Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfe50460-dd44-3978-87fc-76609a602a17.roa
File: bfe50460-dd44-3978-87fc-76609a602a17.roa (raw, json)
Hash identifier: dqMGUXSpHLug0/8WKKKui6iGqLDDCX46WjqPSrrkkQA=
Subject key identifier: C4:3A:E6:F3:C4:4D:0F:DF:B2:94:EA:E3:72:1C:30:08:84:22:7E:63
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CEF29D415CB52527B78A6BF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfe50460-dd44-3978-87fc-76609a602a17.roa
Signing time: Tue 15 Feb 2022 05:00:00 +0000
ROA not before: Tue 15 Feb 2022 05:00:00 +0000
ROA not after: Tue 22 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.120.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ef:29:d4:15:cb:52:52:7b:78:a6:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 15 05:00:00 2022 GMT
Not After : Mar 22 04:00:00 2022 GMT
Subject: CN=b3cf2604-96be-407d-9745-acb8b75460bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bb:f8:bc:f8:8e:bc:f8:e0:c5:86:ba:51:99:
26:fe:2c:e0:74:89:34:78:59:47:d9:bd:b8:5c:5c:
4e:68:be:51:db:fe:11:dc:37:3d:c9:98:c2:b4:5b:
16:14:24:b9:28:b0:cc:03:b8:14:30:fd:fb:bd:11:
f8:ea:7b:cf:1d:19:54:1d:f0:b0:ce:fb:b9:72:20:
8d:38:9f:06:3b:7f:80:f9:dd:00:84:6c:4d:d3:ea:
5a:ba:82:8f:06:bc:7f:5f:f5:c2:1a:ce:35:07:75:
f9:67:3b:04:ad:54:22:4e:87:0f:e2:bf:a8:fd:3a:
f0:ff:59:e7:e8:cd:a7:d1:5e:44:1f:88:32:01:7c:
ed:92:4f:94:56:b0:81:e2:8d:69:96:40:1b:9f:c5:
f1:0d:b5:e7:7d:f1:7e:c6:5c:64:1c:2d:13:6f:b7:
f6:91:05:4c:c3:14:c8:56:d2:8c:cf:1c:3b:a0:75:
ae:cd:f4:af:71:70:bc:29:4d:75:d4:d5:48:53:42:
a7:b2:8a:27:09:c1:2e:fa:ac:8a:5f:b9:c2:47:66:
2d:04:49:e8:62:65:6c:6d:17:62:72:12:86:68:de:
10:14:42:85:0f:a4:db:2a:7b:e3:99:c8:72:2c:08:
44:bf:5b:90:6d:85:c3:b9:9e:62:0c:2d:d0:0c:83:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3A:E6:F3:C4:4D:0F:DF:B2:94:EA:E3:72:1C:30:08:84:22:7E:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfe50460-dd44-3978-87fc-76609a602a17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.120.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:1f:e2:b8:4b:0f:35:74:46:ca:c4:ee:2e:0b:38:46:ab:4c:
98:3a:73:48:fe:28:b1:a0:7d:79:b3:76:44:9e:7f:41:77:9a:
b7:d8:f0:c9:0e:bf:d3:cc:fe:8f:d3:3f:6c:53:61:ea:5e:0d:
f6:8c:0d:3e:b4:68:df:29:21:bb:3b:ee:a5:a6:11:08:e0:b9:
f8:c5:db:2d:24:87:a6:89:53:1c:2d:43:79:22:fb:c0:07:a1:
41:a3:46:f2:d7:9b:aa:b1:ec:9c:3f:ea:29:f8:c2:07:58:8e:
98:8f:ba:1d:e8:d5:0f:b1:ec:bb:12:d7:54:0f:62:ea:9c:d7:
36:2d:39:f8:23:c2:04:a6:99:c4:33:a3:21:dd:2a:52:33:5a:
cd:c5:81:63:15:68:dd:43:89:1a:d6:10:39:94:86:e0:0f:63:
9d:80:3c:13:42:01:6d:cf:38:59:56:b0:8f:05:c1:f0:cc:38:
d8:45:f0:91:1b:16:6e:cb:69:3f:ff:83:41:0a:c4:3f:ea:6d:
0d:f8:44:60:9e:70:6f:1b:f3:f7:aa:fa:28:36:df:d1:46:ea:
83:25:76:20:eb:b8:6b:a0:94:91:70:10:60:cd:76:26:af:50:
50:94:76:6b:80:76:b0:25:da:4b:9c:54:e8:2e:ee:a6:1e:90:
e5:6f:5a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:32 2025 by rpki-client