Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afc82d67-0ebf-3d5c-bd3e-f2eb7a5014e9.roa
File: afc82d67-0ebf-3d5c-bd3e-f2eb7a5014e9.roa (raw, json)
Hash identifier: 4HuJNrWQ+RUXNyH8u7d1vkY/0o5Wo1D0UaMSkblmMfg=
Subject key identifier: 23:80:4C:1E:1C:E7:28:EA:D4:A9:1D:BA:DE:7B:D2:EA:1D:56:EA:F1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840AAC71B0686F845832777F740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afc82d67-0ebf-3d5c-bd3e-f2eb7a5014e9.roa
Signing time: Sun 22 Jan 2023 12:00:00 +0000
ROA not before: Sun 22 Jan 2023 12:00:00 +0000
ROA not after: Mon 27 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.52.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:aa:c7:1b:06:86:f8:45:83:27:77:f7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 22 12:00:00 2023 GMT
Not After : Feb 27 05:00:00 2023 GMT
Subject: CN=763c1b0b-265b-43b1-b0f6-59a604822a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:fe:6f:9c:9d:cd:9d:da:04:a7:9a:20:f1:
de:9a:e9:63:06:67:a0:6b:33:37:ab:41:dd:a5:69:
c3:4b:99:6e:e5:e7:9f:75:d4:1e:18:0c:42:26:4c:
d5:76:8e:12:7a:74:08:82:be:a9:39:16:38:02:95:
75:a0:65:4e:94:79:5c:92:c7:b4:4d:74:a6:57:6f:
7e:1f:d9:96:d7:0a:31:2c:4e:cd:7c:f8:53:26:e8:
c5:c5:e5:a6:74:6b:6c:4f:64:03:63:de:fc:c8:f4:
6c:d3:20:fc:e4:86:0e:db:9c:28:50:ff:a5:4d:9a:
a2:64:0c:7e:48:52:a7:90:5f:d8:00:2b:48:ad:f1:
9b:ac:63:1b:cf:ed:2f:ae:3c:db:61:fb:cd:d3:99:
0d:e8:88:af:1f:25:a8:f8:d0:b0:9c:17:bc:64:ae:
cc:97:85:07:f7:ed:54:02:a0:ec:76:0a:26:1d:ff:
18:00:47:9c:a5:c7:33:1b:17:d4:69:4d:d7:2d:2b:
9e:85:f5:41:9e:a2:fa:d5:11:17:8f:87:35:ee:32:
5c:fd:fc:e7:a6:76:a3:4a:2c:9f:a5:73:de:be:4d:
0c:22:8f:91:1b:08:a3:ff:4d:29:91:d8:e1:5a:0d:
f5:63:d4:81:90:d5:98:85:73:af:4f:44:56:31:f2:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:80:4C:1E:1C:E7:28:EA:D4:A9:1D:BA:DE:7B:D2:EA:1D:56:EA:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afc82d67-0ebf-3d5c-bd3e-f2eb7a5014e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.52.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:30:ed:a2:23:3f:39:3f:5e:fb:aa:3e:c5:ef:3a:c8:b4:f0:
59:a2:b0:8d:73:19:43:b4:28:60:1e:ee:c2:60:54:0d:21:ca:
1e:df:1a:c7:d9:cf:53:8f:d0:80:83:cf:b2:26:20:71:c1:a6:
2a:ef:55:ef:b8:ba:83:c9:ad:0f:87:ee:b1:f2:f4:e9:f4:12:
b9:a0:ab:b1:0b:b9:bc:b3:19:f2:25:dc:1c:c2:80:ff:ee:9b:
69:9e:48:05:f7:36:d5:33:88:2f:c7:04:0c:e1:62:48:38:bd:
9a:6b:c5:2d:6b:e3:ad:7b:58:51:44:cc:ff:41:20:58:85:03:
dd:7e:70:75:56:b3:4f:43:f0:b3:b4:37:96:b6:2e:68:9a:16:
d6:f4:66:fa:99:90:5a:ec:2c:3e:c9:be:03:20:bf:80:c6:b9:
8d:ff:a7:90:8b:ae:07:11:aa:59:3c:b2:69:15:ba:b6:e3:62:
ec:2b:f6:79:0e:1a:f3:6a:2e:8d:43:1c:d0:66:4a:38:0a:a0:
57:5a:6e:60:12:58:f8:26:e8:7a:9c:34:de:1b:b0:a8:68:d7:
07:19:ed:b8:68:9f:a4:ec:a1:c2:17:3a:0f:95:90:e4:4c:b2:
39:01:4e:2b:38:4d:bb:13:49:9f:ce:ab:98:b0:e4:49:9e:39:
24:c8:a8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:09:17 2025 by rpki-client