Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99473e3c-8de0-3cb0-ae89-11d4b2d1077a.roa
File: 99473e3c-8de0-3cb0-ae89-11d4b2d1077a.roa (raw, json)
Hash identifier: Ph8MqA/pyEBh5FI2p3bAnIgKyKQLtC1tHzPsOAflR5c=
Subject key identifier: EE:EC:72:18:01:CE:71:27:0B:57:EB:C0:11:C8:7A:62:D6:53:CA:3C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404BD4824B92B390C7604DEE40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99473e3c-8de0-3cb0-ae89-11d4b2d1077a.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.126.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:d4:82:4b:92:b3:90:c7:60:4d:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=cbc381c9-a251-4640-b066-ef65c08ced73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f6:14:29:fc:03:3c:17:e8:2c:3a:c0:ea:67:
b2:4e:1d:63:38:f2:83:c1:7d:45:b0:b1:39:45:92:
df:e5:2d:88:d3:69:b9:cb:2e:7d:8b:34:4b:5f:8e:
b2:e1:99:b4:93:5c:f2:c7:98:a7:94:69:1b:0a:3b:
32:03:ed:40:90:8a:31:ad:09:20:2b:1b:77:e2:f7:
f5:11:79:ea:7a:b4:bf:35:29:db:5e:3b:e0:83:4b:
fe:cb:fc:a7:dd:c7:d9:4c:b8:80:13:74:e5:6d:18:
ad:56:4d:b0:a4:25:d5:14:cd:e6:ad:a0:7e:41:3c:
56:91:8c:87:cb:95:da:b7:c2:3b:2f:57:a6:ca:58:
09:f8:c1:a4:f6:66:67:85:3c:41:3b:56:2c:0b:8e:
5c:cc:52:70:25:04:74:97:b1:be:71:7e:be:6a:da:
41:43:9f:f5:d6:33:81:f9:71:9c:56:aa:40:69:1b:
01:6c:59:51:43:bb:b1:b3:2d:46:f5:45:b2:8b:0b:
10:a3:9e:47:bb:9c:eb:ed:58:b0:f3:c9:2d:60:90:
63:62:c2:f8:c4:b2:5f:d4:3b:dc:8d:ad:a6:28:51:
4c:1e:ca:c3:71:2d:e3:91:d3:f6:7d:c5:e3:b2:d6:
7f:66:84:32:08:13:88:ed:71:55:95:c7:68:2e:90:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EC:72:18:01:CE:71:27:0B:57:EB:C0:11:C8:7A:62:D6:53:CA:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99473e3c-8de0-3cb0-ae89-11d4b2d1077a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.126.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:cf:d2:16:d6:e0:65:98:41:53:94:de:5c:35:43:1a:df:9a:
8f:b3:61:4f:6e:dc:cd:8b:24:94:dc:5d:a5:8f:b4:4e:ec:d4:
4b:3d:8c:a4:f5:75:71:eb:2a:8b:6f:b6:db:41:55:40:b6:c1:
44:b9:e2:0b:82:e7:28:ad:19:db:f1:c9:dd:2e:14:9b:b0:10:
d7:19:b3:a7:7e:30:4e:63:de:f2:68:a5:2c:05:38:0d:b3:33:
35:e0:a3:0e:a0:80:1f:e0:f2:23:31:c0:bc:9d:b1:06:9d:70:
95:7e:76:aa:38:17:b7:f9:a1:73:57:57:1f:d1:6a:c0:42:af:
39:b7:4d:b1:08:14:d0:b7:7b:d9:c9:cb:8e:f0:9f:20:3d:7e:
f8:e3:76:a9:a2:c6:f8:cf:64:55:e9:70:08:4f:73:ec:1b:8b:
33:d6:b4:c1:42:28:11:00:2a:cd:ae:08:3f:2c:65:24:9f:53:
62:e0:46:46:43:b0:47:11:e3:d6:29:05:29:44:84:f3:a7:f7:
71:fd:d2:80:9d:ed:2a:e9:00:5f:b3:83:89:09:eb:e4:93:fc:
9a:75:4f:9f:12:3a:63:57:1a:f9:10:8d:60:66:cc:a0:0b:c5:
1a:cb:8e:e8:35:e7:e3:bc:04:10:f5:95:3d:4b:4a:d0:fa:54:
ad:0f:e0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:52:14 2025 by rpki-client