Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de07ff0f-ca1a-3a04-ac64-668568a92975.roa
File: de07ff0f-ca1a-3a04-ac64-668568a92975.roa (raw, json)
Hash identifier: lwWzluFn7LMzZPxtgiUH6R/2vXZceuyn5wQW41qXCCY=
Subject key identifier: 2A:CE:52:79:8B:75:05:9F:0F:62:0C:31:36:A0:B0:2D:D2:92:A7:E6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840839B0FA64FF5E378A51DC900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de07ff0f-ca1a-3a04-ac64-668568a92975.roa
Signing time: Sun 08 Jan 2023 12:00:00 +0000
ROA not before: Sun 08 Jan 2023 12:00:00 +0000
ROA not after: Mon 13 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.154.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:83:9b:0f:a6:4f:f5:e3:78:a5:1d:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 8 12:00:00 2023 GMT
Not After : Feb 13 05:00:00 2023 GMT
Subject: CN=413e2463-cd1f-4590-a303-c17fe3c34144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:a8:72:91:11:42:bb:22:e3:b7:a9:d3:e8:
49:18:f0:e7:5e:86:17:cc:88:d6:dc:72:6c:e4:07:
fd:60:f2:5f:98:2f:da:f3:1f:33:9c:b2:41:c6:b1:
8a:44:6f:ae:ab:0a:38:c7:e2:d8:59:a2:de:82:eb:
ce:19:5c:26:6b:53:4e:0e:e7:9d:8f:f0:8f:a3:4f:
f4:99:83:a7:f3:a2:c0:35:da:f4:7c:cc:4f:3d:b1:
23:ce:1b:5c:de:84:4d:54:67:b2:e7:ce:1d:ad:ca:
ce:5f:03:b8:81:80:1a:1f:8e:85:41:38:41:95:57:
6c:15:6c:d1:6f:32:aa:9a:0a:dc:89:ee:91:ac:59:
46:13:8c:23:48:01:d1:f4:71:8b:8c:5b:08:4a:90:
6b:50:6f:55:c2:36:87:6a:17:8e:b3:59:f8:f9:1e:
57:08:63:8c:1a:3a:b0:b8:fa:cc:ff:2e:06:e1:2e:
b3:2d:73:e4:8a:41:d4:43:b9:2f:58:08:b5:ff:81:
2d:c6:c6:82:14:02:c5:bc:5d:fe:2a:0f:95:93:a8:
ca:f2:7c:36:e1:51:46:66:fc:ba:82:92:41:7f:d2:
10:9f:be:98:09:d0:48:9e:b0:d3:cc:4b:7f:22:35:
7f:53:f0:32:39:2f:af:62:38:10:13:ad:ff:5d:2d:
6c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CE:52:79:8B:75:05:9F:0F:62:0C:31:36:A0:B0:2D:D2:92:A7:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de07ff0f-ca1a-3a04-ac64-668568a92975.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.154.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:9c:60:67:75:2e:d5:e7:c5:e6:36:de:e7:5e:d4:ec:e0:47:
ff:27:36:53:52:c5:73:f3:84:6f:c7:dd:4a:12:e0:ec:4b:57:
af:35:20:2e:2b:a6:dd:71:5a:24:5c:6f:c2:e0:2f:8b:26:60:
c3:b1:b4:31:b4:44:f0:e2:e2:9f:9f:65:0e:f3:a0:37:44:06:
c7:94:a7:ca:ad:5a:81:82:12:0f:c4:90:3f:64:4b:06:b1:bf:
cd:dd:e5:a0:91:c5:87:6e:01:90:71:04:e2:75:3a:29:c4:cf:
b2:2c:11:06:3a:fa:7e:e4:93:56:40:6d:6c:97:fb:0d:66:b5:
70:a5:40:7c:44:46:ef:7d:a6:21:07:3a:98:a2:6e:9a:dc:4d:
4b:4a:4b:f4:d9:01:f6:1c:42:60:38:ed:8c:03:1f:5f:1a:85:
90:38:4a:16:7a:19:1c:83:2d:fc:b5:2c:d0:bd:99:87:41:f8:
bc:ea:26:b5:eb:14:97:d4:71:eb:ae:39:a0:99:1d:a4:68:be:
f8:e7:da:1c:1d:81:53:62:03:cc:73:8d:df:3e:7c:14:1f:74:
c0:81:22:84:c5:86:e1:e3:f5:3c:95:b4:6a:d5:22:e6:09:3b:
b0:9c:af:05:3f:9e:a3:ce:e6:c3:d9:e0:71:72:af:d3:d0:85:
88:52:aa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 20:18:39 2025 by rpki-client