Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cec40fa-23a1-3568-842d-ce54f2455724.roa
File: 8cec40fa-23a1-3568-842d-ce54f2455724.roa (raw, json)
Hash identifier: NfKQOkACPS7wu2x+fplR61e4yK801Fp/p1W1H7ap9ks=
Subject key identifier: 00:39:1F:36:42:7B:63:B0:FC:87:C0:15:E3:10:E2:E3:75:6F:C5:DF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858407868D79B8E924E91A4B5FDC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cec40fa-23a1-3568-842d-ce54f2455724.roa
Signing time: Wed 04 Jan 2023 12:00:00 +0000
ROA not before: Wed 04 Jan 2023 12:00:00 +0000
ROA not after: Thu 09 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.187.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:78:68:d7:9b:8e:92:4e:91:a4:b5:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 4 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2023 GMT
Subject: CN=114f70c2-7727-4414-adb7-d6ac97e2b3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ff:05:b8:f7:ac:25:4e:bb:f1:42:80:0c:df:
99:ff:de:53:e9:74:58:fe:c9:d4:16:66:a1:72:7f:
2e:7f:ad:7b:73:fb:b1:2b:62:32:e2:e5:88:70:36:
bd:60:96:dc:d9:c5:03:0f:55:86:bf:e0:51:45:9b:
fb:f9:f0:66:06:e4:6c:37:03:2b:1e:95:e5:f4:5e:
30:c5:e3:0f:d5:30:57:07:81:a9:c0:1a:dd:92:44:
47:69:35:50:1a:b2:ff:22:30:0e:8a:0a:54:70:4c:
cb:c7:ee:5f:51:b2:57:2d:91:29:cc:18:98:27:20:
46:9b:49:07:74:9e:ec:19:58:f8:a3:1b:2f:06:2c:
ea:6b:90:cf:5a:27:84:3e:b9:3b:61:89:2a:78:2c:
28:8c:83:06:0e:9a:26:1f:0d:e0:9b:e6:a3:fd:ef:
f8:6b:eb:cd:2b:2f:14:47:db:f4:c6:b3:c1:90:6d:
12:82:6a:82:d8:bb:09:5e:ca:a2:b1:97:fe:5e:48:
af:02:4b:2a:1e:d1:c3:df:28:1e:0f:9a:f6:33:00:
f7:b2:bb:e4:63:4e:de:a7:dc:ef:ac:39:42:64:53:
cd:e6:53:b1:e9:fc:36:f1:79:e6:45:c3:80:3a:cf:
c9:6f:50:63:bc:8d:4e:ee:71:df:7e:79:4c:8b:28:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:39:1F:36:42:7B:63:B0:FC:87:C0:15:E3:10:E2:E3:75:6F:C5:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cec40fa-23a1-3568-842d-ce54f2455724.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.187.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:97:12:3b:88:d3:cd:a0:e6:34:4f:aa:7b:3a:4a:9c:e3:af:
87:9a:4e:b5:08:54:a9:d4:86:18:13:46:11:bf:a5:2b:71:2f:
87:06:60:3a:9f:44:76:65:8f:17:f3:69:a6:6c:3c:4f:5e:82:
1b:da:3a:c4:4c:d7:cb:ba:e6:2a:c4:9c:0a:37:d1:e4:cb:27:
7e:41:af:fa:cd:02:54:06:cd:71:26:1b:17:5f:80:72:99:77:
94:46:31:fe:be:96:a4:f7:0e:e8:64:bf:91:32:90:2d:9a:67:
81:5e:e0:f7:2f:12:ef:7c:97:0f:f3:53:14:dc:45:f9:65:31:
cc:8f:1e:31:b2:8d:08:f9:df:6c:35:c8:4c:50:c1:9d:f1:c9:
99:9f:12:55:8a:95:75:c0:24:13:ee:22:e0:d3:89:33:bb:e6:
99:37:2f:cb:e4:2e:f0:e1:1f:e1:92:b7:79:e2:a8:b9:75:d1:
ad:61:42:fc:31:67:7a:5a:d5:a5:4a:94:19:60:6c:a1:55:4f:
79:9f:dd:8b:ec:26:3a:b0:7d:70:38:a2:ac:f0:f2:08:a2:af:
d2:7e:dd:a3:a6:ad:d5:2c:f8:77:6a:d4:68:54:e9:94:1f:1b:
a1:1d:ff:7c:23:2c:f0:44:15:0a:89:a6:da:8f:9c:7f:c7:45:
07:35:26:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:40 2025 by rpki-client