Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1ac780a-5494-3c8e-b047-05af2ec0e576.roa
File: f1ac780a-5494-3c8e-b047-05af2ec0e576.roa (raw, json)
Hash identifier: pL4u85N2L0ySYrZSnXBKL99f51iv+aPAqbnv34FWzkg=
Subject key identifier: 32:40:3F:4F:C5:82:AE:13:DE:03:76:73:84:24:4F:F7:AD:C8:17:FA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0842347CA661ECBE4BFBA300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1ac780a-5494-3c8e-b047-05af2ec0e576.roa
Signing time: Thu 24 Feb 2022 05:00:00 +0000
ROA not before: Thu 24 Feb 2022 05:00:00 +0000
ROA not after: Thu 31 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:08:42:34:7c:a6:61:ec:be:4b:fb:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 24 05:00:00 2022 GMT
Not After : Mar 31 04:00:00 2022 GMT
Subject: CN=a08ebab4-0ff5-4c85-b65c-dd51bb244376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:52:63:79:c3:c0:bc:29:85:49:5b:cb:4b:62:
20:c6:c3:5b:a4:89:a6:79:60:14:89:7f:24:e6:c8:
18:9b:54:ff:96:37:1f:f8:be:b7:9f:27:34:78:a1:
6f:8c:4d:3a:0e:d0:5c:29:6f:0b:ac:03:ca:4f:29:
1d:df:0c:fc:d7:40:b3:20:38:a5:06:dd:f6:b5:0f:
be:09:6d:6d:3d:0a:de:24:23:b7:2c:26:6a:32:8c:
ff:13:68:cd:01:db:f0:87:fb:68:2c:1c:6c:90:9b:
a4:33:ae:dc:67:76:05:63:89:5e:9f:5e:9f:75:48:
ca:cb:78:54:b6:b6:08:9f:d7:e2:8e:4e:e9:4a:f0:
75:58:e0:0a:79:67:01:84:f0:d7:a3:f8:b2:00:ce:
ee:d8:64:93:01:96:a2:7e:4c:2d:64:90:1b:ee:1a:
6a:29:84:4d:72:b7:16:54:2f:c6:30:80:a8:83:ef:
95:92:9c:73:a9:95:d0:96:87:16:70:87:45:52:10:
83:d0:7c:4f:18:37:9d:25:6e:b9:27:03:04:50:71:
3f:88:d4:49:e6:21:c9:50:4c:41:a2:38:9c:32:2c:
8f:a5:70:63:e8:cd:9a:c3:a9:18:4e:e3:d2:05:4d:
6a:73:3f:ab:4e:49:cf:f5:24:76:1e:3f:a3:3a:0c:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:40:3F:4F:C5:82:AE:13:DE:03:76:73:84:24:4F:F7:AD:C8:17:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1ac780a-5494-3c8e-b047-05af2ec0e576.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:d0:c9:ad:18:83:c1:a6:ed:6e:65:bd:e0:43:b2:36:88:44:
5e:b9:4d:bc:c8:aa:f3:3f:4e:e7:82:b7:cf:2c:4c:4b:04:c3:
3c:9f:b8:2e:b9:88:0f:c7:1e:49:60:ee:83:1c:42:04:04:f4:
52:7c:99:ca:f0:a9:98:94:c9:aa:1f:b7:d4:b2:2c:1c:78:12:
34:ca:57:46:5b:d0:63:8e:56:46:64:b1:57:d0:68:33:13:66:
53:9c:1a:67:cf:fa:8b:a0:38:63:34:fa:1b:53:ea:82:db:f3:
04:92:29:c8:84:66:b5:bd:d8:f1:8c:da:5e:a0:8e:de:a7:10:
08:5d:d1:92:fd:1a:8b:93:b0:e5:9a:1b:5e:e2:ee:c9:fd:21:
37:b0:18:85:a2:72:fe:24:d1:aa:53:00:2c:ad:85:09:e1:9e:
1e:36:ad:0d:75:0f:74:f6:a1:8b:1d:cf:cf:c8:97:3e:f3:c4:
db:c8:31:7d:4c:67:57:d9:be:0b:77:d4:36:52:bc:4d:b7:84:
ee:50:a9:a3:1c:58:64:94:ec:9b:c3:e8:64:a7:c8:de:54:b6:
ba:5b:49:cc:d9:2e:01:e6:3e:f3:6e:78:e3:62:c2:6f:b8:8d:
80:61:34:6d:2f:6c:f6:20:7c:fc:13:13:6d:db:dc:19:96:81:
66:c5:f6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:11 2025 by rpki-client