Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df8ad18f-44ba-3674-bc8c-dd323e62491f.roa
File: df8ad18f-44ba-3674-bc8c-dd323e62491f.roa (raw, json)
Hash identifier: ZdYcUfCz5kWpwiJS8h/FMqR0z8MGmMJhGSHUZ9gxKTA=
Subject key identifier: B4:82:2B:B3:15:F5:7C:1D:2B:B0:15:94:27:2C:4A:6A:19:66:30:9E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C92EB5BEF37C23F319FD60D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df8ad18f-44ba-3674-bc8c-dd323e62491f.roa
Signing time: Thu 13 Jan 2022 05:00:00 +0000
ROA not before: Thu 13 Jan 2022 05:00:00 +0000
ROA not after: Thu 17 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.29.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:92:eb:5b:ef:37:c2:3f:31:9f:d6:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 13 05:00:00 2022 GMT
Not After : Feb 17 05:00:00 2022 GMT
Subject: CN=b403a6d1-e4ee-4045-88f9-ff72b2611585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:91:23:19:ef:99:9c:89:ba:fe:e2:07:76:
72:a5:a3:c8:1d:bf:a2:f1:e5:f3:0d:54:f5:d4:2d:
17:b9:2c:77:44:5c:3e:26:b3:46:f2:f9:b9:67:f3:
d0:ea:3b:e7:97:36:6b:6d:af:cd:86:fd:26:2f:b6:
32:c9:47:fe:21:53:01:9a:92:9a:1b:8f:c7:33:ae:
2c:75:59:7e:96:ef:dd:5e:2b:7e:c8:82:91:e8:4a:
6d:30:15:f7:99:1d:ba:b9:13:9d:ed:31:b5:01:3e:
53:0a:86:c2:6e:94:a2:bc:31:8b:5e:1c:a2:47:da:
18:cf:f4:4a:53:91:fd:49:ea:db:5a:c7:f5:71:87:
63:bb:94:8a:aa:ee:07:32:c6:b3:40:c7:53:1d:a0:
6e:21:ff:59:f0:6e:14:aa:60:10:ae:f0:16:96:45:
f1:9d:3f:29:21:de:e9:63:ca:20:f1:e1:91:22:98:
64:ad:27:58:5c:1d:86:7c:d8:0d:ba:d1:f4:4b:44:
f7:ce:38:5c:e4:2e:ed:27:5c:77:c1:c2:c2:9a:29:
47:94:98:8d:91:89:14:50:cb:b9:a3:72:48:4b:85:
f4:3d:ae:a0:d0:81:28:15:e6:ff:f4:54:28:de:a6:
90:de:39:8a:37:b5:29:0f:04:9e:13:69:f5:a5:83:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:82:2B:B3:15:F5:7C:1D:2B:B0:15:94:27:2C:4A:6A:19:66:30:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df8ad18f-44ba-3674-bc8c-dd323e62491f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.29.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:c6:cc:36:56:0d:90:72:8a:1b:01:2f:64:5d:f6:e6:bb:c1:
32:63:1e:a7:1f:6c:0b:3a:cf:4b:1f:6b:dc:25:ce:1b:5e:02:
6d:69:e2:0a:eb:3a:50:81:f0:a6:cc:1f:bc:6d:7c:a6:60:79:
dc:17:b3:18:a5:9f:1d:7e:4e:8e:98:12:76:30:4f:55:6f:52:
c8:47:3f:3b:6a:6e:3b:34:80:e7:40:ed:74:69:51:45:32:b5:
37:28:5e:6e:6c:f9:ff:55:21:cc:b3:92:08:b9:ea:3e:64:91:
93:a1:09:87:85:30:d3:d3:8b:af:70:8e:81:29:41:09:66:3b:
da:bd:70:a0:dd:e4:9c:48:b6:89:9e:fe:1d:60:05:8b:22:31:
c9:89:38:91:19:89:93:2e:25:b0:af:e4:b0:8e:b3:0d:fa:fe:
85:62:0c:bb:41:41:f0:08:20:ca:ae:57:6e:75:da:5d:de:c6:
a9:39:b3:90:ab:0c:e2:9f:dc:fd:e1:4e:7b:2b:12:56:41:81:
1c:54:2e:d4:82:7e:9c:9b:f7:55:a9:c0:8e:f6:b6:7b:96:3f:
b9:7e:54:e0:65:c1:b2:12:23:04:af:5d:f5:ef:65:1a:3f:da:
8b:e6:58:05:4e:11:f5:ed:2b:1f:67:c2:ae:5d:a5:43:99:e8:
5b:bf:4d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:21 2025 by rpki-client