Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a364d30e-d241-3862-b436-e616e7fcf49e.roa
File: a364d30e-d241-3862-b436-e616e7fcf49e.roa (raw, json)
Hash identifier: jbzTjbiw979yjqlVlu5/6gZJPDEXEpsjAkw4FWgaXkw=
Subject key identifier: 1A:A5:97:E0:A3:BF:86:84:C1:97:B9:F7:A0:7C:15:04:14:93:52:0F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EB6ADED08F3A2E563714CE338
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a364d30e-d241-3862-b436-e616e7fcf49e.roa
Signing time: Wed 27 Jul 2022 12:00:00 +0000
ROA not before: Wed 27 Jul 2022 12:00:00 +0000
ROA not after: Thu 01 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b6:ad:ed:08:f3:a2:e5:63:71:4c:e3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 27 12:00:00 2022 GMT
Not After : Sep 1 04:00:00 2022 GMT
Subject: CN=68451aea-45fe-4e58-a9ae-5d863680c6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:75:69:f9:e4:dd:6f:4b:b1:ba:7d:58:1f:
dc:1e:98:95:76:f7:56:56:23:f7:54:6a:ec:6c:ba:
25:69:f2:0c:da:2d:2b:7c:41:93:0c:e3:8a:59:38:
fb:a3:5b:a5:5a:1e:dc:4a:62:58:52:6e:c9:61:94:
b8:ef:e8:a0:5d:b7:13:6c:47:b3:ee:88:fc:4d:4b:
e5:97:69:ac:81:08:62:84:44:95:7a:02:16:b9:03:
94:8f:73:a5:24:b6:e6:a2:a1:a5:b1:74:bc:24:e7:
2a:52:55:e4:ed:b6:63:53:d7:ee:9f:e7:e9:9c:ee:
9b:54:ee:22:86:ee:94:07:19:41:d7:b1:b8:9a:3b:
e9:c9:56:0d:7a:ad:03:6d:25:c9:63:61:f3:66:0f:
5e:b8:7c:a9:c3:5e:04:74:ed:e7:80:30:34:fd:71:
48:cf:d7:c0:d0:4a:f1:bf:10:3f:62:c8:fe:f5:62:
aa:07:78:cb:b8:a6:9c:01:0d:56:ce:c3:10:59:ff:
01:61:4d:27:b7:25:85:10:d6:89:78:80:94:23:e3:
a8:76:77:4b:02:38:c2:b9:f7:c7:20:3a:33:43:40:
01:a7:ad:d1:3a:ae:84:2d:4a:01:ca:0c:a9:eb:c0:
5e:50:ba:f4:55:fe:bf:e7:8a:db:c2:19:a5:a1:0e:
dc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A5:97:E0:A3:BF:86:84:C1:97:B9:F7:A0:7C:15:04:14:93:52:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a364d30e-d241-3862-b436-e616e7fcf49e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:70:92:07:2c:23:76:31:a3:9d:98:98:24:f6:2f:18:27:26:
a4:5a:48:42:1b:f3:56:95:ed:df:91:3d:b0:b5:20:dc:c4:89:
92:20:80:7c:d0:d1:c8:73:aa:93:7e:2b:ff:1b:49:e4:c0:62:
f2:2b:11:95:62:f8:7b:c1:92:85:4a:ba:4d:60:6d:b8:a4:e0:
cf:2e:f6:f6:04:0c:4d:0d:2b:00:36:55:0f:80:9a:4a:be:7d:
2e:c2:d9:44:79:89:23:c3:e0:fa:72:be:f1:a5:5f:bb:7b:85:
a1:02:7e:e4:7a:08:66:26:91:d0:20:66:ec:1e:2d:a2:f5:ef:
c4:59:35:1a:3d:20:89:00:59:1d:de:f6:58:40:69:c6:3f:9f:
7f:ca:d3:d2:4c:89:22:44:c6:84:fb:d3:43:31:7c:fb:3c:a7:
23:3a:c2:dc:5b:65:ea:74:72:28:08:3e:89:eb:d5:ff:d6:1c:
74:53:35:a0:aa:8d:e7:63:5b:d1:01:fd:7f:33:a4:67:67:9b:
4f:78:b8:9c:53:ad:ea:d0:79:82:46:c6:2c:a0:15:ad:3d:7f:
58:3d:b1:b9:6d:f9:08:55:bf:8a:eb:b6:28:49:25:4b:aa:ec:
de:ea:54:66:c5:00:12:1a:fe:3a:1e:ee:cf:83:75:f1:9f:9f:
0d:0a:d2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:55 2025 by rpki-client