Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/986f5cdb-4a89-3805-9ca0-8ebd4f521834.roa
File: 986f5cdb-4a89-3805-9ca0-8ebd4f521834.roa (raw, json)
Hash identifier: UM5tE2z1MWcAscz1vUjQUSaqnzmgjr+W+uk52Lk/xkw=
Subject key identifier: F1:D8:36:AC:41:86:05:63:45:EE:3E:BB:9A:D4:D2:89:4D:B4:A9:0A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B2AFE5A726A66BE45427A800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/986f5cdb-4a89-3805-9ca0-8ebd4f521834.roa
Signing time: Wed 25 Jan 2023 12:00:00 +0000
ROA not before: Wed 25 Jan 2023 12:00:00 +0000
ROA not after: Thu 02 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.91.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b2:af:e5:a7:26:a6:6b:e4:54:27:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 25 12:00:00 2023 GMT
Not After : Mar 2 05:00:00 2023 GMT
Subject: CN=a0152584-66ef-4697-985b-aeb7f9fc885e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:d4:7e:16:3b:e3:20:58:02:27:ed:41:13:
96:31:09:eb:16:76:98:2f:8d:d2:42:36:5d:e1:55:
0a:8b:48:8d:40:3b:4c:59:66:df:54:66:2a:44:ca:
dd:09:4f:b8:6c:61:b2:41:e9:c5:4a:63:31:ba:9c:
b4:61:a2:a4:2e:c2:2f:c6:78:42:ca:d0:b7:81:8d:
88:4d:2a:bd:5e:b1:37:64:57:b7:47:69:74:6f:1b:
2e:20:bc:36:e3:07:bc:65:cb:9a:b9:78:35:8d:51:
ea:66:2b:15:b9:12:4e:1a:80:c0:d7:fe:de:b3:6a:
19:5c:4a:82:78:80:c8:0d:78:55:84:c6:1f:cb:9b:
b9:1c:61:bd:0b:0a:6b:bd:ba:1e:8d:3d:5b:db:d9:
6c:a3:fd:55:89:b0:a5:50:1f:f7:69:b9:e9:60:7b:
49:79:cb:71:ac:10:fc:a0:8f:c5:f1:49:d3:45:26:
86:0d:de:c0:36:fe:0c:7d:3a:62:27:5d:de:28:ab:
1d:d6:fc:b9:1f:90:fc:df:30:49:04:0f:7d:23:60:
69:df:74:8b:4c:c1:d0:61:91:93:76:61:7f:60:7f:
87:7b:47:0b:21:7c:5a:62:2d:6a:16:68:28:d3:27:
75:9f:8e:a9:c8:98:78:5c:e3:26:22:99:0e:bf:ee:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D8:36:AC:41:86:05:63:45:EE:3E:BB:9A:D4:D2:89:4D:B4:A9:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/986f5cdb-4a89-3805-9ca0-8ebd4f521834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.91.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:9e:7f:9e:a8:97:6c:54:10:5d:cf:99:9c:53:fb:c8:67:a3:
4a:07:ae:ef:24:b6:a3:ab:aa:ee:53:48:d5:3a:d4:fc:fc:c4:
80:6c:4e:54:5b:e9:ec:5b:9d:7a:db:6f:a4:75:ed:12:9e:06:
08:a7:4f:f0:76:2c:cc:17:36:8f:12:5e:25:dd:b8:21:6b:21:
a6:23:47:62:33:2d:84:b4:47:f0:f6:6f:9f:ac:de:d7:1a:11:
30:5e:08:bb:3e:47:99:a8:ec:23:3b:b2:9c:43:c3:e6:cc:d7:
27:2c:f4:77:ec:37:a5:74:32:cf:71:6e:f3:55:d9:36:92:ec:
2e:b8:26:aa:4a:29:9f:32:1a:12:46:e0:e0:16:b0:b8:4c:31:
10:99:d3:49:e8:88:98:c5:a6:ff:52:77:e7:9a:d9:6f:91:bf:
16:3e:f7:30:78:fc:80:8d:73:a8:74:26:79:1e:f2:26:9b:a8:
1b:f3:59:5a:a2:f3:1e:44:93:74:05:bd:3f:e1:34:d9:4a:3b:
ef:a6:f0:35:99:92:d5:dd:f8:9e:d6:fc:0a:b0:60:94:db:14:
4d:c6:8c:ea:82:44:88:0c:cf:06:2f:9e:d2:b3:84:a3:6d:b8:
32:28:fa:3e:4f:cb:e7:a1:f0:75:b3:b1:2f:e8:90:c7:7c:bd:
3e:ee:fc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:17:15 2025 by rpki-client