Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f024c3d2-5d1d-3dd7-8d5e-b9d7d848e1f5.roa
File: f024c3d2-5d1d-3dd7-8d5e-b9d7d848e1f5.roa (raw, json)
Hash identifier: sm3tNcWwEzvUohrvKm+HrSEAQEgM3FP169rJUQ8Zi5g=
Subject key identifier: AA:6C:2B:18:52:D9:2F:F2:6B:67:9E:4F:97:4D:AF:D4:B6:5F:1A:E0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CEF30EBB45696E99A748EEC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f024c3d2-5d1d-3dd7-8d5e-b9d7d848e1f5.roa
Signing time: Tue 15 Feb 2022 05:00:00 +0000
ROA not before: Tue 15 Feb 2022 05:00:00 +0000
ROA not after: Tue 22 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.176.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ef:30:eb:b4:56:96:e9:9a:74:8e:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 15 05:00:00 2022 GMT
Not After : Mar 22 04:00:00 2022 GMT
Subject: CN=e5f383b5-22b4-454f-9d99-53f66c8339e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:30:31:31:5b:7a:8c:2b:54:1f:a1:4d:5c:
34:16:16:bd:e9:b8:b7:18:90:04:9e:17:cf:37:49:
47:aa:9f:1e:39:07:76:46:37:8f:d4:fc:5b:26:f4:
ae:06:ca:b5:b4:97:d3:d5:ab:38:4f:e3:d2:e7:28:
74:24:2f:9c:47:ea:99:79:6d:63:58:56:b1:78:10:
30:e6:c6:a8:2c:8c:a5:ae:bd:a8:ac:e2:bb:d9:ad:
3a:0d:f8:b6:94:cd:e3:a7:7e:76:55:eb:28:7f:1a:
44:ae:12:07:6f:0f:e5:47:40:cc:42:3d:a1:dc:bf:
ed:6f:fd:7b:d3:79:9c:42:a4:6b:31:97:37:12:49:
85:5f:83:fb:a4:b0:11:e8:46:b2:d8:c3:51:a6:93:
83:c8:47:7a:bc:fb:5d:b4:bb:97:6b:08:47:55:df:
d0:50:9f:b8:a7:1d:75:ef:77:ef:78:5e:70:cd:fc:
ed:c3:18:65:31:87:4e:3f:71:a2:46:06:54:48:f8:
ab:7d:2c:73:72:f9:40:5d:98:11:da:85:b8:c0:34:
95:27:57:a5:8c:42:ea:ea:e3:a0:64:a4:95:43:1b:
6a:c7:ce:30:0c:b0:23:f9:a7:7d:65:3f:1d:6e:01:
e0:2e:85:50:15:55:94:8e:6a:0a:44:d6:f2:04:d5:
5a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6C:2B:18:52:D9:2F:F2:6B:67:9E:4F:97:4D:AF:D4:B6:5F:1A:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f024c3d2-5d1d-3dd7-8d5e-b9d7d848e1f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.176.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:3c:51:59:da:60:00:e0:95:d0:81:38:06:01:61:67:83:ac:
ec:c9:bb:b0:44:f7:e8:d4:69:e9:88:46:74:e8:3b:8e:24:18:
0b:b7:95:1b:04:82:c2:65:01:03:fb:b4:77:2c:1e:00:33:25:
a3:ce:f0:5c:72:8d:30:99:63:07:45:0a:33:78:75:ea:8c:88:
8d:12:04:3d:85:9c:36:39:6a:96:c9:4c:da:d1:5a:91:3a:cf:
4d:fd:5f:b5:cd:33:b3:8c:9e:40:6c:26:10:e4:40:13:f7:a2:
8c:ec:bf:15:a1:97:d2:16:ed:a6:ca:49:3c:ab:c5:09:e2:a9:
28:8d:62:ac:2e:b7:4e:9a:d3:fd:69:49:65:c9:e1:42:f0:3d:
ee:cb:5b:fe:16:6a:f7:81:42:7f:2d:43:ef:e0:e3:e8:f3:c3:
4d:79:99:dd:d4:44:38:56:90:2c:a7:2e:b5:73:be:64:e7:5a:
f3:5e:37:69:39:65:41:f4:bc:79:d0:9b:14:41:74:e2:3a:fb:
89:2b:0f:de:1f:40:d6:43:fe:6b:c5:c3:c9:ed:32:fe:c1:a6:
df:7c:85:39:3b:75:82:ae:40:ca:07:ca:4f:45:50:87:09:5f:
f6:0d:53:92:a7:60:2f:e5:10:30:14:c4:57:29:1a:31:3a:2c:
61:ba:ef:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:29 2025 by rpki-client