Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9571efd-2581-3b67-8b06-035379e94ca2.roa
File: d9571efd-2581-3b67-8b06-035379e94ca2.roa (raw, json)
Hash identifier: Y2o/kZdsGKvUA6YkFWekWxTVeTOMcICGzz8B0tyfCg0=
Subject key identifier: 81:24:DD:43:81:3C:B7:F2:A4:31:C3:A9:4A:C4:A2:8F:B9:95:61:64
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584046A71E3C3FB78CE33671C340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9571efd-2581-3b67-8b06-035379e94ca2.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.214.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:a7:1e:3c:3f:b7:8c:e3:36:71:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=88e66b73-a04a-4ea4-8685-bbd76223754d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:72:0f:e8:cc:92:e8:eb:bf:9b:e8:55:31:
1a:dd:64:be:8b:05:6c:74:36:1d:c4:97:1f:41:8f:
7a:a6:fc:77:0f:48:a4:e4:da:53:f4:6e:77:57:2f:
cd:5b:3b:a9:a0:81:8e:f0:15:37:8c:57:92:9b:d1:
b2:73:e6:54:02:f6:25:76:53:8f:64:48:b7:c6:a4:
26:a9:6e:6a:f4:5d:02:31:d4:60:aa:b6:26:34:19:
a9:ba:82:25:54:46:08:ba:b3:fb:f6:95:fa:f5:05:
48:c4:51:c5:cd:bf:61:d0:28:df:0c:76:b7:37:e7:
87:e5:7a:65:84:43:45:12:a0:40:0d:49:b1:7b:63:
ff:00:fe:97:06:14:3f:d9:60:e7:50:f7:75:b0:ae:
7c:05:5a:5e:0a:38:63:71:c3:7a:b6:a4:04:54:06:
6c:f9:a3:b3:43:a9:0e:59:95:13:28:08:48:2f:31:
3e:a0:34:ed:23:da:12:8c:a3:4e:ef:37:cc:42:c9:
dd:81:a2:ed:e7:c2:39:c8:e1:81:b8:45:ba:dd:f2:
7a:b3:2d:fc:09:97:7f:ea:7a:92:06:41:2d:05:da:
3f:d4:1d:bf:3c:4e:e4:91:c5:f2:c7:16:46:3b:fd:
95:b7:2e:4a:1a:0c:18:4e:8c:af:70:af:0b:00:09:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:24:DD:43:81:3C:B7:F2:A4:31:C3:A9:4A:C4:A2:8F:B9:95:61:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9571efd-2581-3b67-8b06-035379e94ca2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.214.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:dc:10:9f:86:c2:ce:8b:b8:68:5a:21:c7:8c:ed:87:1d:df:
ca:43:b5:14:6f:97:39:75:63:65:24:a8:22:fa:ac:00:7e:c6:
9d:d4:ac:de:ac:d0:4f:16:a3:5d:2a:45:b3:49:f9:76:72:e6:
02:16:c6:a7:33:7b:e1:7e:c7:3a:d5:5f:11:20:95:86:5c:2d:
b6:c8:98:e1:64:00:6b:1c:40:8f:41:6a:d7:c7:19:0b:f0:e5:
75:34:3d:18:ba:32:e2:28:a4:70:ce:04:0a:be:a7:67:4a:97:
e8:d0:bd:c7:bd:45:7a:eb:b0:2f:a5:b0:53:c1:8f:f4:e6:d0:
a8:4e:65:e7:8b:39:01:61:54:60:67:75:c0:5f:11:78:8f:76:
6d:d3:7e:19:71:76:92:70:ab:d2:83:ef:5f:d8:ec:34:4a:a0:
bf:a1:be:d1:88:aa:09:43:62:84:54:95:3a:df:ba:82:8b:ac:
8e:e4:88:02:36:ed:e4:86:7e:96:56:e2:9b:4e:e1:05:ec:f7:
10:92:d4:24:c9:f3:ff:9c:14:8f:b9:5d:5a:6b:b9:68:b3:f5:
fa:da:60:a3:47:ba:ed:d5:d2:83:ce:72:11:65:40:e8:eb:2c:
94:04:f8:41:f7:a5:17:51:57:c9:c2:72:7c:78:65:13:53:9b:
10:39:01:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:11:41 2025 by rpki-client