Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6cb59fe-1de4-3291-a31a-b0d3ef4080be.roa
File: a6cb59fe-1de4-3291-a31a-b0d3ef4080be.roa (raw, json)
Hash identifier: I+dRPE0lEsP8HhY3IbmFXsmkzl0lh61JOywwg8vo4W8=
Subject key identifier: 38:E0:04:43:93:1B:82:A3:44:F0:C6:12:CE:32:7C:E6:49:F7:CD:5A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D423EA9B44A74C41E352752C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6cb59fe-1de4-3291-a31a-b0d3ef4080be.roa
Signing time: Wed 16 Mar 2022 04:00:00 +0000
ROA not before: Wed 16 Mar 2022 04:00:00 +0000
ROA not after: Wed 20 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.146.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:42:3e:a9:b4:4a:74:c4:1e:35:27:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 16 04:00:00 2022 GMT
Not After : Apr 20 04:00:00 2022 GMT
Subject: CN=536a6e23-303d-435b-a96d-c44deda14bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0a:a2:db:50:af:75:3a:7a:a0:a3:da:63:bc:
8d:be:81:96:4b:8b:e9:6f:19:91:af:ef:e8:20:e7:
52:6e:3a:53:f8:9b:c4:c1:bb:32:e7:f4:ea:47:89:
77:8e:70:e1:2b:1b:f2:0a:26:57:5e:59:8b:78:8b:
61:c0:ff:3e:d7:c2:f4:b2:3e:38:50:f8:2c:20:73:
99:fb:66:d8:ff:89:56:8e:64:eb:85:bd:19:b1:c6:
16:84:7a:4f:ac:19:e1:ac:f3:eb:a9:51:89:3b:4e:
78:5b:fb:32:af:70:72:f0:6a:b6:5f:fa:02:3c:d6:
b6:30:42:a4:a8:77:8c:14:47:02:37:33:ae:d7:f1:
9a:94:73:a9:f0:28:7f:9c:b5:81:5a:e4:97:c3:d7:
fe:eb:5a:70:9b:b6:c1:ab:4d:11:e9:a4:43:78:a0:
f5:43:6f:3d:73:60:5c:64:44:a3:da:11:e1:f8:ae:
90:82:f4:6c:01:ef:0d:7e:17:6d:79:ff:5d:d2:01:
75:a6:4c:4c:b4:d7:8d:44:d5:c8:12:13:c9:89:8d:
97:55:2e:63:9c:3a:43:6a:98:f8:b7:70:7e:be:55:
8e:1e:5d:3e:f6:56:0d:f4:41:3a:f2:2a:65:82:71:
ff:a1:bc:13:10:98:e5:87:d0:44:b6:53:ab:7b:d7:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E0:04:43:93:1B:82:A3:44:F0:C6:12:CE:32:7C:E6:49:F7:CD:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6cb59fe-1de4-3291-a31a-b0d3ef4080be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.146.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:76:87:ea:88:38:74:6c:23:55:f3:bb:4a:4a:1d:36:bc:94:
29:09:5e:e0:aa:3b:33:e4:96:e6:b6:66:b1:dc:4c:f9:a1:58:
df:1b:b1:68:cf:15:11:98:b6:88:fb:4b:28:7a:e5:72:53:ba:
2d:cc:32:a1:0d:83:9f:fd:59:cb:73:b6:45:69:a3:da:23:9f:
81:78:aa:89:4c:25:78:bc:49:a0:f8:d6:38:bf:17:66:bb:4e:
fa:d7:45:da:a5:c8:14:2f:0f:e9:2d:31:68:9b:b3:11:b2:d9:
06:60:65:80:8b:13:d5:12:16:36:1d:d7:06:fe:00:54:eb:56:
b3:8f:14:af:cb:ec:ee:72:04:7a:28:b8:2c:6d:1e:5b:86:ef:
38:3d:7c:ae:2f:0b:89:bb:aa:91:82:2c:74:fd:24:e9:5a:90:
4a:e4:20:41:e8:11:54:64:95:63:4d:bf:54:cb:c7:09:c1:fc:
9f:fc:bc:87:ae:85:37:c5:5c:b5:04:74:ad:3e:e8:3b:fc:19:
50:c3:e3:75:e1:42:3a:af:60:2d:b6:6b:fd:47:30:04:8f:d8:
2b:a4:7f:f9:f4:ee:c3:a7:2b:33:f1:25:92:16:00:fe:08:76:
85:9e:4d:46:54:11:45:e5:0c:f5:95:99:ec:96:8e:3a:de:f6:
ee:2e:83:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:09 2025 by rpki-client