Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab5efdc9-b5da-3caa-a9c8-2b6fc92e4a3d.roa
File: ab5efdc9-b5da-3caa-a9c8-2b6fc92e4a3d.roa (raw, json)
Hash identifier: ARKWy06tbzrrwxU0x9xzX6Gg3a5h8V5oCVLP4+mk/Bw=
Subject key identifier: 3E:F2:5B:5D:A9:88:E2:F2:E5:B0:1B:E4:89:BB:26:D8:78:F7:41:CE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC9498B3ED3547A087D2ABB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab5efdc9-b5da-3caa-a9c8-2b6fc92e4a3d.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c9:49:8b:3e:d3:54:7a:08:7d:2a:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=dce32980-6efe-4f27-8061-5a33dc7f5bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:39:a8:91:d0:fe:ee:8e:d0:5f:b5:18:91:31:
d9:1b:70:4e:8a:68:d4:fa:f3:c0:d8:25:05:af:70:
13:1f:6b:e9:d2:8d:81:cf:bf:3a:25:85:15:27:46:
f6:54:90:30:a5:3c:66:4b:6a:c0:5c:c1:31:bd:37:
98:6a:9d:b6:85:21:37:b5:70:b2:b3:ee:24:cf:93:
2a:e0:5c:bd:c1:67:53:a3:1e:fa:39:5a:c7:93:a9:
d4:50:7b:a7:b9:ad:28:4a:0b:f6:2b:8c:68:4d:b9:
d7:8a:f2:f3:62:20:18:6d:5b:e4:46:46:60:04:15:
ca:36:6a:7d:e9:d6:47:e5:3d:75:94:33:21:5a:54:
97:c9:72:2c:f8:7f:0b:ab:5c:b4:e6:17:90:f9:51:
44:53:a0:7c:48:8c:ca:c4:86:ae:fc:e9:94:6d:b1:
4e:07:2e:3a:44:d3:f4:dc:50:13:91:0b:81:12:51:
83:cb:ed:75:18:72:95:f8:1e:30:99:e1:4f:0f:4a:
4f:0e:ba:1b:88:e8:8a:30:76:92:b8:e5:17:13:e5:
c7:c7:11:22:26:95:94:85:ab:1f:57:54:03:94:5f:
a7:90:b5:2c:a1:16:74:a4:f9:65:a3:46:c4:12:a2:
ac:89:6f:7e:9a:4f:a9:b9:61:ad:9a:c2:b9:74:64:
0b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F2:5B:5D:A9:88:E2:F2:E5:B0:1B:E4:89:BB:26:D8:78:F7:41:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab5efdc9-b5da-3caa-a9c8-2b6fc92e4a3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:ff:d3:5c:bf:50:b4:55:24:15:3f:e7:45:72:2a:f1:6d:44:
40:d7:e7:22:89:f2:33:20:64:17:6a:02:b7:df:e6:65:de:43:
13:6a:18:f1:75:89:91:f0:a8:fb:7f:80:45:bb:39:24:f4:6e:
75:4b:34:0f:72:9e:a5:c8:e5:d7:e9:11:32:87:57:9d:b7:0b:
3a:39:c3:d8:28:83:00:18:63:00:d5:37:51:04:7b:ba:0b:37:
0f:0e:08:6b:b4:f3:4b:97:e4:8f:6c:81:6b:39:0b:36:c3:fd:
7c:c5:89:e3:63:ef:f3:52:9d:b0:28:2a:1b:fc:6c:56:a9:d0:
47:b9:60:32:84:fa:ea:82:02:86:c9:75:ef:88:5e:ce:da:c3:
87:22:51:94:34:c6:06:c8:a8:9c:a7:51:18:57:79:9c:06:72:
f4:ee:d6:f1:d4:d2:d7:f4:ca:74:a9:b9:ee:7d:03:7f:16:09:
50:03:f0:31:92:05:a3:98:1f:dd:e5:8d:d0:8f:07:f4:1e:2c:
4c:80:72:da:5e:85:e8:09:bf:0d:b9:64:30:c0:47:e2:57:f6:
38:b5:b5:53:6b:91:69:07:e8:0e:6f:e5:c5:73:a2:f6:65:7e:
10:d1:f4:da:da:9b:6b:b9:e2:d7:8b:23:5a:e1:26:80:eb:42:
26:89:fe:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:58:33 2025 by rpki-client