Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e52a76c4-77d1-3be2-b2d9-4a427befe0cf.roa
File: e52a76c4-77d1-3be2-b2d9-4a427befe0cf.roa (raw, json)
Hash identifier: 1NA3W0bJTrEkO4FkNnIjvnuBNWnY9bvhIfhebAeUr0U=
Subject key identifier: E0:C5:A5:C7:02:74:17:2D:24:DA:A5:F7:90:FC:A9:D4:F5:99:53:D3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CC813E64A4A05F5EC28F55D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e52a76c4-77d1-3be2-b2d9-4a427befe0cf.roa
Signing time: Tue 01 Feb 2022 05:00:00 +0000
ROA not before: Tue 01 Feb 2022 05:00:00 +0000
ROA not after: Tue 08 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.176.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:c8:13:e6:4a:4a:05:f5:ec:28:f5:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 05:00:00 2022 GMT
Not After : Mar 8 05:00:00 2022 GMT
Subject: CN=4df485b2-20dc-47bf-9114-797c2a89e6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:d5:21:42:f9:23:a8:1e:1a:1f:15:05:7c:
6b:5a:40:bc:8b:de:04:ee:ef:de:66:e7:b8:b6:8a:
64:fc:75:fb:1e:29:4d:ed:03:ab:e0:8c:08:1c:8b:
6e:05:92:79:a0:c1:4c:e4:f0:a8:f3:9a:1f:04:18:
90:6f:ba:f4:a7:0a:61:ca:cb:08:a5:da:a9:5d:52:
de:d3:04:74:21:3f:95:32:b5:43:ff:79:24:b2:00:
b1:df:0d:1c:0e:91:12:3e:42:c2:40:80:0b:5f:05:
d0:1a:54:6f:b9:0e:de:81:ee:de:1f:90:39:71:8b:
cf:f0:2c:45:a1:58:da:f2:0e:c1:b3:9e:82:c8:35:
7c:67:a1:f2:3a:64:c7:a0:0a:9a:fa:66:27:de:f6:
e8:43:ce:36:a1:2e:25:74:03:ef:5c:ab:fc:3a:c1:
09:06:45:2a:61:72:cb:ac:96:ac:a2:b8:81:21:45:
2a:36:c3:4d:c1:df:2a:08:54:bb:0f:14:8f:ef:bc:
57:f3:4e:3e:ac:a9:b9:60:96:1c:bf:d7:3d:53:c7:
55:4b:a4:3a:ef:e3:61:bb:d5:c4:46:b0:f5:9c:22:
e4:a1:fb:54:c7:be:6e:b6:ef:f1:f7:44:38:60:7a:
db:12:3d:06:a8:0e:37:bb:6f:b4:f3:ad:f6:b4:08:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C5:A5:C7:02:74:17:2D:24:DA:A5:F7:90:FC:A9:D4:F5:99:53:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e52a76c4-77d1-3be2-b2d9-4a427befe0cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.176.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:ca:21:f6:8d:df:bc:c3:a5:77:45:ed:f5:3c:e0:77:01:4d:
19:83:96:a7:83:f4:c7:9e:f9:2c:72:94:67:20:e9:eb:5a:db:
09:5d:31:45:44:14:3f:15:4d:31:9b:05:de:ff:60:6a:63:87:
f1:77:c1:7a:63:cf:dd:0d:12:4e:66:96:77:6c:b5:f9:ae:a1:
e0:69:87:a5:aa:70:d2:83:54:a5:04:95:05:97:d3:4f:2d:fe:
20:35:58:50:ee:cd:91:f5:da:77:f2:9c:81:56:69:ae:e7:85:
e5:28:4a:c8:84:b5:5c:2f:4b:a0:8e:8b:74:fb:fb:4a:87:3d:
6b:99:58:d0:d9:a5:c9:53:bc:fe:06:5a:e3:e1:65:22:76:c0:
88:b8:e8:65:13:0e:77:c0:c4:3e:00:7f:02:03:60:48:53:eb:
45:00:5f:93:5e:43:31:61:54:7f:a4:aa:bb:60:60:20:f4:d2:
da:a2:99:85:9c:02:ba:ec:0d:c2:cc:48:58:9b:bc:1e:a3:9f:
34:24:e2:13:13:c6:14:48:ae:3c:0d:ff:49:3e:3e:b9:9f:31:
a1:16:4a:e4:a1:01:5b:5e:3d:35:86:8b:17:44:1e:14:76:ea:
70:79:a7:24:12:bd:80:ed:df:fd:fb:13:d6:ca:3b:b4:cd:83:
ae:7d:a2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:18 2025 by rpki-client