Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec3e687a-746b-39b7-b857-d687d87652f4.roa
File: ec3e687a-746b-39b7-b857-d687d87652f4.roa (raw, json)
Hash identifier: 6fDD11cqf7qAZ6J3vh6nJs9XfqDo34Xua6nFpEWWx/A=
Subject key identifier: 6F:9E:6E:F6:71:FB:B8:E2:00:F5:D9:2C:C0:61:BF:B7:36:D5:5D:6C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C0C36705539EA1958733BE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec3e687a-746b-39b7-b857-d687d87652f4.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c0:c3:67:05:53:9e:a1:95:87:33:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=33f74d19-a441-468d-9924-ffc2d75bfc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b7:e9:9d:0c:90:f2:18:99:65:26:61:4f:48:
73:b3:84:96:be:5d:ca:0d:81:72:f8:7a:32:c8:7c:
7d:c9:0e:ac:84:29:10:4d:b7:7b:9c:d9:74:ec:d0:
ac:b6:28:88:41:be:6f:df:3c:af:ee:9a:6c:e0:c4:
34:7b:2e:a4:a1:94:60:2a:ae:a4:20:d4:ef:5c:0b:
42:24:e9:c1:6b:ac:5f:a6:28:b7:5a:5f:1a:74:25:
ff:46:62:e3:63:64:81:00:2b:c3:df:2f:61:a4:7a:
48:5f:c9:4a:83:8a:ba:67:94:6e:8d:ab:5d:ec:b0:
b9:d4:04:24:4f:25:1d:62:1b:20:d3:2b:ea:db:9e:
24:31:1a:4d:f8:07:68:65:07:59:94:e0:05:56:52:
03:e7:73:b1:2c:2e:78:fe:4d:3d:72:ce:c8:0f:9a:
2a:e3:22:24:e0:a1:23:c8:cd:18:7c:5e:6f:71:a1:
20:92:42:f2:ce:cd:14:89:d5:0d:52:69:59:9d:e0:
41:8f:61:aa:d0:04:4a:63:9d:25:ac:19:98:a3:0f:
26:42:4e:08:a8:1f:bc:13:29:7e:48:57:86:64:cb:
af:6b:99:36:55:3e:e1:de:12:26:24:c8:34:4f:ff:
ce:03:f5:fe:13:25:f4:23:76:f1:37:2c:f4:3e:d8:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9E:6E:F6:71:FB:B8:E2:00:F5:D9:2C:C0:61:BF:B7:36:D5:5D:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec3e687a-746b-39b7-b857-d687d87652f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:95:79:01:28:91:19:e1:ca:8f:00:70:a3:48:f3:6b:74:75:
c7:23:bc:09:07:7e:90:e1:19:b5:c0:8f:5a:ea:65:3f:74:6c:
29:6a:d8:6a:26:6d:35:a2:8f:9b:c5:a8:ca:f0:9a:23:12:c5:
bd:a0:f6:4a:fd:da:68:57:52:92:62:70:a2:72:0a:b9:ce:cb:
51:9a:2f:5a:c7:f2:25:d8:a6:47:6b:c7:b1:2b:0e:1e:34:e1:
c3:ee:d6:57:03:6f:09:db:44:40:5a:27:4a:80:76:c2:69:21:
bf:35:29:a7:02:10:ce:60:77:0e:fc:d4:b3:d3:84:a7:05:2d:
95:cd:78:cb:34:6c:cc:54:16:f2:5e:b9:a2:c3:34:42:96:34:
cf:fe:a9:8b:c2:b6:d8:84:a6:5d:ed:ad:8b:b8:c0:4b:62:cd:
01:94:ff:b8:87:83:cd:5a:49:bb:32:49:a8:e0:da:7a:64:96:
eb:2d:96:fb:b1:cd:f7:e4:be:3e:8f:4f:8d:f3:b2:98:0e:00:
a4:b6:3c:e8:f4:cf:7d:05:1c:14:41:f9:d3:e4:70:5a:d6:5d:
6f:bd:86:c7:47:81:f7:0b:0c:ea:51:ec:ea:c9:02:50:aa:4f:
d6:b9:e0:c8:79:75:d0:10:8a:93:53:9c:e6:de:80:7b:47:4a:
62:bb:e6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:09 2025 by rpki-client