Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2c2386e-027a-33dc-becb-757e87f1226b.roa
File: a2c2386e-027a-33dc-becb-757e87f1226b.roa (raw, json)
Hash identifier: 2BRQXUAf0qqjqqladl/+ZI37zK01MovUfkV/9lEN6HI=
Subject key identifier: AD:DF:11:43:1C:42:4B:96:AB:4B:84:BB:82:9F:31:62:F9:24:18:35
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CA11C71465343CB909CBE2520
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2c2386e-027a-33dc-becb-757e87f1226b.roa
Signing time: Tue 18 Jan 2022 05:00:00 +0000
ROA not before: Tue 18 Jan 2022 05:00:00 +0000
ROA not after: Tue 22 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a1:1c:71:46:53:43:cb:90:9c:be:25:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 18 05:00:00 2022 GMT
Not After : Feb 22 05:00:00 2022 GMT
Subject: CN=17b759de-1fb3-40dd-91cd-5cf56d1beab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:be:e9:bd:d2:83:51:b3:78:21:7e:55:09:df:
66:c7:2b:55:09:58:f7:ca:36:39:bc:42:00:41:ee:
a4:74:49:b5:aa:f7:98:f8:21:d0:80:d3:c7:9c:e0:
93:25:14:92:42:29:4a:89:73:f9:d5:07:ef:29:73:
ba:47:21:ee:d8:05:b6:91:ec:80:41:e5:99:15:50:
65:e3:a0:8b:fa:b7:2d:21:0f:65:33:70:b4:af:c9:
00:33:68:8d:cf:87:3b:c6:f4:08:a7:5a:c8:c4:6f:
cd:8c:18:5a:aa:a3:1d:17:94:64:c1:83:1b:36:65:
72:8d:19:09:34:53:53:34:ad:fa:ee:9f:d6:c3:f6:
4c:5d:8d:26:41:d1:cc:5f:c0:1f:03:f9:76:e1:0f:
3e:14:ee:db:2a:ee:88:07:e0:50:f8:f5:2b:48:ad:
69:4e:ea:e0:c9:97:ce:ef:4c:c5:45:00:0e:ca:61:
a7:95:43:f4:b1:c7:ea:0c:86:f7:02:5f:2d:d0:f3:
c5:fd:b8:31:66:48:0b:ce:10:ad:71:bf:ca:ff:1e:
22:0e:b5:56:d4:7d:94:7a:25:bd:b7:5b:1d:06:77:
f3:8d:1a:da:6b:a6:6e:48:5f:20:18:d2:48:e5:ec:
3d:0a:15:fb:bd:3d:a9:d7:2d:39:79:54:a6:4e:97:
0b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DF:11:43:1C:42:4B:96:AB:4B:84:BB:82:9F:31:62:F9:24:18:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2c2386e-027a-33dc-becb-757e87f1226b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:ef:6b:e1:02:f4:6e:a7:94:d2:4f:72:7a:1b:a2:e0:3a:f8:
54:8b:80:17:0d:48:6e:2f:ab:a5:af:a7:26:c2:b2:ac:cd:e7:
e8:e5:3d:52:91:6b:89:c5:13:73:a7:ec:5f:5a:bb:95:0f:12:
63:c0:e8:fc:4c:09:46:5f:88:cf:14:84:bc:19:43:87:2f:8a:
59:28:66:20:1f:c9:0f:f0:52:25:25:c9:3a:b9:e8:2d:21:d4:
c6:53:d4:7c:f7:40:4d:f6:40:14:58:ff:2d:d0:4e:cc:d2:25:
de:86:b4:28:25:b5:d1:81:5e:74:af:eb:6e:fa:82:eb:2c:e7:
11:17:8b:7b:28:af:ff:b4:78:28:82:4d:7e:99:db:85:31:cb:
a1:c6:0f:5d:cc:fb:11:23:4e:e3:17:b6:38:04:9a:b5:e2:f8:
6f:ed:9d:e1:5e:e5:8f:39:55:e0:34:a8:0c:03:c1:cd:18:e2:
da:5a:9a:e2:04:68:95:39:2e:81:74:fd:0c:55:04:84:12:55:
f9:9d:98:6d:9d:38:2b:20:92:4c:37:51:e3:ec:25:ca:c4:2c:
11:ba:e8:c4:c2:dc:32:b2:12:45:d4:25:dc:a8:b7:26:c9:3a:
f1:ab:6d:e1:20:34:b6:85:56:dc:92:f3:97:d6:56:63:b7:03:
5d:4a:18:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:18 2025 by rpki-client