Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f180d749-b5bd-3ea1-b5a7-a361058cc4ab.roa
File: f180d749-b5bd-3ea1-b5a7-a361058cc4ab.roa (raw, json)
Hash identifier: KR4bw6ZSwOjXutTU2BvX56JGy0bM3SlXyYmlIgJj+fE=
Subject key identifier: D7:5E:DF:A1:C7:76:0C:C4:0A:36:EB:FD:03:CA:37:5A:F4:C8:6E:A1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF2F774DB5E54AFE7A79EAA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f180d749-b5bd-3ea1-b5a7-a361058cc4ab.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.119.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f2:f7:74:db:5e:54:af:e7:a7:9e:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=2059ab0d-45d5-47d1-ae0f-6f179488291c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:19:14:63:50:cb:bf:62:1d:d7:02:2a:6b:e8:
b9:75:cd:eb:2b:3f:08:35:2f:8f:4e:ac:51:ea:21:
05:82:9b:db:0a:08:49:21:0a:ed:b4:e3:f3:17:76:
76:f2:b9:ad:1d:ee:cf:e8:ed:6e:8f:13:a8:25:fc:
48:97:a6:a3:90:a0:f8:4d:69:0f:89:ca:16:19:a7:
e7:31:14:cd:3e:1a:2c:96:9c:7e:7b:41:47:27:b9:
12:75:8e:cd:04:f7:df:24:8a:09:9c:1e:f9:bc:b4:
70:86:e7:83:92:08:00:e9:29:0a:62:c6:d4:1c:51:
df:4e:44:8a:6a:5d:15:95:38:2c:24:15:3b:e1:4d:
b8:5c:81:cc:b2:d7:48:65:73:a6:e9:e8:cf:1d:4b:
00:3f:c9:70:fa:10:33:f8:67:82:e3:dc:66:58:44:
44:34:94:05:03:e6:b5:73:14:79:11:4f:1a:74:41:
87:6c:18:89:03:90:93:ff:2c:b3:70:5b:7d:0d:70:
f6:0d:11:d4:14:ef:24:26:3a:22:28:f2:81:53:bd:
38:25:9e:f7:1b:5a:38:8e:78:ee:f4:39:22:e8:6a:
64:3e:76:46:b3:1f:6f:8d:23:03:13:88:f4:75:a0:
eb:70:6d:92:e2:ef:c1:a8:4f:c6:46:cc:f4:e0:cb:
f2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5E:DF:A1:C7:76:0C:C4:0A:36:EB:FD:03:CA:37:5A:F4:C8:6E:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f180d749-b5bd-3ea1-b5a7-a361058cc4ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.119.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:6b:03:fa:22:3d:28:ca:8f:76:49:0e:7d:3f:7c:04:89:e5:
0b:c3:c6:dc:05:e3:81:ab:e3:84:82:dc:dc:f3:2a:8a:a4:b7:
b5:36:8b:38:b8:67:7a:db:eb:ca:0e:4f:cf:39:91:28:d2:16:
10:a8:c5:b4:7b:b7:a5:f3:a4:7c:2e:49:a2:37:ce:97:a7:4f:
43:0e:61:f6:e2:fd:5f:61:79:75:8b:33:5c:3c:f0:78:b6:ac:
d2:e4:1e:72:b3:e8:7f:cc:ab:7f:0c:80:53:4d:66:a3:49:42:
10:e3:19:62:a8:c0:0a:f3:17:97:25:54:0c:b1:95:d0:d6:d3:
b0:f9:2a:92:40:e3:ce:1b:15:70:66:12:18:ef:c9:49:a7:75:
04:62:c9:f4:31:35:4f:86:0a:65:99:3f:f4:29:a3:e5:ae:71:
ca:29:59:28:48:bc:62:06:32:18:e0:b9:df:dc:3c:c0:46:42:
e9:cf:a4:21:3c:2e:81:bc:90:e3:5b:cc:92:16:54:39:5e:fa:
98:6a:37:c5:d7:de:03:5b:16:60:c2:c2:9b:af:a9:2e:4c:08:
ae:eb:27:3c:f2:22:98:17:7e:9c:97:3b:75:a9:74:53:1e:c4:
e4:60:cb:49:f6:d8:69:91:cf:aa:e1:f9:22:60:97:16:df:d9:
fd:f3:71:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:11 2025 by rpki-client