Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/459f13ea-9cc4-360c-9ffb-ea41b7aac55e.roa
File: 459f13ea-9cc4-360c-9ffb-ea41b7aac55e.roa (raw, json)
Hash identifier: tAUhA7CvLhg3MFp5wdQiqjHZ0vM+lZt/vLfv1lfwugI=
Subject key identifier: 6D:CE:41:94:4A:CF:8D:BF:26:8F:8D:07:4D:C5:7C:31:0D:7C:BD:F0
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F432858482EC00B9992DCCED54E273F40
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/459f13ea-9cc4-360c-9ffb-ea41b7aac55e.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 400624
IP address blocks: 16.0.57.0/24 maxlen: 24
16.0.58.0/24 maxlen: 24
16.1.96.0/20 maxlen: 20
16.7.6.0/26 maxlen: 26
16.7.6.160/28 maxlen: 28
16.7.6.176/28 maxlen: 28
16.103.138.0/23 maxlen: 23
16.143.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:0b:99:92:dc:ce:d5:4e:27:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=d66e0951-d08f-48ac-acf9-b810eea3c0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:06:01:93:fc:d8:e2:d4:4f:9a:ee:ae:03:
2b:08:2b:55:d6:48:fb:8a:07:a4:5c:1e:2f:47:8f:
30:ee:35:16:17:ae:cb:b4:91:c5:89:f1:af:8a:e0:
2c:2f:de:ad:a7:10:99:61:32:51:2c:9c:6a:be:5c:
ce:09:0c:03:66:28:0d:f5:bc:3c:e1:2d:88:93:37:
ff:d2:91:8c:87:8d:c6:50:93:a4:99:45:2e:91:b4:
47:3d:59:49:cb:cd:34:e7:db:07:19:0e:3a:53:2f:
5f:31:9e:7b:79:6f:a6:37:4f:01:81:7e:e3:5c:22:
64:55:47:43:1c:3d:7c:ec:e5:6d:a6:3f:1f:f7:bd:
30:d4:ca:ae:f6:78:36:72:01:87:ac:7a:2a:47:23:
1f:13:73:b0:82:94:eb:33:64:16:1b:b6:77:90:e9:
63:9f:b3:9b:a3:f7:69:19:60:60:e6:5a:34:2f:7c:
37:a9:2c:8c:4f:91:16:7d:66:4d:a4:88:38:7d:93:
c8:8a:c1:71:82:00:39:08:95:e1:13:e8:02:70:92:
ab:34:64:b4:ad:e2:66:29:69:86:6e:02:d0:d9:8f:
52:62:fd:fc:db:42:a6:5e:20:49:34:6c:3d:ea:e5:
42:9a:4a:8a:b6:20:d5:6a:32:33:3c:b8:c3:bf:03:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CE:41:94:4A:CF:8D:BF:26:8F:8D:07:4D:C5:7C:31:0D:7C:BD:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/459f13ea-9cc4-360c-9ffb-ea41b7aac55e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.0.57.0-16.0.58.255
16.1.96.0/20
16.7.6.0/26
16.7.6.160/27
16.103.138.0/23
16.143.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:2c:01:a4:c8:df:b0:86:80:88:16:8f:72:61:e8:16:3b:e1:
f0:64:23:4f:b5:59:6f:a8:26:03:2f:5e:a9:6c:0d:50:03:8d:
88:fa:83:a4:ec:f8:d4:08:f5:6f:95:64:a8:5c:ca:4b:75:dd:
b5:33:f7:0a:fa:9a:70:47:94:c6:95:d4:42:16:3c:6d:1c:be:
0d:9d:17:d2:aa:dc:11:80:b4:ef:4b:f9:3f:d2:dc:37:04:08:
d6:0e:6b:44:1b:fd:cc:90:4a:44:ff:b4:58:a1:d6:8e:f1:59:
4d:67:42:5e:5b:ef:b3:8e:7f:5f:a9:ae:21:e2:f2:0c:82:d4:
76:5c:05:c5:b5:43:2e:94:b7:61:e7:27:28:5f:84:bf:71:2e:
0e:ca:45:a9:02:7e:ec:59:8b:8e:30:7b:79:1c:38:06:70:d4:
70:4b:c8:12:62:b0:6b:cd:54:43:1b:33:c5:a6:2a:be:f3:af:
e4:cb:8e:f9:2c:0b:c9:71:75:fb:fc:1b:58:d9:2b:ca:e4:ff:
92:b1:2b:a4:dd:4b:62:ca:19:f9:cb:8b:53:aa:7e:46:54:cd:
63:ed:2f:38:a8:54:7b:ac:71:a9:af:97:e7:61:12:0f:73:c9:
ee:10:76:e3:76:4b:66:63:eb:77:fd:a1:c4:0e:66:1e:e9:3a:
ee:89:0e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:27:19 2025 by rpki-client