Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da29dd2a-0bcc-3158-83da-6e91a41cba66.roa
File: da29dd2a-0bcc-3158-83da-6e91a41cba66.roa (raw, json)
Hash identifier: pxkyiZlN3Px/vpwPcXCzbY2jCV41NHFq5BrjG5vGSp4=
Subject key identifier: 62:46:1D:26:3E:40:02:D1:A5:E7:52:84:4E:F3:C7:BC:72:91:39:CA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FAF6F66892CCBF768E6BA3E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da29dd2a-0bcc-3158-83da-6e91a41cba66.roa
Signing time: Mon 24 Oct 2022 12:00:00 +0000
ROA not before: Mon 24 Oct 2022 12:00:00 +0000
ROA not after: Tue 29 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:af:6f:66:89:2c:cb:f7:68:e6:ba:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 24 12:00:00 2022 GMT
Not After : Nov 29 05:00:00 2022 GMT
Subject: CN=7e989d60-8488-4247-ba76-c6f873f96ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7c:5b:c1:34:c5:06:40:b4:88:e5:10:bf:25:
a2:52:78:e2:0f:b0:fe:42:36:ef:ab:23:ef:4b:df:
d1:29:b0:ab:fa:a6:37:2e:7f:03:d0:c8:fb:5e:12:
68:d2:30:5b:39:fe:1a:fb:e0:62:bd:27:0a:c7:87:
fe:1b:8a:1b:33:90:06:2d:9c:9c:32:05:67:2f:f8:
ea:14:bf:94:95:6c:2a:fa:ec:51:d7:f0:0d:0f:01:
a5:78:c7:19:91:d8:f5:2f:07:ac:45:13:13:05:76:
38:7a:90:cc:c3:78:2d:e3:4e:bd:bc:6a:32:59:e2:
9b:d4:d9:79:ad:34:e2:e7:d4:2d:3a:fa:be:3b:37:
af:49:14:8f:e6:36:59:1c:89:6b:9c:73:3d:b3:e9:
f5:84:39:8e:ac:75:d4:f3:d3:f2:f8:b8:84:cd:72:
97:06:ad:5c:f6:da:04:b7:9a:86:04:09:96:20:8a:
79:f4:1b:89:b5:da:b5:ea:8f:7b:db:e0:c5:4f:76:
de:51:76:a6:98:88:18:0e:71:ad:74:d6:62:be:7b:
db:90:cc:c5:fd:47:1e:47:c3:86:f0:4a:79:19:f0:
a0:45:f8:5d:82:8a:bf:74:a2:6c:e2:ba:48:36:d7:
f5:f5:7b:fd:93:8c:67:f4:dd:b3:57:b0:c1:df:d2:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:46:1D:26:3E:40:02:D1:A5:E7:52:84:4E:F3:C7:BC:72:91:39:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da29dd2a-0bcc-3158-83da-6e91a41cba66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:88:52:4a:22:03:86:94:64:eb:5a:e0:69:5f:59:02:ae:ea:
62:15:35:4b:d1:d4:66:3b:19:c5:dc:a1:0b:2f:9b:ac:7f:2d:
43:42:f3:cc:b8:a9:36:a3:50:2f:fb:d5:f9:42:7c:f0:96:9a:
3a:5e:d3:fd:3c:f2:79:7b:2e:4c:00:5a:48:cc:e0:60:40:3c:
aa:ea:c0:19:ee:7a:92:35:a5:68:14:48:ab:61:3b:ba:1d:8e:
c1:6a:c6:64:74:aa:6e:fa:83:74:e1:41:df:9e:b0:c7:d8:45:
64:25:93:d9:d0:2f:db:89:37:34:67:6b:93:35:a4:31:b7:66:
5d:c4:8b:0c:93:3d:d2:81:36:60:a8:b9:ef:a2:42:aa:f2:8c:
39:f6:ca:a1:20:db:56:7e:dd:a3:2b:77:16:6a:de:5d:0b:87:
2e:3e:1a:5c:5a:1d:3c:c0:f8:1c:24:d1:b9:b1:f3:fc:76:1d:
7b:34:9c:34:f7:a4:b3:74:6a:25:6a:55:6e:97:db:1d:f1:bb:
18:09:3d:2c:1e:03:ff:0e:3e:48:d7:f9:39:83:3a:e3:e1:45:
41:61:3d:41:b6:aa:b9:5a:4e:fb:d0:e6:27:36:9a:72:0a:2b:
e0:f4:f7:8c:39:57:fd:59:13:16:0a:5d:c9:01:20:84:d0:1c:
ff:48:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:58 2025 by rpki-client