Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f3d96b3-12c2-3fb4-a622-7a5460b07cda.roa
File: 9f3d96b3-12c2-3fb4-a622-7a5460b07cda.roa (raw, json)
Hash identifier: 2IzCEQTjFszyO5IB7RYUf26aRrpq0fPz50dy+/o0DG4=
Subject key identifier: A3:58:90:7C:0B:8C:1B:31:84:85:4C:DB:AA:50:66:9B:C2:1C:2B:D2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D55E7A330CDB7355CEF6CCF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f3d96b3-12c2-3fb4-a622-7a5460b07cda.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 27 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.122.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:e7:a3:30:cd:b7:35:5c:ef:6c:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Apr 27 04:00:00 2022 GMT
Subject: CN=9b4a48b1-8065-46c0-84c9-0d8ab2437837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:21:b3:20:ff:38:3d:e1:9c:63:9f:62:4e:de:
22:5a:ef:ab:7d:97:f4:14:e5:70:0b:65:fd:2b:7f:
8c:c0:87:da:e4:34:02:d9:00:a9:82:e8:87:33:da:
8d:93:0d:9e:ec:b0:dd:5f:9a:0a:ca:e2:e3:a2:40:
9f:9e:77:eb:de:5f:00:84:6c:99:5b:f5:fa:1e:93:
b8:08:83:e3:5c:62:53:2d:1d:91:4b:c0:96:60:a9:
08:d1:d9:34:ca:b9:1e:4b:ea:02:b1:bc:9e:eb:4a:
a3:99:2f:a1:1b:b9:fc:69:2c:da:79:19:0a:af:db:
28:08:90:67:c1:77:0d:1e:03:1e:16:9d:eb:4f:2f:
d0:76:f3:4b:26:b0:cb:3d:ce:53:2d:46:4e:e1:aa:
b0:0e:7e:d7:c1:ff:96:7c:0d:ce:65:5d:c1:95:4d:
b9:23:f6:8f:ab:b2:dd:ae:0a:2f:75:dc:fd:df:f0:
8e:84:c0:a8:fd:8a:b4:3d:69:cd:e7:5d:01:1b:6f:
d4:15:c6:7f:46:a5:3e:b3:7a:68:cd:2f:ff:61:ec:
7f:1f:9b:8b:67:35:ba:82:0f:b5:b4:c1:19:bc:ae:
7c:c3:e0:76:e0:a7:81:5c:3f:83:5d:8f:d4:89:bd:
f5:6b:98:59:fc:02:ea:d8:3a:f6:6a:57:d5:0d:fd:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:58:90:7C:0B:8C:1B:31:84:85:4C:DB:AA:50:66:9B:C2:1C:2B:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f3d96b3-12c2-3fb4-a622-7a5460b07cda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.122.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:20:55:10:4f:88:cd:c7:6f:80:d1:d1:54:a7:21:b4:a1:35:
0a:bc:c1:fa:f3:db:1b:80:8c:4d:97:e9:2d:8d:53:2d:4a:d8:
b5:de:69:2e:65:c9:3f:b9:88:6f:24:e7:d3:43:56:b1:17:83:
4c:a7:ba:28:f1:ce:76:0e:9f:1d:ce:c9:80:58:f9:80:6c:7a:
95:63:94:d3:07:9f:10:78:db:44:78:56:9d:45:15:3a:da:4d:
62:d7:c5:0e:bf:8f:b8:02:f8:91:a2:77:04:31:23:38:91:f1:
a5:31:e2:f8:78:ea:51:e1:e0:88:8f:52:26:17:e6:55:2d:c2:
50:7f:99:b3:87:b7:a5:e2:1e:b7:c0:76:ef:20:54:7e:da:e2:
0e:3a:1b:55:37:2a:a8:af:96:f6:41:e3:00:5e:3f:4e:0e:80:
57:b0:b9:1e:f8:14:a4:f5:e0:97:10:ab:0f:c6:71:82:d0:fe:
4f:13:d2:0f:96:32:16:d8:84:6d:06:7d:5c:79:77:ff:43:89:
cd:04:75:b1:16:97:c9:bb:c9:94:11:70:aa:d6:b3:40:75:9d:
52:ed:cb:49:53:0e:42:aa:31:0d:5f:86:48:a3:b7:f6:e2:00:
8c:14:01:54:40:12:1b:c8:37:3d:f7:85:86:30:5e:ff:bd:18:
59:09:b4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:50 2025 by rpki-client