Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c98545e-f503-3d0c-a772-60a624a7a8e4.roa
File: 9c98545e-f503-3d0c-a772-60a624a7a8e4.roa (raw, json)
Hash identifier: KT9aPiRQHnLbxwyLcIkXD4RHc8Ui35BVaAOSWE0Px4w=
Subject key identifier: 19:D8:CF:76:5C:BF:BA:82:E5:B9:C1:9E:CC:7E:F9:0E:60:32:61:67
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F047FE32097F8535B47A10400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c98545e-f503-3d0c-a772-60a624a7a8e4.roa
Signing time: Wed 24 Aug 2022 12:00:00 +0000
ROA not before: Wed 24 Aug 2022 12:00:00 +0000
ROA not after: Thu 29 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:04:7f:e3:20:97:f8:53:5b:47:a1:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 24 12:00:00 2022 GMT
Not After : Sep 29 04:00:00 2022 GMT
Subject: CN=3467bbf4-1215-4a75-b748-701a41cf76f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:11:2d:64:e6:11:7c:4e:f8:fe:d9:b9:e2:c5:
d5:34:5a:1c:e4:d5:70:d1:2c:19:70:17:b3:57:84:
9f:35:73:80:c9:44:73:5f:4b:28:8c:6f:69:26:9c:
d2:be:b5:2c:dc:09:68:43:b8:df:85:48:23:ee:65:
e7:ef:5d:ab:b3:45:94:f2:b2:fb:b6:c4:a0:99:84:
e5:05:33:cd:b6:c6:1d:fe:cb:b5:68:24:8e:6f:0c:
79:ae:98:5d:88:f0:e6:40:8b:b0:a3:27:1b:73:ea:
d5:46:c5:92:bf:f9:f2:0f:b7:67:eb:62:4d:c7:39:
48:b6:24:e4:d6:bb:6f:a8:7a:3d:41:e9:15:39:6f:
ba:94:22:07:e6:8d:95:bf:a8:46:14:77:f7:c3:80:
f5:73:74:92:ab:fd:2d:01:9e:38:45:12:a5:75:85:
8f:5c:31:fd:95:0a:bc:16:3b:e0:a7:c9:66:fd:c1:
7e:08:f9:4c:7e:d3:1a:46:d6:c4:e5:64:c9:ea:a1:
b3:41:b1:39:58:aa:14:95:cd:c8:85:f2:ea:b4:5a:
c6:70:5a:85:8f:fc:7f:12:75:7d:2c:84:0d:46:99:
4e:16:99:04:be:c6:6e:e8:a7:51:15:58:2f:89:21:
05:ba:65:d1:88:93:05:46:32:3b:be:bd:fa:96:97:
26:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D8:CF:76:5C:BF:BA:82:E5:B9:C1:9E:CC:7E:F9:0E:60:32:61:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c98545e-f503-3d0c-a772-60a624a7a8e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.69.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:8f:fc:e9:41:e9:d6:2f:b1:05:39:7a:32:af:ca:71:fc:a5:
d4:72:df:9d:33:37:ab:4a:75:8a:23:b4:cc:99:38:82:bc:d3:
ea:bc:a4:04:89:36:6b:3f:0c:21:ed:62:1b:bd:f9:7c:7c:64:
9d:b6:fc:8b:ab:0b:39:e4:f7:b8:f2:b1:13:96:6e:72:99:e5:
5a:09:bb:67:61:13:a8:28:35:cc:fd:b3:6f:ab:7a:8b:3b:0c:
d4:85:40:fa:24:15:b6:51:f1:7a:50:c5:59:10:06:23:7a:2a:
a3:e1:d1:db:4d:2b:62:8c:54:be:bd:15:af:4a:ab:9c:80:c1:
ea:03:5c:08:6c:e6:64:a7:f2:8e:97:69:51:f8:78:f4:be:7f:
04:a3:ce:b6:af:e3:85:1f:3d:8a:e1:47:b4:82:92:68:9b:2e:
d1:40:13:f6:6c:8a:6c:22:e7:f3:97:eb:98:4f:da:f8:a1:31:
fc:bd:0c:c2:73:cb:70:6f:70:d5:fc:15:43:cf:b2:90:34:f3:
e0:fa:1b:8a:c5:3e:49:d8:58:d0:d5:dc:2d:88:11:14:10:3d:
6f:80:9e:5a:2f:40:cf:ee:b4:e0:d6:98:1c:dd:bc:d9:ee:46:
ce:35:4a:f9:a4:44:59:52:18:27:fd:ba:73:cd:45:31:c7:de:
bf:06:e9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:25 2025 by rpki-client