Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d31be1f4-3df2-31aa-828a-9367dc7aeb99.roa
File: d31be1f4-3df2-31aa-828a-9367dc7aeb99.roa (raw, json)
Hash identifier: eOkDAOrAt7vVAUoAuR0dMK8H4RGy8FesmG98R04yt/Y=
Subject key identifier: 15:ED:B2:EE:42:C5:0D:69:A8:86:FA:E0:CF:92:3A:7B:4A:9C:95:1C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408CADFAC993ECB806FFDD13E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d31be1f4-3df2-31aa-828a-9367dc7aeb99.roa
Signing time: Wed 11 Jan 2023 12:00:00 +0000
ROA not before: Wed 11 Jan 2023 12:00:00 +0000
ROA not after: Thu 16 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.71.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8c:ad:fa:c9:93:ec:b8:06:ff:dd:13:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 11 12:00:00 2023 GMT
Not After : Feb 16 05:00:00 2023 GMT
Subject: CN=72beff8e-9bfc-4bcc-812a-770ea7407c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d1:b2:46:8d:60:78:67:23:8b:64:b7:1e:cd:
35:ba:f5:77:e7:df:b0:fc:65:90:94:05:dc:ac:75:
39:70:a8:44:8e:97:35:86:cd:e3:09:97:f9:05:1d:
d9:c5:38:c9:f3:d9:60:e9:b6:1e:4d:57:df:de:4b:
43:b3:25:81:fd:9f:c1:e9:00:63:8a:4f:c2:07:87:
8e:c0:0b:bc:1c:fa:7f:0e:3f:f2:02:da:5e:4d:5e:
8a:b8:07:8a:22:44:92:77:39:d4:c8:ee:ca:b2:e7:
63:27:ae:3e:95:de:bc:86:01:2a:9b:dd:64:e9:17:
6f:c1:41:9f:f2:fb:5f:ba:c7:e4:e3:4a:b2:5d:58:
a1:fe:9e:98:99:a6:24:06:d2:b3:25:09:ca:75:d4:
87:57:0a:68:c2:32:c3:6d:a3:39:b6:ca:c5:94:38:
8d:18:75:1f:d7:3b:ab:d8:31:da:66:41:1e:ba:34:
f3:38:ae:28:75:03:be:64:c2:0e:59:87:44:7c:5b:
d0:79:c9:db:3f:a5:8a:63:79:94:8a:1e:f5:a2:78:
4a:3c:2d:cb:b2:98:4d:1d:67:1e:1b:9e:00:1f:e4:
d2:73:70:bf:bb:f9:f5:98:ca:93:bd:1e:6b:4f:05:
5f:52:50:7f:e0:aa:8c:2c:8f:a0:82:ac:2d:d1:55:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:ED:B2:EE:42:C5:0D:69:A8:86:FA:E0:CF:92:3A:7B:4A:9C:95:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d31be1f4-3df2-31aa-828a-9367dc7aeb99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:bc:6f:b5:ae:0c:a2:46:2d:16:7d:90:e4:60:2f:f5:2b:e0:
fa:7f:bb:9a:b5:a2:e9:54:a8:ef:f3:02:f8:ea:c7:02:40:00:
32:0c:f4:69:7d:3e:ba:12:72:36:27:3c:53:6b:c2:36:00:dc:
91:cf:51:c2:3a:4b:99:93:5f:e6:b9:7c:91:7e:15:99:46:13:
a1:6c:88:bf:33:ef:44:bf:e2:3e:86:da:33:7c:24:54:c3:74:
8f:35:8e:13:8e:32:a8:20:af:73:c4:f2:b7:c0:ba:31:05:02:
6f:fb:94:0b:e3:06:26:f3:50:fe:9f:e6:0a:39:9b:ed:67:e3:
95:50:63:2d:bc:97:83:14:cc:79:b6:9e:e3:71:ab:5a:a5:bf:
fb:7e:1e:28:53:2a:a1:37:a4:a3:a0:35:58:f3:fa:f5:20:6d:
a7:c1:ec:84:d4:19:fb:e2:d0:b8:9c:64:28:6b:83:bd:11:42:
ab:58:22:ee:28:7b:98:9c:c7:a5:31:20:11:73:a2:0c:27:06:
9f:2a:c6:b6:d4:ab:b7:cd:c9:aa:55:df:14:1d:a4:36:b2:3c:
15:38:e3:48:3b:db:e6:fb:20:55:1f:e3:da:0b:89:ab:2e:5e:
92:4a:11:e3:48:2d:17:02:cd:1a:c3:15:de:e3:e5:04:dd:57:
f8:b5:b6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:51 2025 by rpki-client