Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f897aa81-1a71-3103-a7c9-8a0f0647a07d.roa
File: f897aa81-1a71-3103-a7c9-8a0f0647a07d.roa (raw, json)
Hash identifier: FEMETL9xf/jSmjKZYNQBQrp2lrdZnqamjQrasUsnLLc=
Subject key identifier: C3:D2:98:E2:34:60:5F:E2:08:E5:85:C7:9F:72:4A:E0:40:58:E1:64
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E1A14BAA2025F9774A35CC560
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f897aa81-1a71-3103-a7c9-8a0f0647a07d.roa
Signing time: Wed 01 Jun 2022 12:00:00 +0000
ROA not before: Wed 01 Jun 2022 12:00:00 +0000
ROA not after: Thu 07 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.119.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1a:14:ba:a2:02:5f:97:74:a3:5c:c5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 1 12:00:00 2022 GMT
Not After : Jul 7 04:00:00 2022 GMT
Subject: CN=4d0ac7ea-8e11-428b-9880-a8017acce951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:57:38:03:9f:c1:ee:bd:7b:6d:35:61:fe:
a9:be:06:46:77:66:16:56:bb:9b:72:d3:63:d3:4e:
c1:cc:a3:25:37:84:55:70:69:cb:0d:d9:a8:26:36:
4f:a4:5d:b7:3e:91:e8:fd:a4:77:9d:b6:0b:55:c2:
ad:ef:5a:60:db:a4:00:6d:ea:b2:69:85:61:78:5d:
60:63:cd:99:07:c4:8d:6f:c3:a7:0f:85:a4:c5:bf:
fe:88:e2:70:a1:02:98:1d:b4:27:dd:aa:69:31:42:
c8:ac:75:52:3f:2c:a4:1b:b0:28:a5:77:d8:26:03:
98:da:59:c6:19:45:46:5a:57:d4:e5:43:ce:a3:ca:
af:d3:43:66:4f:f0:6d:52:93:f1:68:13:a1:26:28:
52:8e:79:73:78:8a:cb:1e:20:56:34:83:fb:fd:0c:
9c:ef:71:8d:cb:de:02:9f:ad:43:ba:70:c4:49:4d:
26:30:02:1b:fc:b7:8d:97:79:d7:26:02:41:e4:ae:
8d:8b:28:1c:d3:ee:0c:72:29:10:c7:6a:c0:a9:6d:
40:bc:3f:ba:76:44:04:b3:ae:8a:bb:99:85:5c:1e:
32:ee:a4:5b:a9:bb:b2:9f:b9:e8:66:26:58:df:52:
7b:bc:28:8c:49:d3:3e:33:03:fb:2c:0a:fd:3d:99:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D2:98:E2:34:60:5F:E2:08:E5:85:C7:9F:72:4A:E0:40:58:E1:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f897aa81-1a71-3103-a7c9-8a0f0647a07d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.119.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:c9:8b:e3:2a:7a:75:f5:28:34:7b:9e:f4:6b:dc:1e:70:b7:
eb:b5:c5:34:61:c1:a1:ca:f2:8c:1a:dd:bc:48:1c:a3:c4:a9:
6e:e1:31:f1:18:d5:23:28:a7:85:89:ca:59:86:3f:ce:b4:f2:
65:d5:a1:25:17:28:08:93:a5:4d:69:7b:d4:d0:1f:7a:ba:0a:
7f:ee:6a:42:7e:b7:ec:4c:da:d3:78:56:d6:3a:a5:d8:2e:3a:
c4:63:75:cf:4d:0f:44:78:5f:11:c7:d1:c5:de:28:09:3d:a6:
e4:1b:d2:8a:d5:84:bf:77:0e:7f:a1:7e:cf:0d:02:6b:33:98:
a3:6e:b3:5a:6f:75:96:da:80:5b:29:10:8d:bd:e6:43:db:48:
e3:8b:5a:c4:09:a0:e4:d3:a9:89:8d:ad:8d:8b:4e:5a:4c:45:
93:b1:ae:66:f7:78:ec:a7:12:15:21:19:95:e3:df:49:5e:6f:
6a:fa:a8:f9:21:2e:bc:75:7a:45:48:14:54:5a:35:15:63:4a:
99:f7:1a:ae:3c:de:e8:7a:5f:e0:3f:a3:0d:91:61:53:01:65:
09:22:7c:1f:a3:21:3b:6c:16:93:76:1b:1f:39:8c:88:74:12:
f6:ad:35:f8:08:f3:56:6a:ab:11:e3:ad:7f:9b:51:59:99:e2:
34:03:59:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:07 2025 by rpki-client