Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d6af3697-67ef-3d79-8c5a-23fe7335bd34.roa
File: d6af3697-67ef-3d79-8c5a-23fe7335bd34.roa (raw, json)
Hash identifier: kKIiHGujdaiGKXehO1pGuXm0ml0fds1I8u7cE+PGsQ4=
Subject key identifier: A2:98:87:1E:F8:41:43:44:53:19:AF:91:AD:0A:70:B8:C2:05:AD:CB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EA8A9AFFF7A19E5A9C6802060
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d6af3697-67ef-3d79-8c5a-23fe7335bd34.roa
Signing time: Fri 22 Jul 2022 12:00:00 +0000
ROA not before: Fri 22 Jul 2022 12:00:00 +0000
ROA not after: Sat 27 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.28.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:a8:a9:af:ff:7a:19:e5:a9:c6:80:20:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 22 12:00:00 2022 GMT
Not After : Aug 27 04:00:00 2022 GMT
Subject: CN=9dc8a44e-c092-40f3-abce-206c6d50b605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:38:bc:ea:d9:ea:56:01:0e:f7:05:da:70:
67:7d:67:4e:0e:1b:e6:71:37:d2:d9:7c:f9:1c:e2:
87:1a:46:f1:f9:18:3a:18:76:78:92:c0:b5:fb:f3:
d0:c2:8f:d0:b5:3d:bf:eb:45:e8:fc:c6:a4:f1:78:
ea:ff:8d:0f:e7:c1:1a:9d:bf:46:96:f9:60:0d:a9:
e9:c9:11:9f:c9:1b:27:7b:dc:af:4f:da:90:cc:02:
3b:ad:23:7b:b2:c9:14:a6:1a:07:fc:1b:fa:3a:3e:
a7:b5:a2:7f:05:3d:4d:e6:25:0e:1d:0a:84:fe:52:
11:d2:95:8f:c0:24:3f:7b:03:83:27:f6:8f:03:06:
83:44:30:3c:0a:c1:1c:e4:50:5c:22:fc:2b:ba:4c:
3d:07:f6:7c:75:0f:8d:4f:e6:53:a9:7d:d1:05:e7:
4b:a4:12:25:86:6a:be:26:f7:62:56:ee:60:0d:ae:
61:ed:3a:7e:07:a5:7b:1c:5d:91:4a:63:7e:3f:e6:
a7:52:ee:dc:50:ff:96:d1:92:f1:76:85:54:78:b2:
8b:af:29:b0:cd:27:4d:76:57:73:09:82:fc:5a:b7:
fa:8c:95:81:ba:c2:51:2f:ac:47:ef:75:fe:2d:50:
31:22:8f:76:be:3b:08:fe:d7:23:9b:b3:6d:01:c7:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:98:87:1E:F8:41:43:44:53:19:AF:91:AD:0A:70:B8:C2:05:AD:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d6af3697-67ef-3d79-8c5a-23fe7335bd34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.28.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:8a:14:f1:cd:17:d8:5b:79:35:c2:4f:6f:f9:fe:ae:92:cc:
fa:ed:57:b8:03:57:87:59:9b:1f:46:9d:09:d4:20:34:71:c9:
3e:ca:de:b7:67:b0:14:3e:e1:29:01:7d:d1:11:7c:2d:64:4f:
5b:4b:6e:7a:50:06:57:cc:17:e8:6c:c4:0c:9f:d8:d8:1c:dc:
5d:ed:3d:2f:f0:0b:2e:b5:1d:49:48:14:f8:d6:22:85:1b:a8:
c8:bf:72:d8:e8:6c:2a:28:92:5b:30:61:6c:a5:bf:68:d5:7e:
09:05:f5:7b:5c:b3:01:73:2f:3d:8a:7e:4d:1a:22:f9:c3:52:
5b:82:f7:be:6b:da:ac:7e:19:59:f3:cf:d7:83:a3:03:10:b0:
5f:41:17:9c:c8:5a:20:d8:8f:2f:85:0a:5c:d2:a9:dd:67:73:
31:cd:96:97:ab:5f:02:4b:d1:c1:6b:98:79:d5:dc:58:51:6a:
69:7c:f0:cd:ac:ec:bd:9e:19:3d:3e:38:60:f7:9b:c6:89:c1:
f7:d7:fc:64:7b:03:8f:5d:07:ec:aa:bc:73:55:46:1f:0e:43:
49:57:df:ab:47:61:a6:78:1c:d1:2c:fb:bf:69:2a:65:0a:14:
c5:79:bc:ca:a1:7e:68:3b:d4:74:fa:16:9c:af:1a:de:3a:3b:
82:02:50:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:20 2025 by rpki-client