Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f4adb081-cc4d-3ce6-8689-d344c0422db6.roa
File: f4adb081-cc4d-3ce6-8689-d344c0422db6.roa (raw, json)
Hash identifier: t2IYUXKbd1Jr0LXsnK9U9B/xycWLDiZaRRDe0Jc6RBM=
Subject key identifier: B8:0F:D6:A4:D3:FB:20:0B:61:B4:8F:65:5F:C6:87:5F:51:88:A4:10
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E4403CFB9270EF182C2F57AC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f4adb081-cc4d-3ce6-8689-d344c0422db6.roa
Signing time: Thu 16 Jun 2022 12:00:00 +0000
ROA not before: Thu 16 Jun 2022 12:00:00 +0000
ROA not after: Fri 22 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.189.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:44:03:cf:b9:27:0e:f1:82:c2:f5:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 16 12:00:00 2022 GMT
Not After : Jul 22 04:00:00 2022 GMT
Subject: CN=fe0977f9-8fbb-4519-ba77-2a744cdb9e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:c1:98:d6:0d:26:8f:b1:cd:bc:ca:79:b3:
3e:a3:80:a3:42:06:66:6f:fd:cd:b7:39:29:37:19:
ce:a5:1a:67:24:2c:0f:45:9e:0d:39:99:8c:6c:0c:
a7:85:84:2c:7c:45:2a:9b:af:a3:01:24:57:97:a6:
d3:48:d3:c9:bf:c0:36:ac:3e:31:55:e7:cc:13:95:
1e:ab:16:28:80:de:a3:1b:ee:1e:4d:63:7f:f5:02:
b3:48:3f:c8:5b:9b:3c:11:79:7d:16:1d:ff:13:be:
6c:fc:d5:c4:40:54:57:90:4f:cd:05:32:54:92:04:
70:82:fa:83:ee:92:c4:34:45:d5:fa:30:ad:cb:05:
eb:55:bb:61:5f:84:80:5c:f9:16:e1:ff:fa:b3:39:
43:23:30:1f:1b:24:25:e4:0c:52:c3:f8:bc:9a:1f:
fa:90:c5:88:9d:02:b0:b7:a8:28:79:7b:e0:e2:1a:
83:1d:72:f8:00:85:5c:6c:f3:1f:73:80:74:83:65:
87:cb:9f:09:29:94:de:da:64:e5:56:1c:db:49:12:
98:94:05:ce:5f:15:d2:a4:44:13:cc:49:67:44:b9:
4d:07:e3:33:02:42:e3:ac:5a:36:1d:b6:f0:cf:80:
d7:34:bc:99:46:1e:19:67:9d:e2:df:09:05:f4:1a:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0F:D6:A4:D3:FB:20:0B:61:B4:8F:65:5F:C6:87:5F:51:88:A4:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f4adb081-cc4d-3ce6-8689-d344c0422db6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.189.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:97:b5:2f:63:2e:8b:57:29:4c:5e:6a:4c:eb:33:ce:a3:ff:
f7:7d:f5:dc:88:49:17:63:90:95:59:e7:0f:fd:8a:e8:14:ce:
16:a0:62:cb:4c:f6:aa:83:e0:f3:41:1b:9b:80:09:e2:8c:02:
df:10:a1:6d:34:54:d6:90:c4:22:53:47:bc:83:26:5a:aa:f9:
6d:a3:e0:5a:a1:4d:4f:ea:cb:61:6f:f6:ad:92:38:b7:70:ea:
b7:0a:7d:98:57:e2:1d:64:ee:cb:0a:8c:99:46:2f:51:83:90:
0c:b1:e6:cf:bd:37:99:3e:de:bd:13:53:f5:b6:33:26:46:7e:
f7:c7:96:b9:e7:6f:dc:dd:f1:2b:68:7b:db:db:ea:07:99:b6:
e7:94:46:d2:e1:6b:8f:87:4e:93:48:64:54:aa:c9:7b:53:6f:
3f:cd:59:89:1a:54:23:5d:69:a4:66:1d:cd:72:c2:7c:9e:f5:
d0:d7:b2:4a:98:9d:a6:03:c5:d7:70:2b:11:2a:2b:fa:cc:bf:
99:48:0e:88:54:e6:87:88:ed:e3:2b:eb:83:90:9d:c1:a4:4b:
25:bf:10:d4:c6:d3:fd:7f:af:70:a8:bf:59:61:8a:f0:50:2b:
45:cb:91:12:32:30:88:dc:1c:1e:84:dc:43:92:57:8e:3d:39:
1e:7b:fb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:16 2025 by rpki-client