Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3c0da41-5bcf-3a04-9324-d0029a0ab09d.roa
File: b3c0da41-5bcf-3a04-9324-d0029a0ab09d.roa (raw, json)
Hash identifier: Q+7tkiN6quhxen4m0tvWTDUxzLVFzgwJ5RKxDG9zgNQ=
Subject key identifier: B1:7B:CD:DE:11:84:B8:2A:9C:14:74:E9:BB:62:CA:72:78:F2:EC:B6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DB46A365286597C2B3C9E5980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3c0da41-5bcf-3a04-9324-d0029a0ab09d.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 31 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:6a:36:52:86:59:7c:2b:3c:9e:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : May 31 04:00:00 2022 GMT
Subject: CN=64f635cf-5f83-4ad0-a050-45115baf7634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:20:43:24:c1:59:6e:01:87:f4:4c:17:83:
0f:ec:03:b1:0e:36:92:4b:60:41:c6:e3:7f:38:b5:
9f:23:f8:59:a6:51:54:dc:37:64:a0:92:e9:fc:96:
3e:31:ef:1d:9e:81:86:3c:90:f5:53:37:c0:6e:be:
0a:ec:bd:29:be:ec:eb:7c:fe:0a:9d:05:fb:51:6b:
2e:10:b3:ea:30:7b:76:c1:29:bb:ff:46:dd:fc:b7:
01:e4:aa:e6:ba:06:c6:e1:22:0d:17:2c:32:eb:25:
24:f4:6c:4a:1e:60:34:83:de:90:04:db:79:f3:d7:
63:8b:1d:bc:9b:31:5e:d6:0b:90:25:b3:48:fe:a0:
67:fc:a3:5d:d0:5d:9b:c9:a6:88:d4:89:d2:fa:11:
08:7c:e5:b6:5d:b6:b7:d8:76:88:93:9c:1f:6d:b2:
06:46:52:d7:5d:75:e6:44:4f:49:80:89:d5:04:a3:
46:10:f3:fa:88:53:51:fd:0c:41:ab:6a:6c:4e:03:
41:1a:e5:bd:d7:f7:c5:c6:67:8b:8c:1c:28:61:5b:
02:65:f6:ad:a7:52:0e:96:61:ef:03:55:4e:3b:6e:
c7:87:8f:0f:e1:17:34:e3:cb:56:ce:ab:e1:d9:49:
cd:d0:02:d8:01:e7:05:7a:5a:6c:c9:69:53:4a:8b:
62:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7B:CD:DE:11:84:B8:2A:9C:14:74:E9:BB:62:CA:72:78:F2:EC:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3c0da41-5bcf-3a04-9324-d0029a0ab09d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:82:00:92:aa:30:d0:e0:ec:d7:b2:2f:a7:80:d1:b5:3f:31:
56:45:cf:52:71:9e:83:80:20:60:f6:8a:cf:18:54:55:88:8e:
b3:a1:74:bd:33:be:a2:24:03:11:7e:13:ea:ce:07:fa:b5:36:
b8:e0:2b:99:6b:30:ef:2c:9b:30:d4:69:80:a7:5b:b2:6f:42:
4d:2f:f0:9c:15:48:9d:3c:7a:d6:c3:c0:fe:cd:a8:0d:93:bf:
14:8b:61:44:88:b7:6e:83:c2:d9:b2:8d:42:4a:d6:b7:fb:fb:
32:b1:a0:f8:07:a2:39:06:5f:b7:ff:9c:39:19:bc:90:07:88:
75:93:d2:1c:aa:a6:18:43:7e:d8:c9:cc:17:05:c9:ef:9f:73:
da:26:e1:5c:51:ce:f6:b6:35:85:7b:76:1d:b2:c0:28:a3:d4:
54:00:8a:b9:79:22:67:69:72:3b:5a:d5:82:54:2d:3c:88:fe:
d6:f1:b1:4a:59:b2:b6:2d:ee:da:4e:c0:f6:b5:61:a5:79:56:
50:6e:c7:0b:ab:7a:d9:29:4c:7e:9f:68:13:0b:98:04:e6:0b:
e6:5d:70:27:5f:9b:f5:d8:03:80:e0:3d:f4:ed:7b:5f:d3:54:
cd:cf:bf:5e:2d:96:6b:6a:c7:4f:c6:e3:df:dd:d7:7c:93:e7:
26:d7:ed:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:36 2025 by rpki-client