Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e88505d7-fde1-3aa9-9637-7dca5a0d0967.roa
File: e88505d7-fde1-3aa9-9637-7dca5a0d0967.roa (raw, json)
Hash identifier: NepT+mm2pFwg8Jl3LrM9q/s+ihWsBpsybBWHnmUHpH0=
Subject key identifier: 82:FD:F8:20:C0:23:1C:A4:80:E3:0F:95:AD:A2:0C:0C:A0:C8:3C:3C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EDFBD83C2A34D32A7ADB9B500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e88505d7-fde1-3aa9-9637-7dca5a0d0967.roa
Signing time: Wed 10 Aug 2022 12:00:00 +0000
ROA not before: Wed 10 Aug 2022 12:00:00 +0000
ROA not after: Thu 15 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.108.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:df:bd:83:c2:a3:4d:32:a7:ad:b9:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 10 12:00:00 2022 GMT
Not After : Sep 15 04:00:00 2022 GMT
Subject: CN=4a5f851c-ecab-472f-b394-1b3c060128ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:c8:a2:bf:da:4c:f9:d5:c7:ed:65:6a:ff:
8b:a5:e0:f6:4b:38:d3:0e:b8:ec:87:0c:c8:fe:f8:
ea:98:eb:7c:16:21:1a:65:d9:57:0d:e1:61:2d:30:
6b:33:bb:4a:51:f4:6d:47:bf:bd:bd:80:1d:b3:98:
1a:37:aa:7a:30:14:99:df:7a:c4:0f:ae:dc:c4:e7:
fc:99:5e:2c:05:6f:71:e1:84:34:7e:3f:88:3e:f8:
d6:ab:bd:3b:1f:84:cd:fb:67:14:e5:99:52:f6:79:
1b:bf:52:f4:af:08:e7:54:f6:e4:23:b5:f9:46:08:
b9:37:d8:14:63:09:2b:07:38:f6:d1:65:fd:cd:70:
b8:41:c0:d8:fa:b7:21:d5:2c:00:ac:ac:07:31:d6:
e9:1d:fa:2c:60:66:6a:a4:13:8f:47:2d:cf:ae:a8:
7d:8c:62:4a:e6:a0:6c:8a:2e:c0:a0:43:0f:46:3f:
6c:be:9c:74:47:21:cc:da:68:df:12:24:22:bb:bf:
48:90:b1:4a:4d:a7:cc:82:4f:a3:a6:58:b2:fe:92:
f1:08:9b:6d:29:97:c5:bd:ea:df:b3:79:2a:bb:e5:
e5:ab:da:77:9a:94:40:d4:d9:c3:20:e3:fc:88:7f:
52:0f:22:fb:a0:b8:49:cf:e2:b0:43:fa:6a:57:56:
a0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FD:F8:20:C0:23:1C:A4:80:E3:0F:95:AD:A2:0C:0C:A0:C8:3C:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e88505d7-fde1-3aa9-9637-7dca5a0d0967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.108.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:27:a8:fd:ab:16:7c:bf:0f:2d:78:06:84:45:11:5e:09:5b:
98:bc:7c:8d:f5:3f:e4:26:c2:2f:a4:ec:66:35:26:d1:03:09:
d6:8d:59:92:c9:80:a6:73:0d:38:23:fc:5f:6d:d7:cc:c7:88:
11:23:f4:77:c2:e2:34:45:4c:4d:2e:5e:77:8d:02:99:45:ea:
0f:99:55:9e:c4:c8:c7:32:ea:46:57:17:b5:06:3b:21:77:f6:
5d:6b:90:11:6b:25:8e:9d:2b:0b:08:7e:6a:35:ec:8e:53:9a:
63:fc:f7:12:75:6c:56:6a:74:65:79:8e:72:ad:27:28:bc:86:
ce:e7:e8:5f:41:5e:53:a4:e6:1e:de:33:43:9e:d2:be:5d:1f:
40:bd:2b:db:eb:a1:2f:58:53:3e:1c:e2:02:8d:99:7c:e4:14:
de:27:af:3a:f5:9a:6a:d6:b7:72:96:bf:13:ee:bb:f4:04:c7:
ce:9e:eb:d3:fa:bc:92:7f:34:6c:b9:7a:9f:2c:c3:3f:52:ed:
40:45:83:d0:2c:96:14:6a:d3:55:a3:66:bc:d5:ac:3d:6c:86:
fb:67:1c:7a:7d:38:57:b8:2d:04:af:94:e2:b2:47:fd:95:dd:
8b:70:ea:ac:33:60:c1:01:4d:44:eb:bb:2c:09:04:b4:c1:4a:
a7:68:14:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:46 2025 by rpki-client