Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2ecc2cf-c2c9-3d80-a654-5e8d15f7c139.roa
File: a2ecc2cf-c2c9-3d80-a654-5e8d15f7c139.roa (raw, json)
Hash identifier: GqErAicNt4DVTnPiwZv3FpP3XaOYi+8wwt3WFxvwt+w=
Subject key identifier: A1:48:8E:89:8B:CA:36:E1:84:E7:3C:D0:20:FA:97:12:38:55:7E:94
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F2B863455BD5F64F94E09F880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2ecc2cf-c2c9-3d80-a654-5e8d15f7c139.roa
Signing time: Wed 07 Sep 2022 12:00:00 +0000
ROA not before: Wed 07 Sep 2022 12:00:00 +0000
ROA not after: Thu 13 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2b:86:34:55:bd:5f:64:f9:4e:09:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 7 12:00:00 2022 GMT
Not After : Oct 13 04:00:00 2022 GMT
Subject: CN=4087a125-7e4b-42b0-a9fc-2d6f2abbaf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0d:37:f3:bf:9e:5c:86:3b:28:fa:ef:f0:95:
18:39:c5:b9:18:62:43:f9:9f:d7:0c:fb:bf:35:79:
86:dd:e8:71:89:bc:7e:e1:5b:39:88:bc:89:c8:44:
0f:0c:52:9a:a2:8d:1b:54:fd:81:17:8c:c5:a3:d1:
ff:4b:6b:7e:91:b4:12:77:b8:b9:64:ae:d0:81:93:
23:23:ef:d2:3b:9b:25:da:84:b5:83:86:2f:98:da:
f9:99:6b:09:35:3a:1a:ac:a4:d6:66:a1:ed:64:7e:
c8:74:48:28:5a:1d:d7:c8:fc:93:0b:61:94:37:f6:
62:fe:e5:3c:59:0b:36:7d:de:72:24:43:7b:69:91:
1b:48:d0:a7:04:8f:18:44:16:50:98:4c:38:ad:a9:
42:bf:3e:08:f1:fa:5c:68:8e:2d:f6:c1:49:0e:ce:
d3:e7:c0:5b:57:86:ec:ca:23:42:03:f4:9a:ea:6b:
19:dd:14:68:4d:03:82:49:f4:32:47:c3:88:75:ff:
bf:87:c4:6c:38:8f:5e:db:9e:36:a9:9e:cc:56:ad:
66:55:3a:03:19:b5:5a:83:be:f7:15:f0:4b:be:7c:
ee:80:f0:df:e4:e6:3e:ea:b6:aa:58:29:78:76:0a:
32:59:af:b8:05:99:13:80:b6:92:e3:14:a1:46:f7:
65:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:48:8E:89:8B:CA:36:E1:84:E7:3C:D0:20:FA:97:12:38:55:7E:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2ecc2cf-c2c9-3d80-a654-5e8d15f7c139.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:f5:3c:6e:ce:d1:c4:09:17:ee:9c:d6:01:aa:ad:af:e5:37:
e7:d2:a8:f1:ed:76:f5:44:0b:fa:c3:ea:fc:c6:c4:8e:53:8f:
9f:79:71:ed:fc:0b:b6:5b:d9:8a:01:34:5e:d3:30:0e:55:5f:
1b:ac:e3:49:52:c3:27:57:58:ab:81:47:df:b8:6e:66:7e:b2:
ad:22:14:5a:45:e4:c1:a1:32:5f:04:fb:4f:d2:85:1d:b1:90:
e4:21:1c:3d:75:61:f9:b1:53:4b:6e:0f:93:c4:e2:ef:87:3d:
e2:57:d1:45:b7:2e:7a:21:b0:34:c0:d4:a5:d4:72:75:94:58:
18:72:0d:06:16:e7:84:38:2e:b9:86:d0:55:33:49:9f:3f:f9:
d6:0e:1c:b2:65:ed:3f:ab:35:9a:af:21:a9:c0:af:e0:53:bf:
9e:14:f1:d4:10:de:c7:fc:eb:88:93:84:86:f0:c2:ad:00:24:
69:c4:8b:69:ed:4b:8d:61:2e:82:5e:99:c5:69:08:25:a6:65:
ac:52:63:20:4a:79:26:64:3d:ef:50:6b:1e:c0:b3:e5:99:68:
fd:96:71:cf:63:b2:ce:3e:03:56:c2:d2:82:e5:00:11:37:ef:
de:52:71:5e:56:80:ba:67:e7:b9:dd:bb:26:9c:94:5b:32:f0:
74:03:90:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 17:03:58 2025 by rpki-client