Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/edf0c9e4-4d32-3af0-9d23-8b4633d231a1.roa
File: edf0c9e4-4d32-3af0-9d23-8b4633d231a1.roa (raw, json)
Hash identifier: P5adU4MrzPe2XJqOLkxlHGmSrX+L/8FQDh7nwLGz8D8=
Subject key identifier: 31:6C:F9:41:45:36:7A:C2:80:FB:BD:BC:E5:F3:94:A4:EB:E7:B4:4F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E229237804DD6C6DF3B4FDC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/edf0c9e4-4d32-3af0-9d23-8b4633d231a1.roa
Signing time: Sat 04 Jun 2022 12:00:00 +0000
ROA not before: Sat 04 Jun 2022 12:00:00 +0000
ROA not after: Sun 10 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.219.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:22:92:37:80:4d:d6:c6:df:3b:4f:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 4 12:00:00 2022 GMT
Not After : Jul 10 04:00:00 2022 GMT
Subject: CN=cacfb859-46a2-4fc9-81bf-2a1e6aaa0c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:71:d4:06:ff:be:72:79:d9:8d:3f:b5:c5:95:
24:43:3c:77:46:6a:ad:3a:48:1d:74:60:c7:a5:da:
52:38:69:68:2f:88:a9:8b:64:3b:d8:65:2a:0b:f6:
c7:6c:ad:6c:24:41:33:ec:9a:db:08:c8:f4:8e:10:
db:c0:91:fe:cf:3f:50:89:c2:37:07:07:72:b4:36:
b8:8c:7a:b2:d3:d8:14:34:b0:d1:06:36:a0:e6:45:
5c:17:06:44:82:0b:bc:28:43:e5:72:c4:20:d7:2f:
11:77:63:70:4c:b6:c5:40:8e:38:8c:63:e6:65:d0:
ef:8b:24:70:6a:42:43:da:d8:79:ec:07:2a:15:7c:
b8:33:2d:db:b9:2f:ab:17:85:c9:ae:6c:a3:41:53:
2e:64:37:b2:04:e4:97:df:b3:25:fe:40:44:ec:57:
5e:71:0c:f0:60:99:f4:7d:6a:e1:b8:c0:29:81:81:
3c:ee:20:ef:ed:22:e3:5a:69:eb:1f:89:3f:d2:58:
1e:5e:bb:a3:74:c7:f4:47:6a:6e:31:b5:03:0f:1e:
ae:92:3d:76:d5:66:45:8f:4b:d5:c6:9b:b2:1c:74:
ac:77:dc:3a:cf:ed:bf:ec:bd:2f:61:08:17:aa:8b:
6f:ac:ab:7a:b5:59:99:6c:87:fc:5c:41:a9:99:11:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6C:F9:41:45:36:7A:C2:80:FB:BD:BC:E5:F3:94:A4:EB:E7:B4:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/edf0c9e4-4d32-3af0-9d23-8b4633d231a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.219.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:13:55:45:83:66:d5:c2:bc:81:3a:4f:a4:69:f3:32:8c:75:
00:d6:92:b3:24:1e:9f:ea:0f:9a:df:a8:dd:1e:2e:78:dd:fa:
f5:20:82:74:5e:f9:04:96:e2:ef:06:be:88:04:76:34:94:28:
cc:df:53:71:7f:e5:3f:5d:fe:fd:9e:80:41:6e:33:fe:b2:bf:
e8:d7:c8:30:44:f2:30:27:7b:9b:4c:b3:ab:fd:9b:7f:3b:ae:
42:30:de:7c:53:55:ba:d2:4a:81:11:5a:b3:ee:41:39:11:06:
75:09:a5:61:1d:4e:fe:85:4c:26:91:5a:43:c5:0a:91:97:5e:
b1:d1:5a:98:b5:ad:56:f6:86:cd:8c:9b:01:33:24:0e:e9:73:
9d:5d:4a:9f:8f:7f:80:b7:73:18:98:67:b6:a3:9d:88:64:45:
32:d0:d0:0e:a1:60:7a:00:ba:4e:02:2f:4d:69:aa:98:98:e4:
2c:55:c6:40:4b:57:62:cf:25:15:d5:1d:9c:9d:c4:8d:5c:67:
e3:11:20:b7:fd:f5:34:a8:b0:b5:3c:61:fa:ca:40:be:a1:d5:
2a:2c:0e:ad:a2:77:e9:26:4d:0c:6f:1e:40:e9:35:39:49:39:
e9:69:cb:b2:3f:5f:e1:d1:12:19:ef:81:f7:81:d9:86:88:79:
d4:b7:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:08:33 2025 by rpki-client