Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96c92b7b-3bd3-37d3-aa7d-c622ec3c41c6.roa
File: 96c92b7b-3bd3-37d3-aa7d-c622ec3c41c6.roa (raw, json)
Hash identifier: riOeeETXnEMCVNgwkAcu+1AfvDTw2MRbKL8IPbv+Vj4=
Subject key identifier: 15:93:71:80:02:A1:DA:6C:FD:18:B1:CF:88:BE:1C:54:0E:40:48:E7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408ED4F44056EAB1ACF90AA100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96c92b7b-3bd3-37d3-aa7d-c622ec3c41c6.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8e:d4:f4:40:56:ea:b1:ac:f9:0a:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=41137b91-fe07-4101-a824-6fe5e813c29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:34:69:b6:2f:bf:56:43:95:37:ad:81:4c:
27:1d:a3:40:68:2d:c7:c2:17:7a:9c:3e:64:92:43:
5c:74:80:d7:34:67:81:c5:83:2d:fd:3a:8f:7c:2d:
d8:f7:44:65:38:9f:03:29:05:eb:9e:10:2a:37:49:
29:0d:f2:d7:fc:ad:3c:63:80:8b:78:7c:0f:d0:fa:
c4:1a:b2:df:b4:37:ee:19:21:7e:1f:df:0b:4b:0d:
f5:7a:d5:4a:2c:11:2e:d6:76:85:ff:e5:4f:23:c2:
37:4d:2f:15:ea:52:28:54:21:a6:95:80:df:9d:73:
6f:7a:31:99:b0:86:fa:10:9a:b4:f6:5b:0c:37:47:
53:9c:e9:c1:c9:59:76:87:2c:35:49:6c:81:2a:63:
48:18:a2:1a:35:26:e8:03:5a:60:bc:44:3c:79:10:
7e:74:da:10:28:77:0f:a2:cd:17:16:08:5a:78:e4:
fc:0b:77:e5:9c:eb:b1:5f:a0:ff:22:6c:82:b2:6d:
a6:56:9d:e5:5c:63:40:b4:96:79:be:1b:2d:88:82:
eb:45:0c:38:6b:ff:b6:06:d6:22:82:a3:a3:4d:65:
86:d5:57:2a:04:11:0a:36:e5:42:90:9f:05:a9:34:
07:95:1c:c3:6e:0e:ad:f4:fd:a0:53:b8:df:2e:de:
e5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:93:71:80:02:A1:DA:6C:FD:18:B1:CF:88:BE:1C:54:0E:40:48:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96c92b7b-3bd3-37d3-aa7d-c622ec3c41c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:9e:e0:1f:a2:01:31:0f:2c:fc:9e:14:5f:d1:f6:40:e6:63:
eb:73:30:f2:2a:f3:e1:f3:7f:8b:88:78:26:0c:79:25:04:97:
6f:f8:61:c6:a6:e1:4e:0f:91:a5:f9:ec:2c:af:e2:fa:5e:8c:
27:ac:ef:27:39:00:0e:f3:cd:4b:8e:54:d8:6b:be:dc:92:91:
b3:87:9d:9f:df:c3:49:bb:60:f2:42:ba:16:51:ad:2b:ca:58:
b1:5d:8e:7a:6e:37:fd:ed:7e:fb:70:8b:ba:cc:0b:00:a8:e2:
81:b4:26:6c:1a:4a:07:38:b9:58:f6:39:21:1a:49:21:d1:58:
1d:0b:cf:43:e8:ef:e9:ec:26:c2:a4:4c:5f:d0:00:f8:11:11:
8b:78:41:83:39:fc:e2:8d:e3:15:b5:03:06:10:06:09:22:02:
1f:bc:30:94:b6:a0:ad:bd:74:19:2e:db:98:16:25:cc:49:6a:
76:4b:69:08:19:a7:61:e1:72:03:26:22:3d:4a:ee:64:20:a0:
af:a6:f6:f6:52:7a:dc:44:fb:d0:ae:0e:67:82:f2:b8:63:0e:
1a:98:cd:37:14:48:4b:66:6b:6d:52:50:13:b7:0a:c0:0f:93:
2a:29:ac:ce:0a:e5:ee:64:7f:8f:f1:c3:bb:22:3f:05:fe:ac:
e2:a6:1a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:41 2025 by rpki-client