Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9a7cacb-5957-3a45-a1ec-a5bbfdefb0d3.roa
File: a9a7cacb-5957-3a45-a1ec-a5bbfdefb0d3.roa (raw, json)
Hash identifier: YQ7xuX7LqgKcVj95ENRmCd64kxEeIkXHTIeMCuxSyZQ=
Subject key identifier: 89:CA:24:08:70:99:50:C0:0B:31:84:2B:9F:32:7E:4F:54:27:F0:4C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C79FF2F38AB87DCD6DE92DEA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9a7cacb-5957-3a45-a1ec-a5bbfdefb0d3.roa
Signing time: Tue 04 Jan 2022 05:00:00 +0000
ROA not before: Tue 04 Jan 2022 05:00:00 +0000
ROA not after: Tue 08 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:79:ff:2f:38:ab:87:dc:d6:de:92:de:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 4 05:00:00 2022 GMT
Not After : Feb 8 05:00:00 2022 GMT
Subject: CN=24f3c991-320c-4f0d-8911-3c6e75983786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:ba:12:10:88:3d:cc:7b:5c:40:7b:a6:28:
3c:e9:52:bc:94:1e:d2:1e:99:88:5d:47:6d:52:97:
91:3c:06:16:dc:7f:a4:0e:63:b3:84:fd:4e:88:5c:
7d:be:80:d6:fb:aa:48:24:e7:7e:d2:08:e9:cc:b8:
1d:c5:90:3b:49:d3:80:e0:99:1d:18:6c:5a:48:24:
8e:aa:2c:8a:6a:48:5e:c8:b1:20:ea:c3:8a:7a:e7:
b6:43:3f:83:5c:50:c9:18:2b:56:c2:33:aa:ed:87:
d1:70:3e:46:06:c7:45:bb:cd:b5:f5:fb:21:d7:db:
07:d6:c1:a5:e8:d4:52:d1:8c:50:26:4f:fb:a9:98:
d8:95:45:52:61:bd:27:df:82:2e:c2:8f:3b:00:ba:
88:b4:d1:08:f2:ae:e1:d3:4d:34:7a:8b:bb:e6:7e:
44:09:6a:dc:c4:62:c5:77:70:d6:52:a7:68:30:7e:
e3:6c:fc:c7:f1:1f:ef:b9:25:d1:88:e1:5d:75:12:
11:cb:57:1b:c4:32:a3:6b:a8:48:55:2d:56:60:76:
0c:26:4a:04:15:86:c7:c2:ac:3c:85:3e:d8:59:2b:
40:18:48:1b:30:c7:e6:19:ee:40:aa:e5:ab:d0:85:
ea:12:70:bb:22:04:09:32:89:15:95:b8:67:2f:d7:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CA:24:08:70:99:50:C0:0B:31:84:2B:9F:32:7E:4F:54:27:F0:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9a7cacb-5957-3a45-a1ec-a5bbfdefb0d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:dc:f0:13:cb:69:31:b9:5d:f7:fb:a0:4a:ad:fa:e4:5e:99:
ef:ef:df:77:3b:aa:a0:90:e7:a6:11:23:73:b6:1b:2d:5d:69:
11:34:f1:2d:50:6b:48:f8:07:28:93:d9:81:a9:3e:d9:cf:78:
f8:8a:67:a5:52:65:48:5a:e8:28:50:4d:bb:09:d4:0a:aa:a2:
86:3d:58:54:36:6c:99:9c:df:78:d0:dc:af:22:d2:02:9f:c1:
a9:3e:4c:20:da:58:33:e3:ab:98:cd:5a:f8:06:b5:aa:fa:72:
2d:47:5d:d3:78:b5:8e:39:61:d7:a1:ae:1b:4b:cb:39:98:72:
ee:b2:68:30:f0:02:85:c1:6b:dc:65:8d:7d:00:8f:d9:7a:f2:
49:ec:cd:8f:12:12:c5:e1:87:4b:dc:58:36:0d:be:f3:0b:b7:
04:19:6e:19:9f:7b:27:fd:4d:13:7e:95:b8:19:a5:74:0f:fb:
9b:3a:ae:4d:e0:5e:13:1e:61:e0:dc:c2:b4:72:4e:fe:ae:b0:
40:52:70:52:f0:df:f6:51:84:14:13:ee:65:06:be:c4:23:d2:
b4:67:14:26:6d:98:a3:c0:ed:9b:3f:b8:0c:5e:c8:09:50:2b:
db:ed:38:e0:3d:3c:ab:5e:63:33:1c:c6:b5:9d:6f:5a:f6:fe:
3a:24:d8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:04 2025 by rpki-client