Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/57da7ec6-ebb4-34c6-b572-c65b8af6cfc6.roa
File: 57da7ec6-ebb4-34c6-b572-c65b8af6cfc6.roa (raw, json)
Hash identifier: GbJTJX9QLZeHVGlaUS+bf8AtR9wyuMtg+v1/mp4HxBc=
Subject key identifier: 23:9A:4B:42:11:31:8F:55:51:29:A4:80:7A:80:A1:0C:F5:C2:C3:88
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584056807174D7E4A80F3DB87F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/57da7ec6-ebb4-34c6-b572-c65b8af6cfc6.roa
Signing time: Fri 23 Dec 2022 12:00:00 +0000
ROA not before: Fri 23 Dec 2022 12:00:00 +0000
ROA not after: Sat 28 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.52.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:56:80:71:74:d7:e4:a8:0f:3d:b8:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 23 12:00:00 2022 GMT
Not After : Jan 28 05:00:00 2023 GMT
Subject: CN=f405bb1b-6a61-4754-acaa-4b73041e613b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:41:bf:c6:28:9f:4b:2e:bb:e2:2c:ff:d4:ef:
17:2e:b0:6f:57:b0:cf:13:52:16:5f:7d:d1:15:86:
a2:7b:48:9b:fc:f8:ae:b1:bd:93:68:80:0e:73:5a:
86:8b:66:ae:2e:4e:28:a8:b4:7a:6f:fc:ac:44:a4:
26:ca:da:00:91:08:88:44:aa:96:08:69:5f:94:a6:
af:2e:70:55:79:40:bb:87:40:c9:f5:bf:b4:78:f1:
1d:46:fb:5a:c1:9e:34:15:ca:1c:8c:07:e7:90:74:
99:87:4b:4f:d2:d4:7c:0c:5c:28:52:cb:cc:64:6d:
d4:5f:e6:21:70:f0:38:2d:50:52:d1:69:f7:a0:85:
cb:77:e8:f1:f5:51:e6:5b:29:a9:84:af:12:5f:b3:
f5:c1:95:9d:c0:09:1b:25:e0:c4:06:4a:40:f4:6c:
f5:22:2c:97:c9:17:04:87:10:75:f4:c0:f1:06:15:
0a:e4:dd:a4:bf:2b:77:5b:76:c2:34:c6:92:92:99:
04:d6:14:ba:ea:9b:47:44:a3:70:ca:1a:ae:f7:08:
53:7c:c7:74:f1:c4:36:a8:9d:91:09:8e:87:0c:d2:
23:96:45:79:54:0b:8e:1a:7f:46:70:af:e0:3c:46:
b3:8e:d2:85:bf:f1:e5:2e:ec:78:22:f1:de:ca:af:
af:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9A:4B:42:11:31:8F:55:51:29:A4:80:7A:80:A1:0C:F5:C2:C3:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/57da7ec6-ebb4-34c6-b572-c65b8af6cfc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.52.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:8f:e7:c7:a6:d0:d9:39:7c:76:da:5c:90:81:71:3d:2f:e4:
da:97:6e:52:33:6f:76:be:b4:5c:bc:bb:11:6f:b4:ad:25:00:
4e:6a:d2:4f:e2:81:98:46:8e:09:51:eb:37:be:cc:dd:af:86:
a2:72:43:ec:a0:aa:1c:3b:29:b4:a4:c4:82:db:3c:ad:34:0c:
a3:64:7e:b3:6f:71:27:b7:11:a8:ef:c0:3a:34:a2:82:7a:8c:
d9:62:0f:95:16:4c:ea:be:1a:07:32:bc:90:9e:34:20:c6:ba:
46:28:ff:3a:43:e6:7f:7f:bf:9e:e1:15:02:b7:48:5e:11:96:
d2:64:d5:a2:5f:49:cb:4e:95:6d:80:20:ae:e0:31:5a:93:22:
88:5f:0b:fd:44:67:73:69:ab:1a:8a:5b:f3:55:db:d3:21:e9:
49:76:f3:fd:a8:10:03:fd:c2:3c:48:ed:1e:79:bd:da:41:4c:
f2:62:0e:7e:5c:8b:93:0c:e6:48:51:6d:40:da:52:b3:75:2d:
50:8f:d7:5f:0e:f4:86:0d:03:ec:66:f3:98:83:00:fc:eb:4a:
77:9c:fc:d1:39:7d:7c:cc:74:98:1c:dc:42:02:3c:e1:4b:a4:
7f:c3:ad:f3:ff:97:50:93:20:a3:8e:3d:b5:c4:e7:8d:b4:a4:
91:f0:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:49 2025 by rpki-client