Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af21a29a-8ac5-3271-9121-809e06dda70b.roa
File: af21a29a-8ac5-3271-9121-809e06dda70b.roa (raw, json)
Hash identifier: 5zp4QgGjAic0emPmdIFyq4WE7HjwAary65bHy2UoVAk=
Subject key identifier: 13:F6:F0:ED:DC:0C:E4:CD:95:4D:4A:35:29:A0:AE:86:20:93:78:8A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0B1BB17E5D0871D281D0A3C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af21a29a-8ac5-3271-9121-809e06dda70b.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.189.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:1b:b1:7e:5d:08:71:d2:81:d0:a3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=9a7161d2-4b46-4b26-a150-3f82706c39ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:99:2e:8f:e5:f3:47:35:0b:76:fa:96:c7:f2:
53:87:ad:5d:2a:16:11:59:b2:df:72:e3:96:b3:9b:
79:5f:be:fe:51:97:ff:2f:5a:9b:75:af:fb:d1:ef:
33:e7:c0:06:1e:fb:17:fd:89:bd:b1:fe:cc:41:e0:
21:1f:ea:c7:3a:20:50:de:36:3a:bb:9f:79:82:84:
79:dd:c2:b1:7d:3b:ae:0a:40:64:7c:ad:74:ec:17:
24:c2:50:96:f4:96:09:ad:2d:d8:09:7d:82:fa:05:
7e:6d:16:92:dd:10:50:85:5b:6a:f4:74:07:6d:69:
67:7e:16:db:11:09:6f:6d:aa:e3:3a:ab:5f:78:73:
9e:3b:e2:fd:18:17:4c:4f:85:9f:2b:12:f6:79:12:
66:62:34:65:0a:9a:98:e1:58:10:6f:bd:99:17:e1:
92:81:20:7f:78:31:2b:a5:4a:c7:6b:ce:fd:e7:37:
14:8a:18:7b:b7:07:f8:2c:48:f8:24:42:3e:e8:2a:
1d:c2:08:65:9e:03:ba:8f:56:8b:bc:61:15:3e:65:
30:32:c9:b1:a8:09:b7:10:db:f9:f0:36:03:35:2c:
f4:d3:fe:e3:f5:45:8c:50:58:e0:aa:eb:db:c4:f5:
0c:c9:bd:8b:9b:50:e7:d6:cc:77:f6:79:05:ae:94:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F6:F0:ED:DC:0C:E4:CD:95:4D:4A:35:29:A0:AE:86:20:93:78:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af21a29a-8ac5-3271-9121-809e06dda70b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.189.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:5a:7d:47:98:8e:4a:44:1a:ae:f0:ef:7c:49:c1:6d:57:47:
d8:6d:c2:65:f2:f3:11:29:8f:29:e4:49:21:95:6b:80:dd:94:
68:62:92:d9:6d:5d:11:ff:06:bb:51:f1:a8:b9:4f:e9:76:4e:
0d:39:77:da:bf:ce:96:d4:28:a1:c4:2d:4a:a3:37:f9:e4:9a:
2a:de:6d:f1:0c:e6:5a:9a:0b:d5:74:fe:6c:79:58:2a:00:45:
ac:e6:b7:02:e8:35:e5:6a:1a:85:6e:98:75:26:fe:01:3b:05:
3a:50:ae:c2:a4:94:cc:21:54:c3:27:91:78:28:32:1b:03:b9:
ba:17:81:df:38:4c:75:42:d4:59:ee:89:d6:28:60:14:e1:81:
12:e6:16:49:c6:a4:6b:87:bb:9f:d9:ec:b0:e7:6d:b8:61:20:
0d:59:92:bd:6c:4d:25:ef:aa:79:6b:10:06:43:95:cc:f1:5f:
f5:6a:2a:42:20:61:01:d1:e8:e7:af:df:6b:f9:e3:86:15:9f:
09:3a:50:31:c7:63:7b:a2:ac:99:03:58:c6:22:d8:3d:38:aa:
04:76:c6:f6:dd:6e:6c:ef:39:5b:0b:40:11:cf:8e:8b:c7:e0:
09:64:a5:b6:1c:8d:62:49:59:58:bc:9d:d4:de:43:eb:b6:cc:
56:f1:20:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:53 2025 by rpki-client