Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ff1d3ae1-42dc-3d02-a604-f24c3ed58461.roa
File: ff1d3ae1-42dc-3d02-a604-f24c3ed58461.roa (raw, json)
Hash identifier: iWkpr4mM4oE9eQgYZh/BFSN3Vr1SXojYbMp4b/gp2Z8=
Subject key identifier: 70:41:D5:91:03:87:58:3C:77:71:1B:80:72:F9:B9:09:BB:5F:10:D9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D21877896C1871109EAB80E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ff1d3ae1-42dc-3d02-a604-f24c3ed58461.roa
Signing time: Sat 05 Mar 2022 05:00:00 +0000
ROA not before: Sat 05 Mar 2022 05:00:00 +0000
ROA not after: Sat 09 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.28.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:21:87:78:96:c1:87:11:09:ea:b8:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 5 05:00:00 2022 GMT
Not After : Apr 9 04:00:00 2022 GMT
Subject: CN=bc324168-7e79-4583-ac37-f9dc4120b29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8c:25:1a:73:31:ef:e4:8b:1a:5a:d4:1b:e3:
a9:08:7a:2f:5e:a3:5f:fc:6a:7b:2d:1e:09:18:0c:
70:21:e9:7b:a3:30:67:35:02:0e:7f:79:b4:56:0d:
10:4b:44:5d:52:92:b3:f3:20:2a:2e:04:ea:70:15:
2f:8f:f3:da:13:d4:33:d8:b0:53:9a:7b:c3:f7:aa:
72:d1:6c:e0:6d:2f:ba:7e:1e:22:db:82:89:24:47:
0b:9e:4d:4f:ee:88:5d:d9:de:20:c7:ad:61:47:8a:
f7:06:78:12:27:06:d9:fa:97:08:bd:63:c0:8b:54:
4e:c7:fb:a6:4b:31:fd:57:6b:8c:9a:7e:f5:50:b6:
9d:8a:6a:f2:9c:e2:55:e1:c0:32:50:24:28:ea:ed:
4b:a5:69:95:f0:0b:62:bc:c2:e8:07:fa:f5:67:b2:
f7:78:33:a0:a4:f0:86:6c:5b:01:fd:38:5f:cf:9e:
33:5c:32:dc:4c:15:cd:cc:76:cd:e4:65:ab:7c:38:
35:e8:ac:4a:18:60:f1:90:b6:b6:dd:fd:5c:b8:31:
38:65:02:e8:54:ac:40:dd:5b:a0:ce:35:cf:7d:ee:
84:bf:91:84:da:9f:0a:0b:8a:38:ef:05:9f:84:ed:
90:99:0d:6b:b8:45:2f:2f:6c:62:c6:8a:57:e2:d3:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:41:D5:91:03:87:58:3C:77:71:1B:80:72:F9:B9:09:BB:5F:10:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ff1d3ae1-42dc-3d02-a604-f24c3ed58461.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.28.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:6f:4e:9c:cf:5c:3a:f3:93:d7:92:90:7c:ad:04:ae:db:58:
55:f2:d5:e1:7f:66:97:34:dd:92:e6:40:e5:f3:d6:9a:9f:dd:
c6:2f:6f:25:e9:aa:6f:ad:49:09:a9:6f:74:74:5d:3c:9c:85:
08:26:00:25:97:e4:4a:ae:2b:6e:e8:fe:1f:86:a4:9e:68:40:
d8:15:08:2a:ea:bc:db:48:15:e1:eb:2e:02:a8:1a:16:14:6d:
a4:a2:15:f7:6c:a1:b8:0e:2d:d3:b0:d2:42:32:6b:0f:d5:a2:
68:d6:48:9b:18:59:ff:f9:52:84:92:ef:9e:02:14:d5:68:af:
3b:5b:e6:4c:d6:d1:00:53:de:f7:84:37:c1:d0:d2:e5:31:fa:
f2:71:b3:e8:63:fb:ca:af:92:28:c3:7b:2b:96:5e:87:0c:5a:
28:92:b6:91:dd:b0:d0:98:65:72:e1:68:76:1c:34:75:ef:55:
11:73:0d:ba:cc:77:80:0b:36:76:8b:1e:52:cc:03:b4:5e:50:
7f:78:ce:d7:f8:77:32:06:2d:4b:c2:86:0c:d8:47:2c:ab:71:
f9:9d:14:60:cb:1a:d7:43:02:03:29:ae:10:eb:b6:2e:14:e7:
c6:9b:4c:78:04:8b:89:d3:73:05:f7:b7:95:b3:9d:83:62:fd:
67:7d:d7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:31 2025 by rpki-client