Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cefa621d-3393-3fa1-8ada-f085234ae658.roa
File: cefa621d-3393-3fa1-8ada-f085234ae658.roa (raw, json)
Hash identifier: yiHxf4pzFEPN7QyPx7uSwUJxGwZPzqEUb8Pjme9MxfQ=
Subject key identifier: F9:98:1D:B7:4C:0D:45:E9:D3:7A:F2:E0:AF:0E:59:6F:84:1A:AB:BE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D7DA814C22BF275A2064B1DD8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cefa621d-3393-3fa1-8ada-f085234ae658.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Thu 12 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.119.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:a8:14:c2:2b:f2:75:a2:06:4b:1d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : May 12 04:00:00 2022 GMT
Subject: CN=cc8fa437-cf81-48b6-ba90-df1bacac21fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5c:ad:8f:10:52:43:4d:d3:84:b8:e9:d2:d8:
0c:9d:df:e8:80:9c:f5:39:52:42:d5:20:52:59:6c:
41:e6:cf:d8:5d:9b:54:7d:b6:54:b3:bd:c6:dd:88:
b4:d0:60:16:8d:67:89:d4:1e:ea:86:ae:5b:63:a3:
70:d1:e6:ea:0e:4e:70:45:2e:97:91:83:b3:a7:15:
2f:79:32:90:d1:92:03:82:78:39:53:63:f7:37:f0:
60:8b:2a:3c:62:f3:43:9c:47:6b:88:fa:59:54:96:
f6:1a:e6:e4:b7:09:35:3a:a8:29:7e:a0:d3:af:8f:
de:05:90:25:40:9f:91:75:b5:85:f8:8e:e1:f2:d3:
f2:21:99:fe:82:fa:9b:ff:af:a3:6d:22:97:7b:e5:
27:c0:27:78:ca:21:42:a0:70:12:74:c5:99:42:3a:
72:47:68:ad:8c:2f:00:1d:1d:2a:3e:56:81:37:2d:
fd:a2:90:58:9c:06:4a:81:00:c4:1c:48:fe:5b:3a:
3a:0b:80:54:3d:59:de:49:1b:1d:31:84:59:cd:ab:
60:22:1a:3f:be:70:fe:10:fb:f9:af:23:a7:49:2e:
e1:f8:eb:4a:c7:35:82:be:93:28:7d:bc:0a:ca:f7:
2f:29:52:be:39:bd:a4:d3:98:3e:8b:aa:23:82:6c:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:98:1D:B7:4C:0D:45:E9:D3:7A:F2:E0:AF:0E:59:6F:84:1A:AB:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cefa621d-3393-3fa1-8ada-f085234ae658.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.119.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:6c:dd:53:87:49:29:95:25:73:06:e2:e0:8e:49:52:68:30:
7a:11:f3:cf:58:9b:23:ac:a3:7c:be:91:4f:9a:cb:62:18:e1:
ea:11:03:ba:03:d3:9d:d5:cc:9b:16:eb:db:c4:c9:20:cf:b6:
f3:5a:66:3c:40:9b:4f:cc:7d:5f:ca:b4:6b:a7:67:8c:f0:d7:
6f:40:ad:11:4e:37:15:fa:a8:bc:0e:8a:83:af:87:d1:12:2c:
58:48:22:f7:ae:5b:c0:5c:c1:20:31:d0:a4:a1:a2:ff:fe:ee:
be:d7:1c:5a:fe:02:3c:b2:00:c8:1f:1e:02:c9:05:bb:41:13:
fb:92:67:b8:85:6b:cd:9b:66:e1:5d:35:95:6f:e5:f7:4d:f0:
29:18:16:91:23:da:c4:19:62:bf:89:79:38:cf:2b:0e:6f:c0:
6c:cb:21:d8:a3:ab:a0:d2:6a:65:d7:43:d9:eb:80:c1:db:fc:
09:f3:67:dd:20:50:7d:eb:6a:4e:10:da:cf:7d:66:6a:46:3d:
cc:2c:ef:62:44:a0:e5:72:af:c8:47:97:45:b8:0d:09:9e:d2:
04:1c:a5:5e:f6:db:f4:54:b6:53:98:2a:63:8d:d4:14:11:bb:
98:70:09:df:93:8c:9a:f1:b0:cd:49:c1:d2:cd:80:d9:5b:91:
94:c6:e3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:36 2025 by rpki-client