Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7a6c8d3-3288-3fa7-a71c-a094d887a432.roa
File: a7a6c8d3-3288-3fa7-a71c-a094d887a432.roa (raw, json)
Hash identifier: sBv/J2hwunJqCWcFXcy4YlOAPXMN/fyLcBTBYHF9hrs=
Subject key identifier: 99:00:3A:B7:45:E0:4F:BA:0F:9C:68:0D:97:9A:6E:8E:16:4C:A8:6E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E49C594394A80BF78B4ED5C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7a6c8d3-3288-3fa7-a71c-a094d887a432.roa
Signing time: Sat 18 Jun 2022 12:00:00 +0000
ROA not before: Sat 18 Jun 2022 12:00:00 +0000
ROA not after: Sun 24 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:49:c5:94:39:4a:80:bf:78:b4:ed:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 18 12:00:00 2022 GMT
Not After : Jul 24 04:00:00 2022 GMT
Subject: CN=769c8084-d9f3-4d6c-8787-1494f76e9611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5b:3a:da:b8:00:6b:96:aa:8c:ca:5a:61:dc:
a2:3f:dd:7a:40:b0:82:ff:d9:25:72:aa:86:1c:e0:
a2:d2:6b:a2:96:0d:df:93:12:4f:b5:99:19:1a:8f:
4c:16:5b:32:79:a3:c1:f6:21:96:83:7c:12:7c:b2:
82:80:72:68:60:22:0b:73:2b:d4:c3:97:ff:6e:81:
12:ca:c3:4f:c1:b4:fc:1a:2b:65:57:98:23:63:11:
c9:8f:be:96:3c:4c:3b:a8:e7:0e:d4:42:34:88:aa:
9e:b4:f0:a3:f8:d1:d9:07:bd:0e:21:7a:76:27:fe:
36:00:ff:94:cf:1d:ca:d9:62:63:fd:83:b3:48:94:
76:d4:86:99:32:56:e2:a5:6b:06:c3:e8:38:e4:46:
86:af:97:dd:3a:13:35:7d:e2:8e:24:95:eb:9a:76:
d8:1e:c2:b5:77:1d:43:e2:85:04:b3:91:1e:64:b9:
78:8f:0f:d8:8e:50:3c:b8:4c:17:77:f3:82:41:c8:
8a:e1:20:4a:b2:19:63:97:b7:7f:11:54:73:85:94:
b5:a1:cf:ce:99:0c:e4:42:f7:b3:ce:d7:b6:31:38:
46:e0:3e:38:9d:42:2e:dd:f4:25:5e:92:a8:fb:5b:
4c:14:6c:e8:f6:89:34:9a:52:6e:58:1a:a5:ba:f9:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:00:3A:B7:45:E0:4F:BA:0F:9C:68:0D:97:9A:6E:8E:16:4C:A8:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7a6c8d3-3288-3fa7-a71c-a094d887a432.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:b2:32:ad:89:6f:33:ce:06:04:c0:74:1d:2b:0a:f5:2c:41:
c9:59:7b:ea:27:24:58:33:e6:e6:5d:4c:a6:2b:86:02:7c:0d:
86:38:44:7e:2f:8e:e6:44:f6:c8:23:5e:7c:5a:54:27:30:bc:
c0:a7:51:55:8e:46:af:84:46:a2:a9:06:fc:50:12:79:f4:7c:
10:e8:ed:1d:16:37:1a:01:e4:ce:f0:f8:e8:47:b3:05:4c:33:
3b:47:0a:96:0d:e2:38:35:1a:93:e8:3a:7d:6d:8a:47:d2:64:
95:da:0e:72:6b:de:c3:90:61:ea:43:2a:09:d4:2a:a3:c9:5d:
d6:b7:e2:71:cd:75:96:f2:ca:97:fb:ff:34:99:3f:d4:32:b9:
3d:a0:c7:15:7c:be:5a:fd:fe:d0:9f:7a:96:df:3d:d6:10:55:
c1:24:53:3b:4c:42:5e:c0:b6:9c:f6:82:a5:6d:ae:36:08:23:
92:32:4b:98:74:f2:0f:83:10:a3:1f:b6:e0:60:9f:b1:61:67:
d9:ab:1d:d5:08:2d:b1:06:fb:c8:db:e3:b3:46:00:64:92:cd:
cb:f3:ef:84:2b:bd:e3:31:86:78:e5:51:2f:41:58:7f:70:67:
3d:fc:d1:df:73:6d:15:5f:16:bd:60:a5:ba:b0:bb:5d:6b:eb:
98:35:81:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:40 2025 by rpki-client