Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/968634bb-511e-34f1-ab38-a9e2f6efcad4.roa
File: 968634bb-511e-34f1-ab38-a9e2f6efcad4.roa (raw, json)
Hash identifier: kjtcG1gEIlVxpTKwpUZ5Aj27M4rQ17qkHTEmywrJoEQ=
Subject key identifier: CD:32:81:32:36:45:05:27:04:4D:C2:4D:AA:FB:09:4C:56:DD:63:8C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD632C7846D40682171A9A380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/968634bb-511e-34f1-ab38-a9e2f6efcad4.roa
Signing time: Mon 07 Nov 2022 22:33:08 +0000
ROA not before: Mon 07 Nov 2022 22:33:08 +0000
ROA not after: Tue 13 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.94.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d6:32:c7:84:6d:40:68:21:71:a9:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 7 22:33:08 2022 GMT
Not After : Dec 13 05:00:00 2022 GMT
Subject: CN=8ac7edd5-1868-4a76-9344-7df259390482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:19:57:30:0b:ab:87:46:b4:ce:a6:e2:8b:38:
45:49:90:93:5d:b2:56:2e:d9:38:48:f3:3e:4d:0e:
d5:0e:2d:28:6e:d2:1f:fa:9a:da:8d:f1:a9:e3:83:
e7:97:de:db:b6:90:69:ea:f5:99:c7:88:13:44:84:
7e:b9:b4:14:c1:ca:ee:b9:e5:28:a7:ad:9d:1c:ae:
65:22:f8:5e:06:df:25:c1:4e:7a:80:fa:fd:fd:63:
a9:9d:12:da:9c:ff:44:af:f1:ed:e0:51:83:97:43:
fd:08:27:29:50:2d:7e:fd:fc:7c:44:75:6b:11:7e:
98:27:24:1f:8a:66:e9:b9:39:cf:be:97:b5:c8:75:
6b:1e:2e:2c:03:00:1f:80:8d:2f:e9:99:fd:f4:c8:
2b:17:62:8f:3a:1e:f2:65:fa:60:ab:2f:ab:99:09:
de:e9:d9:7f:d7:10:68:1c:3b:dc:8a:b3:90:cd:e3:
7a:a0:ea:50:ed:67:47:61:c5:a9:9d:48:f9:cb:a1:
a5:b0:64:ba:e1:3d:81:57:56:9f:dc:30:16:28:23:
7e:9d:26:33:e8:79:55:e9:09:d6:df:66:e0:17:d0:
f9:5c:d1:97:f3:5a:ba:9e:a3:78:2d:2d:4d:bb:dc:
91:5e:d0:90:45:f1:7b:46:11:95:70:57:34:f4:2e:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:32:81:32:36:45:05:27:04:4D:C2:4D:AA:FB:09:4C:56:DD:63:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/968634bb-511e-34f1-ab38-a9e2f6efcad4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.94.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:84:67:e4:07:e5:cd:dc:73:cd:f3:d7:5b:1a:ec:25:cf:5c:
ce:0d:07:72:80:87:69:20:9e:73:df:02:2c:74:19:8b:ba:d7:
b8:f2:ef:60:ed:cb:cc:93:21:54:2b:6b:0a:27:54:05:ff:21:
67:7e:72:d1:9e:d5:43:c5:d3:e8:35:60:1a:c5:45:a6:2e:74:
fc:bd:e1:e9:80:66:7a:07:bd:62:ed:8b:25:b1:94:a6:79:b0:
75:7d:cb:57:14:ff:ab:9c:55:c2:50:87:8d:31:cc:62:fb:29:
24:96:0a:e3:04:7b:b4:85:45:ab:50:d8:32:26:ab:6c:8f:ca:
1c:98:08:49:9c:f6:e4:56:af:b7:f7:d0:6f:70:90:2e:dc:cc:
39:f1:6a:b8:6f:dc:4c:41:11:22:b7:2b:4a:2d:2a:ac:de:14:
fc:eb:b9:ad:ea:1c:dc:63:0c:4b:85:ea:52:31:07:7c:90:90:
7f:8c:34:f1:a1:38:b8:b5:31:9f:a1:9d:0a:88:30:c5:16:bb:
1a:bd:6d:54:51:8a:5d:1e:2f:e5:3f:d5:b2:19:19:5a:39:be:
79:fe:37:ed:c4:4a:6d:d0:f7:24:13:1e:c2:32:2e:1b:a9:85:
ee:01:8d:71:ae:58:e4:12:eb:47:81:2c:13:90:81:49:f5:f8:
cb:ab:34:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:26 2025 by rpki-client