Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbc6785c-f132-3f30-a63c-a1970c4afc17.roa
File: dbc6785c-f132-3f30-a63c-a1970c4afc17.roa (raw, json)
Hash identifier: d42SVje3JGJAgeGWQLpQyNbMxRmccglUuRFuUoPXl/Q=
Subject key identifier: 31:C5:ED:72:63:D7:D7:95:6D:A1:CF:1E:F2:01:DF:97:59:89:F5:A3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840787F873BE57B3C9A6AE77200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbc6785c-f132-3f30-a63c-a1970c4afc17.roa
Signing time: Wed 04 Jan 2023 12:00:00 +0000
ROA not before: Wed 04 Jan 2023 12:00:00 +0000
ROA not after: Thu 09 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.144.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:78:7f:87:3b:e5:7b:3c:9a:6a:e7:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 4 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2023 GMT
Subject: CN=206fe44e-3afc-4bba-aa82-30701f2280d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:fb:0b:c8:7c:05:76:2c:e3:5b:ad:6e:65:
5d:14:f7:bb:7a:55:89:f5:a6:65:c7:3e:ed:6a:b6:
a4:1d:92:6d:07:88:e5:8b:cf:53:2f:bf:7f:1a:9b:
01:44:73:a7:be:fe:fc:36:48:d6:0b:e6:bd:da:47:
fa:cd:c0:76:a5:fe:82:ab:56:51:e4:99:09:2c:b2:
04:53:0b:d8:ce:2a:57:e8:d9:f0:1d:5b:66:32:71:
f7:78:3a:18:61:25:fb:81:cd:d9:9d:fb:60:85:42:
4d:05:ca:d9:ae:d4:a7:39:eb:2b:f2:9e:3c:f3:e7:
d2:08:8f:e3:5b:00:fe:ef:dc:b1:a5:70:cf:ce:08:
85:15:83:81:dd:36:76:60:75:f0:b7:94:fb:23:76:
ad:3b:6b:6f:78:ba:2f:5b:3f:e1:58:aa:c4:7f:1b:
c0:f8:ba:b0:19:26:c5:9f:7c:c7:ab:d2:6b:d4:49:
22:4e:34:d9:2c:bd:bb:1a:ea:25:ce:df:f5:be:0c:
14:59:f0:88:05:d8:35:dc:3b:f2:29:93:3a:97:7c:
03:c4:94:88:20:fb:df:17:85:db:91:2d:3b:29:cf:
b9:54:e6:64:c5:12:ab:66:d7:67:c5:7e:fd:14:41:
66:a3:ae:7a:27:28:6f:c6:94:f7:8c:a6:2d:af:92:
8b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C5:ED:72:63:D7:D7:95:6D:A1:CF:1E:F2:01:DF:97:59:89:F5:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbc6785c-f132-3f30-a63c-a1970c4afc17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.144.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:d5:81:d5:b5:e5:ab:f2:51:9c:6b:a1:ed:74:76:0c:b4:28:
b3:85:9e:e2:ce:61:73:77:a9:89:80:91:1d:49:4b:4b:37:50:
dc:a6:9c:1e:03:f8:86:22:1e:92:d2:2c:93:e2:2c:a9:83:9d:
28:81:6a:d7:12:65:93:22:3f:51:76:15:d8:c5:36:e9:a0:07:
bf:44:8c:d2:15:b3:f4:91:af:b4:e5:15:af:a6:5f:63:ec:57:
47:6a:12:8f:d3:f8:62:a7:12:76:de:8a:8b:d7:aa:90:33:78:
d4:46:55:4f:f4:d6:b0:46:2e:70:ee:63:e3:95:e8:d9:b7:00:
99:49:f7:55:b3:11:57:f2:c1:ea:62:6c:bf:aa:55:56:43:5d:
cd:9a:3c:6a:ee:49:92:3e:bb:7d:57:c2:21:ed:36:bd:24:fb:
42:47:a5:8e:36:a1:c9:28:08:d7:c2:cc:8b:c9:97:38:6b:07:
6d:ec:54:93:b3:d6:e8:e8:ac:f1:58:ee:f2:c2:08:01:d4:86:
72:0b:0a:44:20:65:c5:67:99:c7:bd:d0:d5:14:c2:94:3e:f4:
6a:a1:e2:61:77:d1:97:74:df:33:7b:7a:3b:30:b0:6a:4d:c5:
df:ad:3e:f1:e4:65:ae:48:41:8f:80:b7:fe:c6:0c:19:78:85:
dc:72:09:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:19 2025 by rpki-client