Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca05cf73-1c5e-3340-b213-a488c2aac88d.roa
File: ca05cf73-1c5e-3340-b213-a488c2aac88d.roa (raw, json)
Hash identifier: 7Im7e/5O7zKe6Iuw+maGf8ouyxg+DymHPOOlchrOfGg=
Subject key identifier: FA:E4:88:C8:9D:59:4B:DE:50:85:B2:1D:72:79:0A:64:94:50:92:30
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA5A230E5447928383B3294C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca05cf73-1c5e-3340-b213-a488c2aac88d.roa
Signing time: Fri 21 Oct 2022 16:30:08 +0000
ROA not before: Fri 21 Oct 2022 16:30:08 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.77.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a5:a2:30:e5:44:79:28:38:3b:32:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 21 16:30:08 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=b921a342-df3f-4a08-adfd-820830bbadf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:a3:d9:f7:eb:a5:c5:a6:9b:fd:82:ef:8f:
9c:28:07:e7:64:5b:ae:89:21:7d:3e:b4:71:5c:eb:
d7:07:7f:16:9c:09:86:4c:1d:1c:85:70:36:6a:dc:
75:99:e0:9a:98:6c:e6:52:e5:bc:9f:b8:dc:4d:8a:
0e:d3:38:62:91:a3:7b:52:fc:1f:40:63:bb:fc:46:
e5:ad:ee:75:ad:83:e3:a1:55:65:87:e5:83:28:ce:
47:05:67:15:e5:6a:4a:fd:82:5d:e1:11:8e:f2:3b:
f0:c3:e4:fa:64:8f:01:27:48:e4:22:40:01:11:53:
72:9c:98:d6:c5:d2:7e:a2:a8:41:20:6e:25:1c:a9:
35:20:07:1d:a6:ed:75:22:fa:14:45:09:4c:f4:11:
c7:3e:3e:d2:ae:5e:42:d7:e8:30:a3:0a:07:51:68:
d2:b3:a3:66:56:0a:44:b6:42:b2:ac:c0:b0:b3:3a:
d0:c5:f8:b6:f9:e5:b8:b4:3d:44:22:71:60:0d:fd:
6e:77:c0:12:44:ad:6f:aa:72:66:5b:0e:5e:03:f8:
4c:c4:76:e7:9b:38:53:0e:3f:f3:cf:b3:b7:2e:19:
ab:d9:09:e9:17:b4:43:f6:3d:c4:71:c2:d0:e3:93:
3f:02:9b:70:c3:b0:10:1b:91:56:56:ce:f8:25:8e:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E4:88:C8:9D:59:4B:DE:50:85:B2:1D:72:79:0A:64:94:50:92:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca05cf73-1c5e-3340-b213-a488c2aac88d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.77.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:c9:7c:93:4d:ab:98:88:a2:e2:d8:13:5f:e6:82:ed:44:88:
1a:56:ad:e9:66:29:08:02:60:c3:a9:87:4c:e6:69:50:1e:68:
a2:5e:63:31:af:91:95:51:4f:d2:73:c5:50:16:c2:13:92:d9:
7a:ab:6a:62:3f:1f:a7:80:56:4f:e5:f6:da:3b:0a:9b:80:33:
06:74:36:14:85:6e:6d:69:eb:3c:4d:9a:26:cf:b2:02:9f:4d:
59:c2:a3:90:14:f2:6f:e6:5e:11:e9:84:c9:a7:09:a7:b8:09:
d3:da:55:81:9f:fa:09:51:c1:7d:87:4e:97:ab:9f:27:f8:a4:
8e:38:87:f1:6d:8f:f3:ac:54:5f:6f:59:90:57:d7:ca:53:4a:
0c:1f:91:7f:dc:b4:df:20:0e:8d:9c:f4:57:ea:aa:d3:03:28:
7f:78:f7:8f:2d:e3:4d:ad:b9:8f:be:09:9e:12:6e:e0:ae:47:
9d:b4:a9:a0:92:29:be:9f:ec:eb:61:48:71:06:a0:34:22:23:
c3:37:4e:58:91:6e:ad:36:21:3e:a4:4b:e3:91:9f:f1:9c:c9:
10:d1:dc:ef:bf:3c:f6:a4:17:65:a8:36:57:69:9f:ce:45:aa:
3d:59:9a:1c:eb:91:80:fa:36:97:0b:7a:c0:4a:70:49:a0:08:
2c:cc:17:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:22 2025 by rpki-client