Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/56e6ee6c-5cec-32bb-994d-3ca5d4e5be18.roa
File: 56e6ee6c-5cec-32bb-994d-3ca5d4e5be18.roa (raw, json)
Hash identifier: /L2mOj1WGhpufCHL91B89a+8Yfds1Bojo2+q7M0bnBE=
Subject key identifier: 31:7A:65:2E:91:09:7E:A7:12:77:B1:92:89:CC:D6:76:1B:8B:AA:22
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D07AD6B85AB99FF9154ABB4A8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/56e6ee6c-5cec-32bb-994d-3ca5d4e5be18.roa
Signing time: Wed 23 Feb 2022 05:00:00 +0000
ROA not before: Wed 23 Feb 2022 05:00:00 +0000
ROA not after: Wed 30 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.151.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:07:ad:6b:85:ab:99:ff:91:54:ab:b4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 23 05:00:00 2022 GMT
Not After : Mar 30 04:00:00 2022 GMT
Subject: CN=2313c9ba-ae9c-4b7e-8eef-5063f054f7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:76:cf:3d:53:ab:60:f1:51:89:74:9e:b5:
cb:a3:a2:3a:2e:b4:24:9c:29:16:b3:2c:ae:ff:33:
c4:6f:33:7d:dd:fa:76:b7:fc:08:bb:a3:ee:48:47:
aa:db:4b:53:2a:e3:19:1a:d6:52:cf:e1:5c:b3:ec:
02:f8:b9:99:b0:8f:aa:97:94:3e:c4:7c:71:42:da:
31:39:39:34:30:24:09:80:a5:07:2a:c8:bd:3b:37:
3d:cb:5f:9d:b6:2a:f5:7a:6c:1e:64:1c:36:f4:5a:
85:1f:23:45:5e:03:27:f9:0f:5d:db:43:71:41:70:
48:f5:d2:bc:9c:9e:b7:1e:c5:92:6f:c5:27:cd:bf:
ad:46:9e:82:69:3c:5b:e3:10:24:ad:e4:95:30:69:
47:ee:48:47:b1:62:9a:9f:3d:a6:53:3b:55:53:3e:
95:f2:94:03:96:16:98:3a:c8:cf:8e:34:06:74:07:
e6:bb:c1:60:f4:2c:45:ad:6d:64:3a:95:5c:e8:17:
b5:d5:65:77:79:e6:b0:15:5c:1e:43:58:8f:12:12:
59:9d:d0:86:66:6a:b9:f7:e2:73:64:20:e6:87:40:
3b:c7:54:b4:bc:09:89:67:5d:75:9a:37:28:93:a1:
67:f2:b7:2c:fd:12:b6:a4:0f:19:d1:49:42:58:93:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7A:65:2E:91:09:7E:A7:12:77:B1:92:89:CC:D6:76:1B:8B:AA:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/56e6ee6c-5cec-32bb-994d-3ca5d4e5be18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.151.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:c6:dd:9b:c9:81:de:ee:76:95:47:11:5a:d5:05:d7:80:fe:
f2:e7:68:f7:2a:8a:f9:ea:f0:4a:51:d1:27:30:37:19:62:f7:
64:d4:92:9a:14:e6:7c:01:6a:df:ef:3e:5a:8a:bd:94:fd:c5:
4e:0c:a4:c8:29:c5:0b:11:40:2e:db:77:aa:a2:a1:c9:f2:51:
f2:49:6b:ba:bb:18:39:0a:32:be:0a:e5:97:1f:32:83:ef:7d:
49:ae:30:0d:b0:47:6e:d5:94:2f:bd:b2:82:26:47:9a:15:24:
e0:8d:08:75:62:04:2e:92:87:53:1a:ff:48:31:2b:90:7a:ab:
71:9d:52:d7:e2:62:8f:18:60:fe:20:95:f3:be:a6:3b:81:eb:
c1:76:68:64:f1:22:a0:80:42:53:29:15:dc:43:c6:bb:44:d1:
12:a1:64:67:0e:37:3d:3c:5d:bd:c0:05:ca:07:f9:de:be:bf:
74:66:24:ed:de:f4:a6:96:08:a6:cb:69:3b:39:21:f4:9f:1c:
f2:c9:b6:09:8d:cd:80:6c:94:7b:21:d6:f0:60:ae:3a:30:92:
50:48:31:37:2d:40:27:59:13:15:1c:f7:e0:3e:4e:78:cd:2a:
bb:81:fe:79:86:86:df:96:85:5b:66:1f:72:b6:8d:99:a5:98:
39:42:57:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:43 2025 by rpki-client