Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b88bd5b2-1eb2-3e6d-adc3-602d9dfbda49.roa
File: b88bd5b2-1eb2-3e6d-adc3-602d9dfbda49.roa (raw, json)
Hash identifier: sEC8PVjj9kx8q5/vNFbMy1lnHLJ7RHPcnYiKGxie79s=
Subject key identifier: A0:9B:FB:9C:B0:CE:D7:46:C9:50:A8:9D:63:51:3D:7E:75:21:2A:1F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EDD4C67C8CE0C20B90C06D780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b88bd5b2-1eb2-3e6d-adc3-602d9dfbda49.roa
Signing time: Wed 10 Aug 2022 12:00:00 +0000
ROA not before: Wed 10 Aug 2022 12:00:00 +0000
ROA not after: Thu 15 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:dd:4c:67:c8:ce:0c:20:b9:0c:06:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 10 12:00:00 2022 GMT
Not After : Sep 15 04:00:00 2022 GMT
Subject: CN=12e1d342-535e-41d4-9d70-77cb7dcdb9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:4a:aa:c2:c5:2b:0c:51:d1:f4:c0:71:a0:
66:31:f7:ad:04:19:93:48:71:c1:bb:85:86:c9:56:
8c:6a:d9:9d:7d:97:52:15:bc:14:6b:d3:b2:36:c8:
2b:e6:22:7c:41:c8:34:20:82:39:63:d3:45:69:5e:
27:dc:c6:be:15:87:7e:5c:5f:00:06:29:20:30:58:
49:b6:79:2c:25:4d:52:21:29:27:cd:a2:3c:c1:44:
1f:d4:39:67:fc:04:25:a7:03:9b:20:d5:85:60:4c:
45:96:97:81:bd:d8:68:93:0f:cc:d7:d3:ac:ce:35:
db:68:a2:a6:ef:4b:af:2e:fa:14:3e:1b:be:2d:7b:
d3:b8:4e:b9:66:60:a5:67:c9:97:90:3e:92:5d:3f:
8f:c8:f2:6a:31:18:8a:ce:c3:bf:c2:59:c0:f1:c0:
70:17:55:1a:da:2d:cd:0e:03:80:82:d8:2f:9e:68:
d3:c4:1c:7d:5c:8a:34:f2:ec:94:7c:6c:1d:f8:06:
5d:0e:24:63:15:f0:29:39:74:e2:93:14:fb:f5:98:
d7:de:e6:cf:3b:f5:3f:b5:59:cb:4c:f4:fa:b5:21:
17:d3:f1:f4:01:fd:db:7c:3d:ce:bb:2f:80:12:b2:
88:20:8a:c8:53:4f:23:9a:10:d1:ec:d4:c1:08:c2:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9B:FB:9C:B0:CE:D7:46:C9:50:A8:9D:63:51:3D:7E:75:21:2A:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b88bd5b2-1eb2-3e6d-adc3-602d9dfbda49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:ea:24:6b:65:a3:8b:65:5c:10:44:20:b5:80:65:e0:97:82:
19:51:bf:c4:71:bd:f5:75:9c:1a:d8:55:88:bc:9c:66:76:b1:
c2:fd:88:a3:b6:74:cf:d5:65:fe:ba:0b:84:ee:a3:c7:be:54:
7f:87:7c:49:be:ea:68:af:e5:93:c0:32:15:ff:8b:6e:1d:f3:
25:3b:be:a5:b0:a1:6e:fb:49:98:ba:e4:43:90:e0:b1:71:79:
f7:e9:d6:25:38:5c:a7:b4:a2:e5:0c:41:a5:fd:a7:f3:aa:66:
8e:92:14:5d:2b:57:cd:7c:51:01:2b:8e:de:65:60:a5:bb:3e:
e5:15:bc:cf:ab:0b:94:23:da:df:cb:6a:e5:c3:03:a3:0a:fe:
14:ad:a9:e3:7d:d9:45:87:65:f3:4e:22:e6:fb:61:e1:9d:af:
1b:70:b3:02:dc:a6:f3:b9:d8:15:31:d6:7d:a1:f6:e2:87:b8:
82:e0:10:ed:48:24:9b:87:1c:53:6b:fd:ff:ae:f9:98:89:54:
76:23:c1:93:dc:1e:cd:8f:95:c7:10:32:50:cf:0d:d6:c2:03:
a2:7d:29:2f:b6:b1:27:26:14:43:ea:5a:a2:87:08:10:10:8f:
26:81:c7:bb:42:e9:e5:f6:a2:b8:be:d7:98:a4:47:ac:50:b1:
95:53:d0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:43 2025 by rpki-client