Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/970bec44-ae9a-3604-a8d4-327b845b962e.roa
File: 970bec44-ae9a-3604-a8d4-327b845b962e.roa (raw, json)
Hash identifier: /3PhG8+TVL/bQINk4kXF9thTRi/x5QQtDhvW/TK3eb4=
Subject key identifier: 24:BA:2A:FC:1E:BE:80:EC:0B:0D:35:03:AC:BE:96:D6:3D:0E:6B:60
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3194A4BD6CE6E5DDCBDE4A40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/970bec44-ae9a-3604-a8d4-327b845b962e.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:31:94:a4:bd:6c:e6:e5:dd:cb:de:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=fb2d36f1-ad6b-472b-ba4e-1b955878004a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0b:24:8a:f5:c2:d5:cc:12:8c:3e:e4:3a:80:
75:39:c1:84:03:cc:f9:13:39:19:6c:76:ce:03:68:
29:9c:7b:31:ac:54:df:27:32:4b:ef:d8:98:27:69:
dc:cb:98:18:b4:1e:f9:28:f8:97:be:10:2f:68:9d:
b2:9a:da:85:3d:82:00:23:be:34:a7:d1:d0:64:92:
17:7e:85:61:c9:9b:b9:4d:50:7a:d7:a0:9c:e8:65:
9e:5b:87:b7:e9:02:dc:69:c3:a2:b1:83:e5:d4:87:
c7:01:0b:d2:b0:4d:ed:03:ae:2a:ce:23:38:8f:b2:
87:dc:f8:05:52:f9:3e:19:d3:ba:30:ee:11:e1:61:
67:4b:0c:f9:47:eb:f3:ca:7f:d4:93:06:29:ef:ab:
d0:93:02:7a:d7:97:e6:f3:a2:19:84:9d:80:9e:ee:
fc:d1:c1:fb:06:d9:f6:35:5e:e9:c8:15:e0:10:25:
fc:00:bd:cd:c6:67:6b:a3:d1:8b:f9:b4:a5:e9:8d:
67:d9:d1:59:e7:42:2c:74:d9:28:ca:9c:4b:10:d3:
a1:27:36:a5:46:55:3c:d3:25:72:12:ba:31:53:a9:
5e:7b:6e:2e:26:8e:d3:a6:55:2b:99:8c:91:f3:db:
ef:ea:1d:c9:47:b0:13:c7:75:77:14:d5:e6:06:8c:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BA:2A:FC:1E:BE:80:EC:0B:0D:35:03:AC:BE:96:D6:3D:0E:6B:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/970bec44-ae9a-3604-a8d4-327b845b962e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:1c:3c:e2:19:56:d2:1b:61:b1:f5:de:58:0f:68:c0:e4:4c:
cc:e6:95:c4:c0:f9:57:d2:d5:b0:95:aa:a3:b1:37:14:60:91:
dd:87:d5:39:60:4f:02:2b:15:a1:8f:a2:29:98:2c:fc:d6:4e:
2e:de:fe:f8:88:27:f7:0a:24:dd:a7:83:7e:cf:4b:68:5b:2e:
be:56:27:92:90:f3:e6:ae:e6:70:84:f9:29:8b:0e:18:3b:ef:
6d:88:76:bc:69:42:f6:b7:63:58:e9:39:12:9e:7c:40:5d:62:
29:6f:48:db:11:57:f0:5c:6b:41:d8:ef:fc:19:0a:68:a4:90:
30:0c:d6:9b:48:ca:e8:e9:9f:e2:01:65:0a:11:01:ba:8f:0e:
f5:2f:c3:94:f5:d5:1c:0c:4b:e5:46:df:17:b0:3d:11:10:0c:
47:b5:44:50:c7:ec:0d:63:a8:75:63:e4:3f:f1:ad:c0:49:af:
66:42:48:d4:36:6c:3b:90:12:30:05:1d:b8:62:32:8f:ff:99:
a9:c4:24:58:a3:1a:c9:bf:75:57:b8:00:65:0d:66:98:fa:76:
5d:a1:7a:9e:8e:1f:ab:b3:4d:60:ed:2c:22:17:f5:6d:96:c7:
fb:65:e4:6d:4c:1e:ad:f6:e7:8f:da:48:73:dc:9c:34:54:71:
fe:41:6a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:19 2025 by rpki-client