Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7d8abc9-b79a-30e8-bae7-ff4e19d153be.roa
File: a7d8abc9-b79a-30e8-bae7-ff4e19d153be.roa (raw, json)
Hash identifier: f+HRVpdZTqyd8ctzKqeqr7fOwirr5BZZD2wvH42SyGs=
Subject key identifier: 1A:40:16:AF:98:D4:2D:ED:FE:75:91:5C:03:B0:AA:5A:15:B9:D6:2B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F55F42BE6EC0FB029A1DBD600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7d8abc9-b79a-30e8-bae7-ff4e19d153be.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.124.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:55:f4:2b:e6:ec:0f:b0:29:a1:db:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=67a8e5f6-9a59-466c-ba56-64889d59a295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:45:de:a1:c4:bb:24:de:0e:2a:25:ca:ed:e0:
41:01:05:b6:22:e8:59:44:b2:e8:ab:c4:d8:2c:fc:
e4:06:9e:19:5c:c3:0d:5a:a0:a6:76:d1:8c:6d:fa:
61:06:46:16:1e:d2:52:47:7e:87:61:58:51:b6:c9:
b3:9e:dd:e2:e4:64:77:80:0a:cd:bb:cb:54:41:cf:
41:a0:89:e0:da:cd:e8:dc:a2:68:48:9e:76:c4:fb:
c9:51:f7:44:15:fa:1c:e5:6d:d7:ac:94:df:f3:40:
d0:1f:c4:61:c8:8a:67:a7:56:0b:c1:b6:46:bd:d7:
41:b5:83:29:80:ac:bb:1d:bf:94:07:34:de:62:59:
22:8b:56:09:bb:86:bc:3d:78:a6:35:c1:e3:38:75:
51:e2:f0:e1:fd:88:f0:d1:58:23:d1:3f:75:0b:5d:
5d:1c:ed:9c:97:6e:a4:c8:24:cc:55:17:3c:29:a3:
06:45:e5:3c:a4:51:36:cb:71:1c:74:b4:32:42:10:
c8:87:a9:b1:cf:8b:86:36:b9:83:99:7c:bc:8a:cc:
78:34:a0:cb:bf:e2:9b:78:a0:f6:6b:92:5d:55:e2:
5a:30:43:e1:4a:af:75:fd:f1:e8:46:34:57:8a:fe:
5b:93:7d:24:db:3e:b2:49:fb:62:cf:2f:14:66:5f:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:40:16:AF:98:D4:2D:ED:FE:75:91:5C:03:B0:AA:5A:15:B9:D6:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7d8abc9-b79a-30e8-bae7-ff4e19d153be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.124.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:1c:78:bf:fb:34:3d:4d:36:cc:8a:af:e4:1c:85:b7:d2:45:
3c:31:e8:83:fe:79:bc:fc:ad:9c:3c:25:82:2e:c4:89:5d:64:
87:a4:a3:e7:36:26:a8:37:d4:e0:d8:0e:bd:48:da:84:20:cb:
ff:ce:27:ed:96:19:03:70:89:dc:fb:39:87:56:17:98:79:0c:
3c:11:80:05:3a:30:ed:fc:ff:0c:66:13:ee:dc:ce:6d:30:ec:
0c:e7:bc:5f:fb:ad:2d:79:62:68:af:c7:93:b6:68:f7:09:46:
88:32:e7:ee:3c:6a:20:10:48:f0:da:6a:7d:80:3d:c0:14:8e:
b8:34:56:6f:0b:bb:46:9b:b1:77:50:66:d0:36:5c:92:46:69:
80:c0:37:0a:a8:ba:c4:82:28:78:81:05:4e:4e:c2:da:07:28:
73:c7:32:27:c1:4d:0f:dd:69:af:46:9d:89:a1:b7:7a:90:05:
f3:cd:8e:e6:d5:eb:f3:37:3d:c3:5d:1f:1c:65:6e:8e:f1:75:
b0:4c:bf:be:50:b6:fb:b6:9e:b0:8a:4f:53:a4:d4:6b:95:c7:
ad:6b:7c:00:5a:25:6e:3f:95:3c:41:44:85:3a:c0:d6:8e:eb:
aa:77:50:30:f4:a5:9c:a7:39:7e:cd:ce:9d:7d:8e:2a:7a:17:
ef:da:ea:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:55 2025 by rpki-client