Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02b45078-b85b-3fc3-b2bf-54b408ffec6c.roa
File: 02b45078-b85b-3fc3-b2bf-54b408ffec6c.roa (raw, json)
Hash identifier: vZO4o/Lx3d4SOb2eiAc0fN0O6XAb6qeirxkloSOKZS4=
Subject key identifier: 50:1A:11:74:23:C7:40:64:02:09:CD:28:72:39:85:01:B3:99:AE:FA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408BB843158BE84CB86E667540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02b45078-b85b-3fc3-b2bf-54b408ffec6c.roa
Signing time: Wed 11 Jan 2023 12:00:00 +0000
ROA not before: Wed 11 Jan 2023 12:00:00 +0000
ROA not after: Thu 16 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8b:b8:43:15:8b:e8:4c:b8:6e:66:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 11 12:00:00 2023 GMT
Not After : Feb 16 05:00:00 2023 GMT
Subject: CN=6a2343d0-b1ab-4f3f-ae09-4ebd2d120a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:b9:47:ec:b8:6d:68:d3:65:3b:8e:a1:20:
b6:06:f5:8c:6c:5b:eb:3d:f8:e5:90:2b:3b:e0:36:
2b:8d:3a:2d:70:30:2c:dc:a1:7b:cb:eb:eb:f0:57:
a1:83:8b:62:74:69:47:6f:33:f6:68:46:db:a9:85:
07:5e:6a:ea:81:fb:c7:57:95:10:3b:08:b7:ef:23:
57:b5:06:0e:2a:14:19:41:83:c2:8f:79:be:3e:82:
a7:83:14:bb:0d:c8:a9:6e:6f:c3:e6:a9:20:95:be:
9c:5d:08:00:7e:24:eb:46:43:39:77:d5:43:a3:07:
70:e5:b4:36:0f:04:3c:fe:f4:a3:6a:23:ac:82:18:
d3:61:4f:29:18:b9:6e:3f:d3:8a:03:b4:96:01:bb:
0f:df:c3:b3:0f:0a:56:2c:1f:91:20:98:89:40:b6:
b1:4a:d1:4a:8c:eb:b9:98:1b:48:6e:6c:df:cf:5e:
64:5c:89:7c:34:7f:a2:2c:1c:54:67:03:1d:64:c6:
89:17:fa:0b:7b:6e:d2:32:98:5a:4e:6d:7e:1e:ed:
94:dc:42:27:bc:e6:c3:f8:b1:63:91:b8:12:07:80:
45:7b:7a:09:35:b2:fd:aa:e1:9d:27:11:ca:c5:44:
e7:d4:5a:43:70:09:a4:34:9a:5a:0e:fc:e2:78:50:
d5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1A:11:74:23:C7:40:64:02:09:CD:28:72:39:85:01:B3:99:AE:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02b45078-b85b-3fc3-b2bf-54b408ffec6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.22.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:88:61:10:18:df:93:68:51:c0:19:86:5c:71:77:dc:0b:25:
e5:70:9c:a1:85:d0:8a:d1:69:8f:95:d0:77:b5:e7:9c:ed:13:
d4:bd:09:0e:6b:43:31:73:24:e3:06:23:22:1e:b4:7c:a0:9e:
b2:59:66:f8:4a:0c:3d:d7:62:f8:5b:cf:bc:09:06:89:80:d8:
6b:a0:c0:0e:62:f4:81:2b:44:f7:f0:d3:34:cc:c6:e8:a2:6f:
28:b3:de:31:d7:97:8e:fd:fa:36:70:ff:24:90:6d:ea:2e:01:
f6:9e:0b:bd:43:08:24:2a:1e:57:bd:a3:cc:bc:f3:73:44:af:
3a:02:53:0f:97:1f:be:2c:ab:3b:1b:73:fb:20:60:0f:05:d9:
20:59:85:d1:2c:68:09:8a:25:e0:fa:46:15:8f:12:5f:c9:92:
c0:a6:19:de:da:94:38:b6:fd:d3:04:1a:c6:c5:6c:eb:8b:36:
17:43:ef:e8:db:00:f4:42:a2:a8:52:7a:db:dc:9c:77:13:aa:
4b:9a:c4:22:b1:37:17:4b:ec:6b:36:50:ea:3f:9d:a8:22:02:
0b:9d:3b:12:74:37:9c:14:02:ce:f9:cf:62:1a:3f:fe:58:2e:
7d:d6:51:ea:04:60:2c:6b:bb:f5:75:97:dd:ba:de:35:0c:dd:
8a:0c:41:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:56 2025 by rpki-client