Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a73a623-24ff-3d10-a6a3-f0bef18d9063.roa
File: 3a73a623-24ff-3d10-a6a3-f0bef18d9063.roa (raw, json)
Hash identifier: prBX5/Q1ZnwFszNGtxFqLqRHCq0LSFAlCoYPR8YJ5i0=
Subject key identifier: 38:56:95:89:6C:B0:A5:59:78:C0:75:27:6B:3C:8A:2B:B9:49:90:C9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CEF29B803A9B0B9B6746F6B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a73a623-24ff-3d10-a6a3-f0bef18d9063.roa
Signing time: Tue 15 Feb 2022 05:00:00 +0000
ROA not before: Tue 15 Feb 2022 05:00:00 +0000
ROA not after: Tue 22 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ef:29:b8:03:a9:b0:b9:b6:74:6f:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 15 05:00:00 2022 GMT
Not After : Mar 22 04:00:00 2022 GMT
Subject: CN=10f23146-3995-46ac-bef6-9f1a3f7a86ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:b9:bb:1d:24:e5:15:ff:19:fc:5b:f5:4c:
41:e6:65:3a:90:fc:84:d2:b5:69:b3:8e:e2:10:6c:
07:93:c3:46:f8:d3:7b:c3:cf:0a:fb:40:3d:b6:8f:
c6:09:4c:42:ac:a5:db:9b:f8:a4:8f:ed:23:ec:a1:
69:d1:25:26:f2:32:ed:8b:3f:6f:f6:f1:d2:92:10:
59:ff:5f:ad:26:b7:df:f4:26:62:fb:0c:8b:93:38:
7e:fe:d7:b8:5c:af:c9:9e:17:0c:b8:05:77:7e:b9:
18:2d:e7:90:d4:eb:8c:05:8b:ad:0e:28:2b:d5:e4:
47:d4:f4:a8:5e:54:12:f1:85:db:f8:2c:61:c3:8b:
07:3a:7b:4c:cb:92:52:e6:30:a7:09:22:3d:6c:6b:
4f:f6:2b:a9:fd:18:02:e2:69:f7:a4:5f:6f:3b:41:
fc:11:19:a6:5b:bb:a8:e4:b0:d3:32:46:0c:65:f2:
b3:85:1b:78:37:4c:62:99:94:a4:3d:41:d9:83:4e:
36:26:cd:b6:f4:87:ea:1c:6b:c5:8b:db:50:24:0e:
a4:68:d1:6a:5d:f1:f1:24:0c:2a:4d:af:21:b9:2d:
0c:7a:c5:97:26:31:fe:cd:48:57:a7:b9:2d:16:5e:
3b:f9:56:25:48:88:55:d6:19:d7:79:64:bc:02:ea:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:56:95:89:6C:B0:A5:59:78:C0:75:27:6B:3C:8A:2B:B9:49:90:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a73a623-24ff-3d10-a6a3-f0bef18d9063.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:97:d5:4b:d2:ec:0d:71:70:b2:b7:a9:0e:ae:71:2e:7a:4f:
6c:d4:a8:57:08:65:58:45:bd:e9:df:70:22:f6:34:60:dd:3c:
88:d9:2c:37:a2:f7:29:81:b6:85:a9:3b:94:02:3d:70:23:4e:
1d:d3:5f:6b:60:d2:bb:bc:79:6c:e3:76:bb:7e:22:3c:ed:08:
93:ee:9b:14:d1:f2:f8:c9:bc:7c:7f:0f:22:7d:58:51:5c:63:
30:e5:cc:22:8d:74:9d:cc:15:65:8f:07:b4:e7:a1:ea:58:77:
fe:4a:1b:fc:98:04:47:67:27:c8:bf:d6:78:6a:52:a9:62:7e:
e1:4a:8e:0d:a4:e3:8c:cc:26:ef:7c:55:9c:37:4a:78:f4:4d:
cc:60:9f:2c:32:ae:f7:79:61:7b:26:82:ba:b7:7a:ac:c0:3a:
d6:2b:99:f2:f4:35:a8:82:d3:41:e3:48:97:5d:21:f9:4f:bc:
5a:0e:0a:7d:71:c6:a2:90:43:8a:20:8e:15:bf:73:d6:89:c9:
a1:7a:ec:2f:88:fe:53:d3:51:93:b0:70:33:8d:6b:a6:3a:5f:
f4:5e:e4:d4:29:ab:d3:81:41:3e:2b:d8:08:19:db:f2:86:05:
9e:e8:f7:f4:22:b2:5b:83:e2:84:76:ef:ea:e6:d1:15:31:9e:
bb:f1:50:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:09 2025 by rpki-client