6:6f:a7:17:e9:5f:84:ae:e5:fa:24:b2:
51:5e:e0:db:fc:f3:f3:21:d2:06:71:d0:a9:9f:5b:
0c:77:d3:ae:ac:21:f7:26:ba:1c:78:0c:1d:30:80:
3e:a2:ed:aa:5e:d1:a4:ed:70:21:24:1b:aa:43:42:
12:d5:bf:33:40:d3:e6:57:14:b5:21:90:4b:1b:e4:
5a:0b:36:7a:44:19:02:36:18:2c:62:2b:72:45:31:
cb:ee:d9:e8:59:3f:5b:6c:65:a9:4e:36:6c:75:75:
be:a0:97:48:d6:60:3a:41:4c:e7:93:b2:35:68:ee:
24:e2:e1:5b:3e:b4:d4:84:3b:e3:6a:fb:3d:c1:a9:
33:22:9c:ae:68:c2:ae:9b:39:48:98:35:13:5b:06:
49:ae:90:30:a1:f9:e6:d3:9c:28:35:cf:fc:08:de:
ba:2a:0b:b9:14:5e:c0:0c:5c:71:b5:32:74:3d:36:
36:d2:4e:29:2f:33:90:23:a9:75:0f:5d:60:1b:b3:
35:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E2:28:0F:7E:90:7E:0D:BA:83:9D:E0:6B:86:15:EF:08:9C:B4:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8410ac99-1ffc-3e37-b3f7-cee62818f55c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.118.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:02:b2:d8:18:65:f5:a0:62:33:42:65:58:14:18:6a:5c:4b:
b9:48:ce:0e:3b:62:e1:9c:b4:14:52:90:02:8f:55:3a:2d:28:
8d:ed:26:3f:e4:5b:d6:65:bc:e1:22:b4:48:8b:0e:19:f3:fc:
1a:2b:a1:1a:54:c6:d4:15:0c:90:05:d4:01:4b:e3:9e:c0:f8:
7e:1b:24:b4:a0:c4:8f:b5:26:b7:f4:27:29:78:5f:62:36:75:
6a:a2:a5:d9:82:72:c9:62:cd:4d:14:f9:b8:6f:32:33:ea:2a:
9d:88:fa:50:dc:3e:32:7f:0f:79:b1:f0:92:3c:8b:75:d7:72:
7c:8b:fd:ee:df:3a:91:2a:c2:86:ca:3e:95:b7:81:06:31:05:
f7:47:e4:b9:a7:61:db:11:c7:09:e4:50:6c:c4:78:77:42:f4:
8f:20:56:4c:4b:68:f2:84:5e:5b:1f:73:68:dd:28:75:dc:79:
82:07:42:45:b7:24:78:57:ec:77:d8:2f:51:fe:c6:34:2d:f5:
76:01:e6:6b:c2:f9:7e:54:e0:2e:86:c6:1d:f9:b4:91:86:e6:
9f:67:ef:ed:b4:6c:d3:52:88:31:d6:3f:2a:c9:37:2a:1e:05:
a9:e1:32:bc:05:2a:90:22:6d:d6:46:aa:9e:5d:64:04:7e:76:
88:11:08:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:07 2025 by rpki-client