Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d952b87e-850f-363b-a768-4497171027a5.roa
File: d952b87e-850f-363b-a768-4497171027a5.roa (raw, json)
Hash identifier: 3xf8dcHPytql/9Xy43fd4QNzvNdii+pirDClN8yuLn8=
Subject key identifier: 56:6B:77:A1:33:EF:FF:52:7F:ED:81:D8:A1:6C:70:7F:DD:A2:4E:33
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DAD3B351C08782C1877B3C880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d952b87e-850f-363b-a768-4497171027a5.roa
Signing time: Sat 23 Apr 2022 12:00:00 +0000
ROA not before: Sat 23 Apr 2022 12:00:00 +0000
ROA not after: Sun 29 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.219.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ad:3b:35:1c:08:78:2c:18:77:b3:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 23 12:00:00 2022 GMT
Not After : May 29 04:00:00 2022 GMT
Subject: CN=b79bc79c-daea-42b5-a0bd-0cf5f8a34600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:02:52:fa:a7:53:ea:2d:60:6c:45:2a:ed:
73:b2:79:a8:e4:cb:c5:47:c0:26:ff:43:6d:56:e4:
7d:03:50:e7:43:93:56:d7:64:72:bb:e9:12:b5:20:
f1:9c:53:f6:75:be:45:dd:c7:61:96:3e:22:f4:db:
0e:02:54:4d:c7:50:10:d1:f2:bf:93:88:a5:d1:f7:
87:e0:72:fa:7f:f9:42:4d:d1:e8:cb:38:c3:8e:3d:
ec:6a:0c:e1:c2:dc:79:ef:10:73:0b:c4:e1:5f:29:
d2:69:dc:cd:bf:0f:1b:f2:4a:84:d0:62:3d:dd:ef:
38:a7:6b:86:10:d6:bd:28:ab:c9:3e:58:00:3e:15:
f5:6c:46:e7:64:8a:8f:89:ba:32:bf:0d:81:b3:25:
42:ec:50:92:7f:4d:7f:17:15:ca:0d:4f:62:ac:4f:
36:c3:c2:ec:3f:95:d1:b8:98:99:10:91:5e:5c:74:
07:23:27:63:e7:7b:a6:52:94:a8:3c:0b:a6:7f:a5:
e7:f7:73:1a:e1:e8:e5:3c:ad:4a:45:00:0c:e4:4f:
6a:f2:5a:e4:5c:66:70:0c:e6:0f:fb:a3:21:9f:14:
5c:df:05:6a:43:9d:ef:c8:95:f2:5b:0a:50:92:ec:
20:4a:d5:cd:e9:47:1b:3c:15:25:70:1f:ba:05:48:
7b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6B:77:A1:33:EF:FF:52:7F:ED:81:D8:A1:6C:70:7F:DD:A2:4E:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d952b87e-850f-363b-a768-4497171027a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.219.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:e0:f9:08:58:10:0d:c8:8d:3f:d2:cb:14:21:97:22:6b:65:
1a:53:b2:cd:c1:7b:ec:47:36:20:be:5f:5d:86:97:ca:84:52:
c0:54:0d:e0:e0:da:26:fa:72:b0:b9:7d:04:ac:44:21:e5:98:
a1:78:4e:0b:a1:6c:cc:ea:f5:de:6d:75:ca:54:1a:17:41:19:
26:4a:57:cf:55:0c:44:c0:67:77:f6:65:23:22:e7:65:14:f5:
c5:59:c0:3a:55:bc:35:08:b8:f6:77:f2:c0:69:01:f4:fc:fe:
2e:a7:44:c4:22:1f:d3:1d:ca:7a:e1:2f:d6:92:5b:b8:07:61:
25:79:46:05:a5:e9:e7:d6:26:c7:4f:15:2b:28:be:f3:e6:29:
b4:a4:5a:b0:52:e1:38:4b:ed:a7:b7:75:29:a6:bd:a9:45:f6:
92:99:38:ed:b0:23:db:79:46:3e:f0:4e:fe:e0:45:19:9c:88:
c2:f2:1b:fa:cd:f0:80:cb:fc:6a:7c:71:4d:fa:31:e5:e5:3f:
ba:ca:ad:8f:c0:2e:ff:6a:ab:df:22:25:d7:ab:16:34:9b:32:
97:7c:aa:7a:5c:87:18:77:21:2b:f0:79:ca:fb:77:9e:dc:fe:
7c:2c:0a:74:e4:4b:4a:97:d7:77:d4:77:b1:a8:f2:8d:fd:8a:
49:e5:14:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:15 2025 by rpki-client