Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5a2cb18-83a8-3932-b162-fd3c13d4c540.roa
File: d5a2cb18-83a8-3932-b162-fd3c13d4c540.roa (raw, json)
Hash identifier: fDmGg0KBQTpgmsVtCmVYDHLF4d1YALuouYJhsTK1YuI=
Subject key identifier: 29:EA:F5:D5:03:1D:2E:0D:18:9A:C0:CA:F1:D5:3B:BB:BD:50:7B:0F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CFA799975812C56D501846500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5a2cb18-83a8-3932-b162-fd3c13d4c540.roa
Signing time: Sat 19 Feb 2022 05:00:00 +0000
ROA not before: Sat 19 Feb 2022 05:00:00 +0000
ROA not after: Sat 26 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.30.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:fa:79:99:75:81:2c:56:d5:01:84:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 19 05:00:00 2022 GMT
Not After : Mar 26 04:00:00 2022 GMT
Subject: CN=8569186f-eb2a-432c-ab34-01093dc581b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0d:51:8a:f9:f2:8e:c8:f1:30:9d:d6:7c:02:
74:28:35:30:72:17:4c:49:9d:00:39:c9:ff:60:ec:
79:ca:54:0b:a3:bc:4a:bc:4f:a6:e0:02:9c:90:07:
ba:4f:c6:f7:0c:3f:b9:fe:db:1d:b0:54:1f:0a:7b:
31:eb:db:a6:96:dc:0f:5d:65:2e:50:9a:60:85:7b:
b5:bb:68:cf:03:35:e0:61:0b:a9:d4:ae:3b:43:3a:
8d:64:7d:3c:55:49:0f:28:d1:88:c8:35:21:1c:92:
9c:a7:2b:30:2d:af:79:47:25:3e:0f:26:32:c1:3d:
e2:9b:ec:df:c0:1f:b8:3e:5d:58:f3:50:5e:65:12:
66:c1:7a:6c:63:75:7f:94:0b:82:d4:8a:7b:97:a0:
22:e9:a6:99:6e:3b:ea:ab:e8:0e:35:33:10:14:41:
0a:bf:c4:3c:28:1c:34:8c:42:6c:80:e2:74:cf:bb:
f4:06:91:5d:2b:d2:25:af:51:78:f4:1d:0d:dd:1d:
84:47:c3:9e:66:d5:aa:89:7a:77:17:b0:f3:9d:6a:
b9:b0:27:eb:dd:29:58:37:18:1a:71:25:dc:6d:7e:
3e:9d:23:de:91:ae:2e:9a:19:9a:62:b1:24:69:30:
40:a1:af:e4:d7:6c:9d:33:2b:d6:e4:88:77:0a:ff:
7f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EA:F5:D5:03:1D:2E:0D:18:9A:C0:CA:F1:D5:3B:BB:BD:50:7B:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5a2cb18-83a8-3932-b162-fd3c13d4c540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.30.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:1a:c6:0b:8d:be:41:80:03:e9:49:a2:a0:6a:d1:d5:fe:42:
fd:fa:79:c4:f1:f2:d0:28:60:db:89:20:5f:a9:f5:6b:b7:6d:
75:62:84:75:8d:7f:64:12:fc:a9:b3:9a:2e:dc:b9:c8:7d:67:
c7:2f:69:32:53:24:2b:45:e0:0f:d9:87:0b:aa:33:d7:b2:47:
f8:3d:c0:02:f9:c5:00:e5:8c:80:2e:2e:b0:a8:3e:62:13:7b:
ae:eb:c5:0f:de:8a:21:6b:fd:0d:c3:3a:d7:e7:d0:53:73:2f:
43:38:89:ad:00:20:b8:53:3c:dc:55:e6:78:9c:a5:5c:db:01:
93:da:f2:da:82:5c:2f:86:37:ba:49:c6:b3:95:a8:ff:40:e8:
a9:37:dc:c5:54:92:66:4e:26:8b:df:ef:db:48:1c:55:29:a2:
53:ca:25:bb:9c:fb:51:d2:43:4f:c2:68:56:2a:4b:66:e3:0a:
a4:56:9b:ac:8c:4f:d4:b9:6b:19:bd:7f:ca:9b:9b:aa:32:19:
83:70:09:e1:02:ba:cb:ca:80:96:a4:2d:33:27:0b:84:a7:90:
46:9a:4b:98:c4:34:93:e4:84:77:fd:bd:55:6c:77:95:0d:fa:
1f:8f:eb:91:7c:b6:68:e4:61:1e:37:92:15:ce:91:6a:99:1d:
a3:a0:bf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:07 2025 by rpki-client