Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9516dffb-d39b-3548-a0dc-4553bad249dd.roa
File: 9516dffb-d39b-3548-a0dc-4553bad249dd.roa (raw, json)
Hash identifier: F+OgWtbm6/QXjNFEXlTfuPfM1BdBQfOCQgt5hHque6I=
Subject key identifier: FF:EF:44:FA:44:86:FC:F7:82:48:13:72:35:AD:74:1B:61:7C:F6:A3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840203CC2B850E48F41F6DD6200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9516dffb-d39b-3548-a0dc-4553bad249dd.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.177.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:20:3c:c2:b8:50:e4:8f:41:f6:dd:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=79294448-645c-45a3-b2d3-6d460402039d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:40:a7:09:eb:ad:28:6b:d7:b2:05:23:2d:
75:47:83:42:09:a6:5c:46:7e:14:41:f4:3f:59:d1:
81:60:cd:b0:0b:6c:89:9c:ae:64:ed:98:ae:88:ec:
75:66:41:ce:0b:c6:a4:2d:c2:e0:3c:fd:4c:05:a2:
59:86:75:9c:b2:09:1e:62:b4:fe:37:6a:e3:f3:ba:
a7:6b:db:a1:cb:76:e6:01:1e:90:18:7b:85:ee:b6:
4e:55:66:51:a4:83:a9:a2:82:07:9b:f9:cb:c6:0f:
2b:6d:6e:a8:44:50:e3:41:61:39:2e:a4:66:e8:26:
39:d8:10:bd:1a:9a:ab:0e:1e:08:02:ff:de:ac:2e:
2c:6e:d9:27:e5:f0:a7:3d:05:0f:4d:09:d7:f2:e1:
ab:9d:f6:c4:c9:76:8b:3a:26:8f:5c:10:0f:fc:7f:
e2:3f:f2:e6:43:e3:21:83:55:38:bc:5e:1e:b8:04:
48:ba:b5:b2:e1:9f:43:20:19:02:88:36:14:6e:c6:
b1:a8:cb:1e:38:3b:74:f4:d8:e1:47:ef:92:9a:af:
d8:b6:46:16:93:98:ad:1d:11:59:11:9d:f7:1f:ed:
49:b2:ae:c3:e3:af:6a:20:a4:1f:95:1c:b4:e5:27:
29:3f:53:cd:b8:04:34:ca:32:21:f7:dd:62:d4:29:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EF:44:FA:44:86:FC:F7:82:48:13:72:35:AD:74:1B:61:7C:F6:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9516dffb-d39b-3548-a0dc-4553bad249dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.177.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:a6:95:c9:78:27:8e:71:ca:bd:43:95:d9:f0:07:88:69:73:
e9:5d:1a:1e:8e:93:21:0b:e3:df:be:a7:e5:05:3b:48:aa:af:
94:87:c2:93:c6:5f:66:bb:3f:48:96:5a:ca:76:67:6f:7d:77:
53:bf:32:fc:83:48:02:18:4d:c6:2e:97:7f:6a:98:ff:01:f4:
ea:6d:26:8e:8d:43:91:64:39:25:9d:10:26:42:70:81:0b:a0:
3a:12:a2:41:51:fd:73:f2:17:d0:db:2a:c7:fd:9a:02:00:77:
34:7d:fb:21:76:02:97:68:8a:96:b5:ca:87:13:d9:22:78:25:
9a:fe:8c:b3:93:9d:52:fd:36:a8:52:2b:90:3f:5c:f6:55:2a:
de:29:ba:32:19:d5:eb:a6:de:e8:2d:85:49:41:15:12:3f:40:
e1:f8:9a:e8:4d:60:8c:a5:3e:52:9b:99:9f:ce:1e:6b:2a:b6:
5e:f8:69:e2:df:9f:fa:42:53:93:05:0f:59:98:53:c0:3b:a1:
95:d0:00:50:66:3f:54:f2:94:bb:72:30:36:f1:1c:06:bf:11:
84:52:b4:3c:b0:83:71:c8:fe:10:43:3b:b5:f4:80:80:a6:42:
4c:80:5a:76:ee:1c:d1:85:e5:e1:c1:9b:76:a6:31:9e:33:8d:
f0:ed:f5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:57 2025 by rpki-client