Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baf87f17-a96a-32f5-b84a-15dba0934a6c.roa
File: baf87f17-a96a-32f5-b84a-15dba0934a6c.roa (raw, json)
Hash identifier: h2Jlzz5CMpsHgDt1a/RE22fVW3Lh4mx6t2gC8hQXw8w=
Subject key identifier: F4:3B:56:90:34:60:1A:EE:0B:A1:17:A3:15:C0:54:83:90:08:BA:23
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E97FFAA77DCC4246B48DE6800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baf87f17-a96a-32f5-b84a-15dba0934a6c.roa
Signing time: Sat 16 Jul 2022 12:00:00 +0000
ROA not before: Sat 16 Jul 2022 12:00:00 +0000
ROA not after: Sun 21 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:97:ff:aa:77:dc:c4:24:6b:48:de:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 16 12:00:00 2022 GMT
Not After : Aug 21 04:00:00 2022 GMT
Subject: CN=0e8cd107-38a8-4f3b-bf9e-319a346ad122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:f2:cf:9a:3e:6a:93:f7:7d:47:08:60:91:
3d:10:a0:c6:a3:5a:d7:b2:b9:92:26:6b:ba:02:cd:
bf:c6:ce:fe:08:78:4b:67:a0:2e:03:fd:67:dd:6f:
96:9d:86:e7:5b:f0:2a:1c:16:ca:9f:0a:58:11:3f:
b6:8e:2b:ad:ac:16:63:61:8b:b1:01:cf:93:64:6c:
f5:b0:de:e8:a9:76:2a:37:1e:ea:b5:e5:ba:15:0e:
f0:43:cc:7a:12:d1:bd:4b:d5:97:ad:5c:7c:c8:3f:
5d:4d:50:72:37:93:cd:14:20:d5:15:02:24:d9:79:
36:db:ff:ac:b0:b1:0f:18:70:80:5a:3c:75:56:f9:
1d:43:af:72:72:93:b6:83:65:3d:e2:2d:14:ce:ee:
ec:ec:84:fc:ff:25:32:7f:67:03:50:ee:90:83:a5:
d4:9c:61:49:43:f0:94:7a:30:e6:56:1e:0a:fd:ff:
e6:ad:ee:ef:eb:eb:a0:d3:33:8a:2a:45:42:b5:fa:
14:a8:8a:1c:90:68:14:50:a9:05:1a:37:cb:30:c1:
94:e4:ba:2e:69:42:94:9d:08:4b:90:50:f7:74:27:
98:a2:2b:1e:ae:3a:52:e4:7f:d9:e9:15:dc:f1:b5:
f7:76:70:8e:31:ca:10:68:57:d1:92:47:07:49:46:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3B:56:90:34:60:1A:EE:0B:A1:17:A3:15:C0:54:83:90:08:BA:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baf87f17-a96a-32f5-b84a-15dba0934a6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:13:6e:d1:55:41:07:da:ad:b7:e0:fd:25:be:b9:7e:7e:35:
0a:e9:39:1e:56:d7:b0:58:e7:d3:f7:d3:da:6f:c9:99:6b:08:
38:40:a3:31:41:fd:75:61:23:00:02:fa:6a:6c:dd:9f:c6:ac:
16:9c:10:85:c0:85:59:7c:b1:f4:2a:61:30:bf:26:53:1e:a1:
9a:d0:aa:06:9a:be:e9:56:95:33:d5:80:5d:3e:13:c6:fa:cb:
da:fc:f6:61:9e:77:ba:be:cf:c1:ff:96:10:fd:6d:34:ba:b8:
39:55:60:a9:27:ec:6e:50:fe:f5:e1:65:e2:ac:8f:9d:c4:21:
aa:e2:42:81:e3:00:22:2f:eb:02:02:73:76:cd:a3:0a:61:2c:
1b:71:b3:80:eb:9b:fa:95:21:13:27:30:97:c8:89:05:12:79:
23:2a:3e:8d:32:94:cd:26:9b:49:fe:d5:ef:56:95:38:80:41:
8c:00:c6:35:6e:eb:3b:07:e0:b7:a8:ec:b8:a6:e6:21:c0:99:
b6:dc:bf:41:38:a1:40:31:4c:75:b1:7c:77:7a:b2:74:10:83:
5e:42:bf:5d:ad:80:5f:70:07:58:58:49:16:33:8d:e4:d9:cc:
64:ee:6a:df:4b:85:02:49:5f:09:12:60:e5:dc:78:69:51:65:
1c:c6:b6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:59:54 2025 by rpki-client