Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b58d6c7c-4d62-3b75-8e6b-d868ae2690e5.roa
File: b58d6c7c-4d62-3b75-8e6b-d868ae2690e5.roa (raw, json)
Hash identifier: nzi4qC/aE7IX0rc+cobJPzksu9Mg3RR7E4FSuzM+/20=
Subject key identifier: A5:E9:EB:AF:0F:AD:9A:C0:12:86:5A:59:9C:C6:11:70:39:88:D0:0C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584072A6D6D9EAFC29D905D92F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b58d6c7c-4d62-3b75-8e6b-d868ae2690e5.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:72:a6:d6:d9:ea:fc:29:d9:05:d9:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=c1886bd4-ff83-4bb0-ad56-d6572e0c0fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:37:dd:13:ab:0c:22:47:32:26:fd:bd:2e:
5f:d3:9d:37:f2:f7:ed:39:e4:02:1e:28:c5:c9:8e:
0d:bd:ec:c1:35:6a:97:92:f4:0f:85:32:8e:d9:07:
6c:be:28:96:b6:73:19:04:69:0b:83:74:e2:14:b1:
dc:aa:ee:05:ca:5e:f2:7f:61:72:3c:32:20:d8:fd:
5d:7b:f5:5a:54:11:f4:f8:0c:98:cd:64:0d:71:8d:
ad:5e:02:7e:e2:9b:9b:d7:0c:d8:5b:fe:f5:a7:23:
1e:97:88:a2:a1:fe:e2:e2:db:da:1e:5a:b7:fd:66:
60:15:76:5c:11:09:23:c0:85:23:7c:a3:95:5c:d8:
15:b7:0b:0b:46:90:91:c0:dd:c8:13:0b:21:6d:84:
f7:5f:ff:26:a5:58:e3:08:35:85:9c:8b:1c:4c:27:
37:27:9d:02:26:46:9a:b1:2a:1e:2e:cf:49:40:16:
31:7e:44:a7:8a:6b:90:93:3e:1e:fc:6a:0c:f1:9c:
4a:43:5b:9b:8b:3f:2c:d8:63:f0:9f:79:80:3a:4d:
36:55:f3:a6:56:4e:2b:75:09:22:2a:44:9b:74:bd:
e3:6e:2c:bb:f1:1d:f2:c6:e1:e5:92:18:9e:1e:b8:
c9:30:4a:62:84:ed:50:81:cf:a3:33:f1:c9:c6:2e:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E9:EB:AF:0F:AD:9A:C0:12:86:5A:59:9C:C6:11:70:39:88:D0:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b58d6c7c-4d62-3b75-8e6b-d868ae2690e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:4c:af:bf:0c:a5:aa:b0:aa:47:40:be:c1:57:5f:46:1f:d8:
de:ab:46:d7:09:4e:e6:22:4b:16:53:43:ca:cf:54:69:e3:44:
97:26:94:53:cc:66:2e:86:6a:ea:e8:98:a1:a6:dd:36:8e:b3:
21:9f:36:31:9b:c6:db:83:7b:02:93:8c:de:72:36:c7:fa:9f:
47:e1:16:c9:eb:69:be:6b:ac:4e:8b:9e:b3:4e:0c:b3:80:4b:
45:99:b7:b3:24:8a:7d:99:95:42:fa:41:be:fb:c2:7a:e8:57:
59:73:b0:da:f8:ca:2a:8e:be:31:d2:94:a7:70:0f:3a:a3:73:
59:d4:42:13:53:08:42:bb:a9:5c:ee:77:18:45:e8:7a:92:64:
b0:d9:db:af:64:58:71:d1:c3:8f:30:49:75:2d:31:d7:69:12:
9d:67:ee:2e:f4:54:17:ff:2e:8e:fd:23:ba:26:6a:a4:e0:d4:
5c:ad:83:cc:4c:56:28:f6:dc:32:ce:cd:df:c8:ea:da:38:23:
1c:d6:6c:f4:bf:ee:f0:d3:f3:11:24:38:d7:f4:0a:ee:4f:f7:
32:73:47:f2:06:e2:85:4c:5c:21:7c:77:84:e0:9d:ae:70:7c:
01:bb:bf:72:1d:25:b0:c8:96:de:80:6b:d7:5d:cf:8a:2c:2b:
6e:dd:bb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:56 2025 by rpki-client