Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df57c212-cb89-3ca4-8e35-48ee0defdf45.roa
File: df57c212-cb89-3ca4-8e35-48ee0defdf45.roa (raw, json)
Hash identifier: geSn5RIp6kNAVwfsYYmzSUFZ6tc5W2aw232HqsAJ1U8=
Subject key identifier: D7:8F:2D:95:E9:C9:86:88:08:AB:49:0D:01:8E:8A:73:41:BC:DC:0E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D7DA81B1C7C25C410F8C8BF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df57c212-cb89-3ca4-8e35-48ee0defdf45.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Thu 12 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.101.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:a8:1b:1c:7c:25:c4:10:f8:c8:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : May 12 04:00:00 2022 GMT
Subject: CN=8b0a9968-406b-4c57-93cd-3a405b9449c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:70:1e:9d:a5:b4:e7:1e:2f:b3:d7:e3:38:9b:
2a:3e:6c:6e:34:b1:ca:e7:d3:a7:ef:db:a2:5f:4c:
04:2f:14:5b:8d:4c:c3:d3:a9:08:00:65:a4:47:f4:
ae:88:13:00:eb:29:e8:6d:4b:b2:97:3d:9d:5b:1e:
79:1d:91:1f:7d:2d:13:84:07:25:aa:f1:c6:a7:9d:
53:59:af:ee:91:eb:73:6e:b9:06:dc:64:e9:95:5b:
2a:c3:81:51:42:6a:4c:28:34:52:33:a1:c7:7d:37:
2b:87:be:dc:7c:c4:93:ff:78:83:91:60:48:6d:22:
10:07:c0:fa:84:0f:19:c1:99:19:30:0d:54:42:dc:
d3:c7:3a:cd:e6:37:8e:22:ba:7c:08:36:d7:4a:f9:
52:bf:75:c9:14:19:7f:10:0b:81:18:0e:32:a1:b2:
32:13:a5:48:db:cf:7d:ae:e6:d4:63:77:cb:30:13:
c3:0a:50:3c:fa:e6:29:3e:f8:69:4d:da:76:8d:57:
d3:cf:4e:72:53:f7:d9:af:3f:7e:51:d2:1b:d8:76:
85:7d:be:21:77:bb:c8:8a:65:9f:2e:c7:b6:b1:1e:
ed:98:ed:b0:d0:c2:cd:26:97:02:ae:5d:c4:68:66:
a8:2c:12:b9:8f:fb:d8:02:c7:d5:73:1d:36:29:8d:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8F:2D:95:E9:C9:86:88:08:AB:49:0D:01:8E:8A:73:41:BC:DC:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df57c212-cb89-3ca4-8e35-48ee0defdf45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.101.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:bf:d2:ac:37:0c:85:93:ae:de:02:1a:3b:c7:cb:e4:10:f6:
76:6e:3c:02:81:05:1e:f5:ff:40:37:d8:cd:ae:c5:bd:2e:ec:
38:21:56:49:27:0a:eb:b3:0b:a1:ae:68:4d:d7:dc:dd:1e:e9:
ea:ad:66:94:05:ae:e1:3b:90:c3:fa:5c:82:4f:3c:91:39:ec:
af:af:65:7d:68:2f:ab:70:d4:0e:39:62:1a:03:b4:6d:3b:45:
65:e6:5f:7e:95:37:8d:d9:b9:6c:a5:38:7b:3f:df:63:17:b1:
7c:54:c1:dd:6b:38:9c:4f:ef:a7:e5:aa:33:f1:93:51:c8:ac:
8e:93:24:86:59:07:59:02:a3:b1:fd:1d:08:56:06:6e:71:4f:
62:79:9d:b7:12:de:00:c0:28:a9:cb:33:6d:2d:cf:8e:7e:48:
3a:48:9c:57:74:d5:51:86:06:ef:14:77:c7:20:35:ef:77:c0:
8e:d2:6d:79:b0:ad:84:e2:0e:18:a3:60:86:d6:37:84:ec:4d:
a9:1f:db:93:2f:43:d6:b1:a7:52:d2:a2:d8:a8:0d:53:b7:ce:
73:51:6e:f3:2a:ed:08:f0:6b:4e:d1:19:8b:79:ec:f8:8c:53:
da:4b:93:18:ef:a9:8d:04:02:3f:55:cb:9e:c2:a5:86:da:1c:
4a:a9:8b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:35 2025 by rpki-client