Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa
File: 9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa (raw, json)
Hash identifier: 7101+ax62oa05+YmDa9GKbXVzemfOfp7auU0YWtWQpQ=
Subject key identifier: 5A:3B:79:E6:43:1F:E9:E7:91:F9:8A:E9:C7:BF:6A:87:0B:40:ED:C8
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F432858484C10262E0798208D4D6E2780
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 60410
IP address blocks: 16.10.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:26:2e:07:98:20:8d:4d:6e:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e154748b-b827-4efb-a20f-2996a173734a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5d:81:98:fe:24:79:7a:1a:ef:2b:3b:60:57:
22:37:50:6d:54:29:b7:2f:34:eb:77:3e:08:2a:fe:
6c:8d:b4:5d:0b:60:32:b3:53:8c:ee:d7:4b:9e:bf:
59:d8:51:54:7d:81:83:5f:76:9f:d1:5c:ff:8a:5e:
b6:57:48:92:a8:26:97:20:13:c9:8c:5a:86:1b:58:
4f:a4:24:69:98:13:e5:f7:3e:75:e5:10:a0:5f:ed:
13:3d:9c:1f:6a:b5:1f:77:55:03:a3:72:62:58:f4:
4c:6f:d8:75:6b:05:a9:7c:68:f0:17:54:9b:20:39:
40:bf:21:30:27:c2:8d:4d:e7:70:95:59:2e:07:26:
b6:9a:b0:bd:a5:74:21:b5:14:70:c6:dc:0a:bc:db:
dc:4d:89:90:a6:91:3d:e0:4a:0f:03:56:c0:d1:17:
4d:b2:24:a8:a0:4b:3b:43:b6:47:a0:5a:70:94:43:
2d:6b:ac:e6:b6:df:b4:c1:90:0f:fa:7c:7f:88:88:
5e:c0:df:ee:74:f1:49:db:36:1a:f3:11:99:8c:2a:
89:26:71:ca:8f:db:75:b1:e3:fc:2e:a4:ca:d7:28:
09:49:ad:73:24:12:a9:e1:b1:8f:5b:6c:56:99:49:
6f:d0:09:24:98:03:f2:29:94:f7:8a:b2:a6:b3:70:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3B:79:E6:43:1F:E9:E7:91:F9:8A:E9:C7:BF:6A:87:0B:40:ED:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.10.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:83:e6:f5:e5:90:0c:f0:77:54:aa:b2:4c:99:f9:3d:33:2a:
43:40:89:1b:9c:63:b7:95:bd:b5:b3:ee:f8:6f:3a:37:87:13:
55:d7:54:cf:6b:de:f3:21:d5:4c:4f:48:33:d7:fc:04:27:0e:
e7:af:8f:b4:bc:c1:54:cc:9f:a9:7b:15:6e:f9:56:7f:d7:ec:
ed:6b:d7:21:5b:b6:e9:10:eb:f4:50:84:1a:d6:50:4a:fa:fa:
95:e8:ca:0f:f5:a9:31:ad:01:bd:ca:ac:9b:2d:91:b5:2e:dd:
43:a3:04:c5:92:68:df:d0:0a:d2:6c:61:07:7c:d7:44:25:97:
59:0b:96:21:6d:dc:66:d3:20:52:be:d1:a4:ac:b7:14:3b:02:
ef:f2:77:62:3f:d7:04:f6:31:80:d5:ec:d8:7a:70:7f:2d:bb:
ae:2c:bb:98:3b:0e:aa:8e:d2:9d:ad:1f:5a:8c:1d:be:4d:ce:
93:28:7a:a8:80:95:24:13:8f:96:f6:c9:56:e0:e8:a9:ff:63:
cb:19:12:e8:87:35:23:bb:95:72:6a:11:ab:09:af:e8:16:41:
c9:bb:e7:79:5e:d6:e0:fb:31:c7:d8:be:7d:a3:74:51:c1:50:
d3:62:1f:86:4d:f5:ef:10:f1:bf:48:75:dc:f1:27:96:fc:18:
95:18:9f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:21:51 2025 by rpki-client