Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2254949-83b4-3edf-95ce-a6803bc5978e.roa
File: f2254949-83b4-3edf-95ce-a6803bc5978e.roa (raw, json)
Hash identifier: sE2UCvNhFgJ+qvHFdr9cJLXYjop9qKA6av75MHEMgrM=
Subject key identifier: 1D:03:B5:9E:D3:55:6A:DC:14:C6:23:F8:C9:5F:41:8D:30:78:65:83
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401A82259E773D42BA5F3FE300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2254949-83b4-3edf-95ce-a6803bc5978e.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.108.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:82:25:9e:77:3d:42:ba:5f:3f:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=79a3e20e-23d6-401f-bbc9-47f76cc1465d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:69:c4:42:74:76:81:bb:62:c7:87:61:e1:74:
00:6e:10:13:d4:dd:ad:83:7c:52:13:ea:b6:2f:b2:
d6:d1:fc:e1:25:f1:b1:ac:09:40:48:f2:38:97:ca:
31:04:16:a8:e5:bf:87:63:0c:e3:df:14:62:ae:69:
08:21:19:75:96:ab:99:99:aa:32:6a:9e:7c:f8:25:
ad:ca:a9:1d:79:51:7c:ac:ba:29:46:7e:a9:a5:5c:
f1:3c:b7:c8:6b:fb:62:75:18:72:67:c9:e9:29:3d:
31:42:37:cd:cc:fb:7f:cc:cc:e7:f6:10:b8:35:ff:
ea:3b:34:57:6b:b2:22:35:92:dc:cd:91:a9:50:83:
ea:b6:44:b4:f3:d3:1f:f5:96:d7:1c:7f:b2:1a:b8:
16:ad:b2:dd:3a:95:46:b9:66:a2:1c:b7:29:25:d0:
0f:eb:2d:7a:ee:bb:37:a5:f2:bf:c6:ca:fc:fd:4b:
02:b4:9f:33:fd:7e:fb:8e:5b:0a:fa:e0:98:fe:8d:
52:7c:e6:ce:97:5a:53:dd:28:1a:ae:9c:85:4e:17:
05:d0:97:97:24:98:1b:d2:6f:f6:0c:87:ed:96:09:
bb:e4:9a:7d:fb:ea:09:02:ed:63:6f:67:99:56:94:
be:83:9c:e7:bd:cb:d0:04:0d:d6:84:92:b6:68:0b:
39:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:03:B5:9E:D3:55:6A:DC:14:C6:23:F8:C9:5F:41:8D:30:78:65:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2254949-83b4-3edf-95ce-a6803bc5978e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.108.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:29:28:12:c6:a4:2c:29:12:6a:79:a9:a0:ac:31:70:1c:e8:
0c:43:ee:a5:77:eb:ea:34:d0:d0:08:de:73:7b:e0:c1:d0:89:
43:b7:ba:44:e6:7a:56:71:a8:72:79:e3:2b:46:51:58:50:41:
b2:26:00:e5:92:25:bd:e8:55:43:d9:b3:4a:6c:f9:2d:6f:86:
34:d6:9e:c3:b5:48:2d:df:9f:d8:bd:3b:83:d2:0e:27:ec:2b:
fb:b9:35:c4:c8:32:b2:a1:c7:c0:10:28:46:23:93:2f:25:e0:
19:12:d1:94:f4:d9:ce:25:06:16:da:ce:57:5c:2a:16:51:36:
e4:86:d7:5e:1c:8c:a2:64:84:9e:07:46:cd:c0:09:c4:5a:d2:
8c:67:42:fa:b4:e6:d6:ba:a5:10:ec:46:a6:56:58:4c:0e:fb:
fe:0e:ec:be:a5:19:6f:40:47:3f:d1:6c:25:13:0a:37:dc:4a:
b6:a5:6f:1b:9d:a6:f3:fb:e8:1c:64:f9:28:97:1d:f5:77:3a:
cb:be:bc:bd:fa:db:06:1c:d2:26:0b:68:95:54:28:c6:3e:1a:
c0:47:9e:f8:cc:3e:7c:86:fc:68:0f:35:50:f2:41:72:6d:2c:
be:a2:ca:73:cc:e0:5e:66:bc:32:91:21:03:c2:67:94:f3:0f:
96:b5:90:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:34 2025 by rpki-client