Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9fc484be-09f9-388b-8dc0-b860063df260.roa
File: 9fc484be-09f9-388b-8dc0-b860063df260.roa (raw, json)
Hash identifier: zmdDYxySc9IbjnWpcHEb9lRl4Yc6r2jX8YfafHgS73k=
Subject key identifier: 02:7F:35:A4:60:61:6B:8F:59:E7:D1:5A:33:0D:07:F9:31:01:79:6E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400DDBFAB4FF40AF9CDA5BE200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9fc484be-09f9-388b-8dc0-b860063df260.roa
Signing time: Sun 27 Nov 2022 12:00:00 +0000
ROA not before: Sun 27 Nov 2022 12:00:00 +0000
ROA not after: Mon 02 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.78.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:0d:db:fa:b4:ff:40:af:9c:da:5b:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 27 12:00:00 2022 GMT
Not After : Jan 2 05:00:00 2023 GMT
Subject: CN=ecbaa739-619a-4af0-a07a-aef891f6d8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:28:83:c6:d6:f2:d6:24:6a:f2:6d:d6:90:c5:
55:56:76:12:07:24:58:2d:31:58:f8:60:ba:49:09:
d6:b8:7c:4a:8c:15:c4:c4:4b:2b:d0:89:25:c7:ed:
c1:1d:83:2e:27:75:eb:43:ac:22:ea:ae:bf:96:17:
97:18:8c:45:c1:ec:c0:52:43:7d:45:5a:1d:9f:30:
2b:a7:f6:ba:3e:9e:a6:08:fd:71:ed:6e:6b:69:e9:
9d:8a:8c:f9:d6:23:5f:e2:22:1c:c1:d9:f5:1c:11:
1c:07:e8:71:ba:9e:bc:65:ac:48:d7:39:e9:70:1a:
3c:7d:55:35:5f:46:b1:b1:44:4e:18:60:0a:d0:d7:
be:33:89:11:01:59:ce:3d:d8:2d:fa:db:2b:1b:6e:
da:38:89:1b:50:5f:fc:5c:8a:bf:79:96:65:4a:0d:
fc:1e:dd:a9:3e:8c:33:ff:f9:5d:26:6b:5d:85:34:
96:09:8f:f9:de:37:8b:0f:83:86:b7:b4:b5:79:ec:
18:51:23:c3:49:a7:07:57:11:c3:eb:a6:12:25:1f:
dd:13:f3:a8:dc:cc:33:59:dd:eb:16:9e:89:4f:47:
cc:ec:a1:f1:51:4e:88:99:63:70:18:95:74:84:e6:
04:0d:0f:e8:9e:a3:be:01:bd:7f:34:87:53:3b:a9:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7F:35:A4:60:61:6B:8F:59:E7:D1:5A:33:0D:07:F9:31:01:79:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9fc484be-09f9-388b-8dc0-b860063df260.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.78.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:cb:ae:87:f0:9d:41:86:79:a6:64:59:a4:f8:84:19:a7:61:
83:22:e7:92:20:85:ae:02:dd:ac:00:46:2a:c3:81:30:4b:35:
f8:fc:42:55:09:87:7d:5d:fd:c2:0c:01:a7:17:07:01:e6:41:
a2:d7:a4:dd:6e:70:8a:6a:7f:01:af:48:6b:08:49:42:59:99:
47:d4:d1:84:66:42:88:fc:12:51:ec:2e:45:c2:be:e7:a2:dd:
74:82:65:7f:78:6d:0e:c7:ae:c3:30:c1:ae:91:21:11:ab:3e:
ea:a5:66:5d:a4:ac:75:27:e0:0e:f8:88:5a:43:60:09:5f:9e:
76:b2:78:44:ec:9c:b4:d9:70:35:ee:be:ff:ea:f1:b7:54:04:
40:ed:f3:51:4c:a9:98:85:77:50:82:2d:14:4a:53:97:78:3f:
ae:61:a8:56:b6:b2:79:b3:97:33:ed:1c:31:73:aa:18:22:09:
ef:1b:1b:62:aa:0e:b6:18:24:c9:7f:1d:43:80:24:32:78:38:
97:7b:35:be:99:37:bd:b0:88:04:61:c4:6c:d0:da:77:f4:31:
3d:01:fe:24:66:a1:d7:97:cc:45:0c:fa:bb:ea:c6:26:0b:dd:
6e:e9:31:a6:57:26:f7:cb:a6:76:d9:8d:9e:c0:bd:d9:8b:ab:
d4:f8:c2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:28 2025 by rpki-client