Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2be7ecc-39c8-3780-baff-d7dd18dbe9e7.roa
File: a2be7ecc-39c8-3780-baff-d7dd18dbe9e7.roa (raw, json)
Hash identifier: PoSQIw8l4kzcS/h/hmaCddrm6xRvYk3ILvbflcyp4mc=
Subject key identifier: DE:0D:A3:67:59:61:DE:EB:14:A6:3E:FB:A5:0A:38:F8:65:91:5D:83
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD95E82763ACB192A27AC9280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2be7ecc-39c8-3780-baff-d7dd18dbe9e7.roa
Signing time: Tue 08 Nov 2022 12:00:00 +0000
ROA not before: Tue 08 Nov 2022 12:00:00 +0000
ROA not after: Wed 14 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d9:5e:82:76:3a:cb:19:2a:27:ac:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 8 12:00:00 2022 GMT
Not After : Dec 14 05:00:00 2022 GMT
Subject: CN=38ea3fe3-b197-4a74-8e93-0f84460601a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:77:ec:4e:30:02:cf:99:64:a6:5c:39:16:
80:a6:45:80:da:19:35:8e:36:8e:34:4c:ce:d0:bc:
4e:6c:8d:ab:01:e6:95:4a:96:07:f6:89:55:4c:01:
6a:22:bd:d1:eb:ac:3a:91:8e:04:5e:7d:f7:3e:69:
c6:24:8c:a6:ad:6b:7b:2e:4c:81:fd:00:ce:eb:9a:
00:08:59:e0:0e:80:da:fe:c7:bc:9f:6c:40:27:d3:
e5:04:fc:e2:a5:0e:b5:47:2b:5f:dd:6b:09:ba:a3:
32:d8:c0:60:c9:38:bb:54:8b:38:de:9a:0a:26:2e:
09:97:48:e3:4c:eb:29:b4:d2:31:39:e0:f3:fa:b9:
01:92:f7:d8:9f:ea:4e:93:8c:12:df:a6:d5:22:6f:
d2:2b:3d:1c:36:97:c9:44:47:04:3b:9c:7f:ab:08:
0e:20:fc:ae:a2:fc:ad:8c:07:b9:21:8a:4e:ab:a4:
f0:37:bc:bf:8f:2b:c8:99:1f:3b:8b:19:1a:f0:ff:
4d:98:ee:b0:23:34:f4:f2:20:ac:c4:d7:f4:39:7f:
2c:a8:b6:4e:77:5e:ab:33:7c:7f:90:84:68:1b:c3:
35:66:ac:64:3c:ec:bf:54:82:6e:39:e9:5b:fb:3a:
8f:5c:be:91:a2:7f:f7:a1:af:eb:6b:9e:0d:fd:ef:
1a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0D:A3:67:59:61:DE:EB:14:A6:3E:FB:A5:0A:38:F8:65:91:5D:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2be7ecc-39c8-3780-baff-d7dd18dbe9e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:63:bb:d1:35:8d:5a:84:98:2b:17:6c:3b:5d:99:a5:82:fa:
2d:6c:63:7f:7a:62:7f:81:d5:82:32:a4:71:9a:2c:52:1c:b2:
82:ac:45:de:b8:1c:69:e9:92:fb:0c:0b:bd:5f:c8:0a:c1:3d:
22:40:31:32:0e:9a:12:b7:f2:a4:ab:a7:98:28:32:da:30:9f:
52:5f:97:03:ec:01:9c:3e:a2:71:a2:d0:df:92:ec:dc:68:68:
26:98:e7:08:65:bf:f4:68:6f:29:8a:7f:e9:08:73:9f:53:97:
61:1b:21:07:93:e9:df:99:e6:a7:99:50:7e:83:17:0d:84:f5:
f7:1e:27:32:35:3b:be:cf:7b:03:85:39:b1:95:76:05:cf:45:
a5:0f:16:a4:62:25:5d:5f:cc:7a:e2:fd:fd:76:0f:ee:7d:a0:
74:38:e7:4e:68:c8:2e:83:e8:ba:4c:71:dc:21:a3:cf:30:64:
91:0a:06:6b:b7:23:dc:dd:94:14:93:ff:94:3c:9b:03:b1:a5:
db:63:41:87:d8:f0:e1:d0:d6:1a:88:1b:52:ef:89:f1:70:da:
fc:e6:04:0f:be:6c:e6:4d:fe:58:e8:2c:00:f2:2e:03:e7:b5:
04:15:f0:cf:38:f6:54:99:5e:c7:69:e0:91:ff:06:bc:fc:d3:
66:40:c6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:53 2025 by rpki-client