Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f84e3191-8441-3b8f-be94-acc3dac25489.roa
File: f84e3191-8441-3b8f-be94-acc3dac25489.roa (raw, json)
Hash identifier: lJukn8q47Ba+GEmr2GywquiT054qgexmvgEuP2MSzx4=
Subject key identifier: 04:2E:B4:4A:34:BD:11:02:10:E3:15:B3:53:87:5C:E5:C7:F3:BB:61
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840167F13E2B8ADDE5FFA38C400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f84e3191-8441-3b8f-be94-acc3dac25489.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.61.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:7f:13:e2:b8:ad:de:5f:fa:38:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=a0d14c9c-336e-4cc7-9d1d-6a4e7861134b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ff:33:d1:4e:71:94:a4:8c:ca:de:a4:de:83:
1e:e5:55:f7:2e:35:fe:f6:dc:1f:94:d3:ce:16:76:
59:77:f6:52:6b:1d:43:83:a6:59:f5:bd:b7:74:99:
b8:04:2b:76:c9:6a:c2:8c:0b:93:d5:19:a6:75:26:
cc:a5:56:1c:b4:7d:2e:d8:71:57:31:41:65:6d:13:
2c:cf:45:31:db:23:8f:82:74:b2:db:7a:c8:9f:6f:
b1:37:db:87:9f:0a:f9:ad:7a:21:f6:9c:42:8f:11:
4f:04:57:7a:d0:f2:d2:08:b8:4b:fd:8a:2d:65:a0:
ae:a8:5b:26:6c:86:db:ef:2e:4d:aa:16:25:ca:0f:
6a:b0:7d:5a:b9:f2:b1:86:70:48:e4:a2:8e:cf:5a:
32:0c:42:b5:28:ff:49:2e:65:80:84:a0:45:1f:f6:
6c:e2:6b:31:b8:bf:82:4d:da:41:bf:8e:e5:91:4b:
a6:b5:c0:56:12:69:fb:f7:c7:82:ff:b5:79:c6:28:
5e:d4:2c:12:07:88:4f:67:2c:af:fa:44:cc:74:56:
c6:be:3e:9f:ed:d3:28:4a:7f:03:59:8c:5b:95:a4:
a8:da:ec:fb:e4:d6:ec:09:c7:1f:cc:5f:ff:58:e4:
9e:1e:c0:8a:ec:55:c4:d8:81:71:b1:b1:18:c0:58:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2E:B4:4A:34:BD:11:02:10:E3:15:B3:53:87:5C:E5:C7:F3:BB:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f84e3191-8441-3b8f-be94-acc3dac25489.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.61.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:70:fb:78:45:4c:46:da:c6:5a:7a:6c:fc:45:3a:60:49:00:
30:b6:8e:8c:61:8f:93:bc:54:8c:03:7d:f1:b8:10:90:09:be:
fb:dc:8b:7f:bb:1b:fa:ff:07:ba:65:6c:1f:b9:6e:c0:e2:85:
2f:32:4d:69:e3:18:b4:65:c9:7a:d6:ca:2b:cf:77:d1:cd:9a:
48:76:06:ba:1b:7b:f0:89:f4:0e:25:6d:73:5e:9a:e2:ee:21:
20:7c:03:b6:c9:28:07:ab:c7:f4:76:05:77:bc:7c:68:48:55:
ed:bd:fa:48:ef:f1:c0:a7:fd:5d:96:d8:b4:a3:88:cd:9a:c5:
31:50:3f:d0:7d:63:26:be:93:93:7b:c7:bf:38:2f:b6:ae:12:
bf:ec:b3:ed:8d:09:3e:97:36:76:8c:44:59:c0:4f:cc:62:d6:
1b:41:0f:a7:5b:fd:57:06:24:72:81:b6:c8:3d:51:94:08:6c:
9f:0b:ad:7d:ee:e8:79:49:df:84:bb:de:63:bb:b8:eb:b4:aa:
cd:99:13:7f:1d:bb:55:e5:ed:9f:1d:ec:ad:ea:bc:90:7b:33:
29:d2:51:9e:56:e1:76:0e:47:4b:f5:9e:b1:28:ac:cc:50:be:
8f:de:be:66:56:2e:45:27:09:4f:5f:e4:bc:81:a7:a7:a0:a3:
e0:9f:88:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:57 2025 by rpki-client