Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8e602211-7642-35ab-8572-d8bcab4cc458.roa
File: 8e602211-7642-35ab-8572-d8bcab4cc458.roa (raw, json)
Hash identifier: 5189Q/Nf161HbUGiByT1vw+evyLmvkFLFkLGJS1cCZE=
Subject key identifier: EE:AB:D5:E6:E0:DF:65:69:C6:7D:A1:02:9C:92:57:9D:3A:45:25:42
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C9256642292626112BF71C190
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8e602211-7642-35ab-8572-d8bcab4cc458.roa
Signing time: Wed 12 Jan 2022 05:00:00 +0000
ROA not before: Wed 12 Jan 2022 05:00:00 +0000
ROA not after: Wed 16 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.92.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:92:56:64:22:92:62:61:12:bf:71:c1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 12 05:00:00 2022 GMT
Not After : Feb 16 05:00:00 2022 GMT
Subject: CN=eb802e2c-31f9-4cc0-a2d9-96b2f164e293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:8c:b5:67:e1:a6:d3:cb:64:80:46:42:c0:
06:40:d1:67:a7:1e:5b:7f:04:f2:c7:b0:ef:47:c2:
69:46:f0:3c:b5:39:6c:cd:6b:17:fd:63:1f:74:c7:
6b:66:25:93:a6:ca:14:87:76:ba:1e:f6:e8:07:84:
07:91:50:7b:da:7b:56:86:b2:ad:18:8f:a3:92:a7:
8e:91:9b:90:b9:ed:ad:67:07:a1:6b:58:e3:1f:e7:
10:83:fa:9a:8f:45:ce:60:3a:74:70:3b:2d:6a:31:
12:9d:bb:81:a4:b6:f8:56:af:af:f8:32:1f:3e:10:
98:3a:99:7f:28:29:86:00:8a:60:94:f0:84:ba:8c:
a8:0a:f7:6f:8d:d5:34:ed:e7:70:10:57:1f:5b:5a:
a4:9a:fb:2e:cf:7f:46:e5:b9:51:11:d6:d6:63:db:
69:bb:6f:ca:8c:d6:f0:ca:46:a8:f7:d1:7a:d0:1a:
5c:d0:3b:e3:5a:33:64:f4:59:c8:c2:fe:33:cd:54:
24:5a:67:24:1d:db:c5:c4:c8:df:a8:29:f3:be:f7:
4d:c8:e6:a6:f3:f2:1b:fa:ec:03:4b:11:34:a4:8e:
b0:61:31:3f:f3:0f:3b:80:cd:79:27:2f:1c:e2:74:
33:c1:c9:95:49:fe:a7:8c:45:39:02:39:ce:ac:cd:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AB:D5:E6:E0:DF:65:69:C6:7D:A1:02:9C:92:57:9D:3A:45:25:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8e602211-7642-35ab-8572-d8bcab4cc458.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.92.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:e5:17:95:da:72:8e:94:9a:6f:78:7d:cd:28:a1:58:9b:df:
7b:e8:48:86:5e:94:a2:81:55:5b:51:e0:42:63:83:8b:dd:f7:
99:24:ee:b2:04:34:7f:dc:97:92:2e:83:65:b8:96:0b:58:fa:
b1:a0:36:d1:66:06:2b:cc:b0:96:dd:fb:a2:64:6a:43:42:96:
a1:40:9f:05:e6:eb:61:a8:3b:99:8b:8a:16:3f:18:e9:43:5a:
ba:e6:d1:31:a9:da:9b:46:41:03:1d:37:44:e9:d7:c7:63:a9:
52:42:9e:69:dd:8f:fb:fe:09:65:f9:e5:bd:82:99:88:ca:15:
20:a7:38:a6:01:f8:52:ec:54:50:c8:48:37:f5:04:89:10:95:
f1:34:73:28:5c:d9:fd:64:6b:1c:1f:db:b5:ae:36:0e:4e:51:
7b:cd:c7:24:ba:0c:5a:eb:e4:03:fd:c3:18:36:9b:04:22:42:
1d:f8:0d:94:24:c6:71:b9:d6:bd:24:68:83:84:4b:c2:8c:31:
95:fa:65:14:a5:22:9b:9d:a4:76:31:e9:90:98:44:32:da:bd:
dd:06:fe:67:c5:9f:4e:28:8e:c8:3f:e2:62:23:5e:c7:cf:d5:
59:d8:74:73:2c:75:20:a2:2a:cd:98:ee:43:15:22:0e:8f:01:
94:39:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:59 2025 by rpki-client