Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84fc79f8-e8a9-390a-be77-09bdd7ec3f50.roa
File: 84fc79f8-e8a9-390a-be77-09bdd7ec3f50.roa (raw, json)
Hash identifier: zxPmr+MYFoSxI2H41SzHfdgLdbdPwXrklm0TK8BXzNk=
Subject key identifier: 98:82:0C:2F:35:CC:33:C3:A7:48:CE:03:EC:F0:C4:48:C6:77:B4:04
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401AE3280E291A8C53BB5CB000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84fc79f8-e8a9-390a-be77-09bdd7ec3f50.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 50.16.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:e3:28:0e:29:1a:8c:53:bb:5c:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=8ac1a707-7e84-4c46-9c08-c61b31a08126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ab:cc:68:b1:68:1e:db:bf:fc:c9:38:97:c3:
0a:72:18:ae:48:e0:ee:e5:5e:4b:cd:6c:b6:67:6a:
14:5c:1e:41:61:c9:6e:cc:7c:07:29:40:bd:18:06:
c4:da:bf:52:fe:13:56:f5:5e:fd:d7:5f:47:d1:a1:
0c:b3:07:6f:50:0b:87:2e:b4:30:ba:a3:cd:c0:9e:
8a:df:11:a5:e1:4c:24:58:2e:ae:b2:be:dd:8f:b8:
09:f5:0e:69:a9:70:23:bc:a9:aa:9b:1d:f4:fb:ba:
e7:b6:89:51:c1:1a:b9:97:fa:d7:1f:35:ec:2d:06:
9d:94:4b:a4:cd:75:43:03:b2:da:30:12:7f:13:9a:
d2:92:3d:5c:e9:99:c0:01:76:a9:be:93:f1:26:d1:
c9:61:29:b7:16:d7:a8:0b:3e:a0:61:4d:fd:95:b2:
8f:5d:c1:42:66:2f:68:ef:0b:35:9e:b5:c9:cb:d0:
e2:a6:44:b7:3c:0f:72:8a:d7:b6:be:9d:20:6c:df:
2c:8c:15:00:85:49:b1:d3:99:a4:de:61:a4:f3:9e:
a5:12:8b:16:ff:a8:88:c2:de:da:f9:d3:1a:1c:a2:
fc:b6:13:40:25:aa:0d:ef:bb:81:bc:1d:ea:3d:e4:
9c:42:f8:c1:bb:66:a1:e5:e3:1f:9c:08:29:b3:5c:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:82:0C:2F:35:CC:33:C3:A7:48:CE:03:EC:F0:C4:48:C6:77:B4:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84fc79f8-e8a9-390a-be77-09bdd7ec3f50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
50.16.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:4d:25:f4:4e:4d:8b:99:70:25:0c:bb:fd:c0:59:02:c0:2b:
7b:43:d1:91:d3:be:73:c8:c5:d7:cd:4d:17:f3:96:67:47:89:
49:3e:31:a2:aa:82:1b:8d:b0:0f:fa:1e:4d:36:80:aa:53:d3:
c4:75:27:e1:fe:71:2c:76:cd:61:09:4d:38:d2:7b:af:8a:18:
2b:f5:4e:38:b0:63:79:a2:20:29:0a:73:bb:67:e9:f2:eb:6f:
7c:26:f1:b3:34:a1:cd:6c:41:78:61:93:42:15:30:69:ec:11:
c4:0a:56:55:e3:7d:ff:45:27:28:7f:71:17:43:cd:93:69:70:
c3:42:83:a1:b5:3c:5c:39:26:47:9e:21:4c:e6:8f:5c:38:42:
ca:a0:45:1b:af:05:4b:66:5f:e2:5e:d2:16:c3:77:ed:e7:bd:
4c:9a:f2:bb:0d:e4:73:3e:a8:1d:1d:3d:d8:4d:b7:00:b2:a6:
0b:0c:cb:e4:7e:5b:8e:d0:21:49:d5:2e:ba:8e:cf:bd:e7:d1:
9d:0d:b6:c1:eb:40:95:e5:2f:8e:9b:e2:49:b2:3f:86:5f:dd:
0d:96:e5:0b:d5:dd:05:bb:94:a6:d7:16:ea:db:1d:c3:68:68:
7e:e5:58:f3:e7:03:54:76:66:f7:8c:0c:8d:57:b7:e6:96:0a:
23:25:34:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:08 2025 by rpki-client