Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/888ac657-b109-39d8-b9f5-44e20bf9b3be.roa
File: 888ac657-b109-39d8-b9f5-44e20bf9b3be.roa (raw, json)
Hash identifier: DiiBWEfGjyAEK5Jvu8KqmxW3SGhRQMG0A0KckIuq+GM=
Subject key identifier: E6:8C:FE:A5:5C:FD:77:7A:A7:85:52:59:5A:74:0C:1A:72:40:FB:59
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBCE1E980068BC1B494C69430
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/888ac657-b109-39d8-b9f5-44e20bf9b3be.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.206.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:e1:e9:80:06:8b:c1:b4:94:c6:94:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=2da76ff6-17dc-4d70-91a5-d4837dc57929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9f:b1:e7:ae:d5:2d:86:3d:3e:97:94:48:e2:
3e:a2:25:2d:0e:9c:5c:45:8c:6c:ce:b8:46:53:21:
80:e8:15:dd:b7:4e:ad:49:8e:18:49:c9:15:a2:31:
0f:4e:eb:9b:14:f4:cc:51:9e:0e:a6:30:61:fa:5c:
24:f1:f8:fd:f1:38:6e:ea:42:e6:5a:6c:4f:8e:ae:
2e:61:a3:80:db:39:c8:0f:5e:d5:a1:b7:eb:66:ef:
0d:15:de:79:92:8e:34:9c:0a:ad:a6:51:2e:a9:b7:
c3:1d:50:1d:8b:df:96:ed:fa:47:56:b2:1a:3a:1e:
8c:fc:22:0f:c4:37:93:a2:fd:81:70:5f:23:dd:66:
eb:66:65:62:3c:b1:d6:66:67:4f:da:f7:61:c6:d3:
3f:4a:ad:ef:8a:ca:ce:48:bb:61:21:42:d8:bf:41:
cf:71:0c:16:de:ab:a1:6e:0b:15:d1:a5:d3:40:91:
e2:e8:a1:0c:ed:7d:40:b2:6b:60:69:4a:29:ac:5a:
53:51:06:e7:f5:71:95:9f:78:21:92:8b:cc:15:2b:
49:5a:c8:13:e6:aa:5e:f9:a3:ba:8d:bc:b7:7f:72:
59:d3:71:2b:90:23:c7:23:83:d4:50:57:5f:67:d2:
f7:a1:3d:8f:74:33:59:8f:da:c4:ef:74:fa:a3:ca:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8C:FE:A5:5C:FD:77:7A:A7:85:52:59:5A:74:0C:1A:72:40:FB:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/888ac657-b109-39d8-b9f5-44e20bf9b3be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.206.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:4d:b6:a3:ef:f4:cb:fa:a6:dd:08:38:da:a9:ac:a7:6d:4e:
93:00:bf:df:5d:74:b3:94:b1:17:73:19:49:76:0d:88:ee:10:
4d:da:13:8b:25:ec:36:cd:94:0b:a1:72:07:e3:ea:74:17:1e:
11:99:05:bf:6a:ca:3f:02:dc:d2:1d:35:4f:08:64:3c:c3:7b:
b6:b0:c2:2f:9f:66:80:53:7c:a2:90:a4:61:6a:06:52:9a:fe:
bf:4d:61:01:6f:af:60:44:a0:35:a1:30:56:2c:d6:16:24:a7:
8b:ba:01:5d:0d:0c:d7:86:ef:43:36:ee:20:5f:76:2c:d8:89:
2d:a7:c7:4e:45:5d:3a:8b:84:c9:17:df:01:a8:88:7c:b4:03:
f9:4a:a7:da:d2:2d:9c:01:45:4c:0b:01:bd:c5:fa:c8:f3:db:
61:ea:b7:4b:5e:ab:39:ce:54:89:86:84:c6:62:5c:2a:96:da:
8a:54:50:fd:71:aa:71:1e:20:52:f4:49:59:2b:b8:c4:9a:21:
06:3e:e3:5a:31:29:5e:7a:50:fb:f0:97:89:9d:3a:20:ad:e0:
c9:e0:6f:1b:94:84:7e:4b:57:1b:2b:ce:d3:ff:61:92:ee:fe:
9b:ef:c0:41:a0:b9:5f:24:67:5d:05:58:41:05:59:dc:4d:d4:
23:25:69:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:55 2025 by rpki-client