Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9ce8bcf-3240-3e60-8b75-b38440d7cfc8.roa
File: b9ce8bcf-3240-3e60-8b75-b38440d7cfc8.roa (raw, json)
Hash identifier: KoXkz+RS+Xs2VfzYaU+d6+mvlAgwhiBFWC1PUDvikvc=
Subject key identifier: 84:95:A4:2B:EF:16:28:AB:B8:B3:36:D1:C1:EF:6C:9D:AB:DA:DB:01
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403D58DA2B14E08DF226CE6420
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9ce8bcf-3240-3e60-8b75-b38440d7cfc8.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.99.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3d:58:da:2b:14:e0:8d:f2:26:ce:64:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=b27beaf9-f40c-4db4-a524-0027d5ebd6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:af:5d:5a:38:14:0e:93:47:c4:d8:ab:d4:
3b:3b:d5:bf:44:00:f7:a4:03:ae:ad:b0:41:48:85:
4f:48:d6:14:e9:f9:ec:4f:0c:ac:41:71:00:6a:50:
eb:a9:44:24:97:72:72:52:8b:26:bc:e6:5d:b7:63:
1a:53:74:79:2a:35:e3:73:44:c5:24:e4:b1:cf:86:
e1:e7:5b:b3:47:af:4b:5f:46:80:53:cb:05:5b:86:
20:50:04:1d:a1:c2:83:88:9a:15:90:1f:9e:16:fe:
68:1c:0d:69:c6:ac:9c:63:6c:94:d3:eb:52:39:1b:
1f:67:26:40:fb:e1:46:94:68:d6:38:5e:85:98:e3:
56:b3:75:12:45:94:49:80:49:98:2f:85:b1:ad:df:
28:2d:14:01:56:5c:81:9a:85:9e:2d:73:00:d3:be:
32:cc:43:2b:1e:d9:35:b4:fe:31:be:e0:4a:93:30:
85:f7:0b:cc:65:9e:dd:b0:c9:b4:6b:d6:b6:87:2f:
6d:77:71:0f:c5:78:ed:09:be:66:3e:da:28:a5:36:
8e:82:d8:b7:5a:4b:83:69:3e:5c:f0:35:3f:c4:31:
6b:f6:24:d2:50:47:71:04:9f:ef:af:76:3b:b2:c8:
62:68:76:dd:f2:64:93:3a:bc:dc:4b:e5:a9:78:bd:
7f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:95:A4:2B:EF:16:28:AB:B8:B3:36:D1:C1:EF:6C:9D:AB:DA:DB:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9ce8bcf-3240-3e60-8b75-b38440d7cfc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.99.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:83:17:19:0c:2e:93:e6:7c:fc:88:6f:fa:b5:96:b9:95:52:
71:21:63:cc:13:95:11:6b:b0:2b:d2:30:dc:78:5b:1d:b2:fc:
9b:1b:ac:ca:97:bf:85:b4:4c:31:da:63:ab:7f:1b:d8:68:f6:
d9:33:ab:c8:0d:7a:be:f9:2c:32:db:82:28:aa:12:98:73:ae:
4c:f8:37:0a:87:3a:00:27:ba:94:b6:14:73:07:d4:ae:34:d3:
7c:09:1d:16:aa:89:45:e0:d5:fb:57:90:55:84:cd:b9:f3:70:
f2:8b:e4:a8:c9:62:c0:78:b1:2f:62:0b:ec:48:65:fd:cb:07:
e2:2c:41:36:e9:df:1c:10:79:8f:00:47:b3:f7:bb:bd:e7:2a:
b0:5f:f9:c5:a0:99:bc:48:7b:17:af:cb:71:11:1e:1e:61:6f:
7b:c3:8e:d9:90:c7:72:e3:05:bb:19:ef:11:90:50:65:df:7a:
2e:4c:bd:37:bd:58:12:78:7f:8c:ae:78:b0:e6:1c:43:76:e7:
eb:90:09:38:ee:55:7b:6b:36:a5:87:ca:a1:41:98:51:d0:02:
e8:01:06:c8:12:ba:46:9c:86:ac:4a:73:68:7b:50:26:d7:50:
67:c0:0b:7e:b8:e8:d2:1c:9a:33:88:b3:f4:99:dc:2c:a4:8a:
b8:f2:70:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:20 2025 by rpki-client