Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94435c42-6640-3db5-81f6-06352adcde42.roa
File: 94435c42-6640-3db5-81f6-06352adcde42.roa (raw, json)
Hash identifier: UzMEK11tUSxesquUjplwXOxs5+uOAKv34Pmqcj5CKrY=
Subject key identifier: 95:CE:7C:5F:19:42:F2:D9:40:B2:06:C3:C6:81:24:D8:3A:49:0E:14
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584067A17789D196BFDB78689000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94435c42-6640-3db5-81f6-06352adcde42.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:67:a1:77:89:d1:96:bf:db:78:68:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=9b550f61-e9b5-4bb0-9360-3e058c4ab43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:b6:9d:a6:cb:ec:a0:25:e3:29:12:f2:20:
de:27:bc:af:17:55:0c:2e:e1:a1:3a:7d:87:22:e8:
5e:a4:99:00:c3:4f:82:e2:b8:68:b6:15:c1:23:8d:
e5:3c:59:32:01:1a:1a:a3:a2:47:0b:4b:12:9b:40:
74:9a:79:16:b1:0c:ff:ec:41:c9:5b:f6:67:db:37:
3f:fc:0a:fa:29:0c:5e:11:26:9e:39:f5:c2:b9:86:
7c:6d:73:30:10:05:3a:63:5e:00:8f:c1:2a:41:05:
17:ba:69:b7:35:13:c6:40:22:86:d6:4d:c5:93:7c:
94:78:85:51:6f:e5:9e:35:04:ee:57:25:8d:46:6b:
dc:68:da:ac:eb:f3:72:17:d2:b1:66:a5:8c:bb:bd:
e2:fb:b9:43:3d:86:97:27:14:e8:7c:d3:ab:ff:ed:
5c:ef:b0:2b:49:dd:fc:b1:f6:e6:9e:4a:96:1c:ac:
12:66:eb:f1:13:43:1a:dd:49:af:99:0f:63:39:42:
a5:53:cd:ba:f0:45:ec:21:9a:1a:44:58:b3:44:84:
25:d1:1e:99:64:a7:12:e6:b9:bd:3b:81:65:98:e1:
7f:36:92:2e:e6:58:ac:cf:d4:9e:86:4a:97:d1:d9:
cf:39:27:12:2e:3d:dc:98:e8:5e:7d:90:fd:c7:92:
ff:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CE:7C:5F:19:42:F2:D9:40:B2:06:C3:C6:81:24:D8:3A:49:0E:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94435c42-6640-3db5-81f6-06352adcde42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:90:70:c8:93:48:a2:e5:ed:f9:db:1e:69:29:8f:bb:1d:72:
5d:17:2f:7f:28:e5:e6:e9:4c:85:56:09:a8:49:f6:e2:80:a9:
7b:ae:10:63:6a:e3:d7:ec:33:9f:2d:5f:02:f0:83:2b:66:2b:
9b:66:9f:cc:f7:67:b7:78:96:34:29:2e:5f:c0:1c:4a:41:b1:
de:03:76:9e:f5:c2:35:d4:03:e4:ec:23:f1:1d:3f:11:d6:9a:
d3:c1:2b:95:2e:ee:0a:07:4c:c7:54:95:2f:32:3f:25:9a:ad:
c8:9d:3d:bc:d0:5b:02:3a:54:0a:e2:bb:74:a6:db:ef:1b:93:
c5:9b:15:18:80:13:54:f0:e0:a1:5c:45:0e:a1:ca:9c:b9:40:
0e:42:01:e4:59:5e:0f:2c:3a:74:f8:56:70:15:83:84:11:d4:
2a:f9:60:64:81:7b:08:73:f6:77:0c:8a:40:a4:cb:f7:83:ac:
df:8d:a6:36:28:b6:3e:20:95:ee:2a:18:fb:b9:0f:fa:cb:04:
29:78:6b:b0:5b:f7:37:b0:d2:c6:9c:66:39:2a:ac:0d:34:63:
97:f9:c8:0e:fe:61:d3:0f:c6:1a:78:04:b0:4f:fc:68:4b:6d:
80:13:32:23:c0:4a:da:15:8c:83:cb:66:de:fb:73:8f:df:33:
b6:72:ce:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:32 2025 by rpki-client