Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/633dcb59-eb13-3353-a1bb-37cad2d0c8b4.roa
File: 633dcb59-eb13-3353-a1bb-37cad2d0c8b4.roa (raw, json)
Hash identifier: kh/Srbadz1uXvtFAcTg5UrLwtPSvwvSnPuRmTFrij6Q=
Subject key identifier: 6D:C8:89:D6:27:5B:3C:6F:2C:2A:18:50:07:43:96:E0:1B:C7:48:84
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CA11C3800AB5819A258CF5600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/633dcb59-eb13-3353-a1bb-37cad2d0c8b4.roa
Signing time: Tue 18 Jan 2022 05:00:00 +0000
ROA not before: Tue 18 Jan 2022 05:00:00 +0000
ROA not after: Tue 22 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a1:1c:38:00:ab:58:19:a2:58:cf:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 18 05:00:00 2022 GMT
Not After : Feb 22 05:00:00 2022 GMT
Subject: CN=6bf359e6-d61c-47a3-a80d-feda15491f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:24:e5:de:51:3f:8e:f0:19:c1:c0:0a:d9:
f5:f8:ce:54:2e:46:6a:b4:53:f2:cb:86:84:1c:d9:
c7:86:b4:26:65:78:52:97:01:27:70:16:c6:53:42:
40:87:c1:ba:0c:1f:66:de:d1:b0:69:fc:84:c2:1b:
c8:19:3a:6b:9f:60:80:c6:d5:0c:e8:22:37:0f:26:
19:2f:a7:73:e9:3a:e4:10:d1:2c:be:60:a8:73:95:
e7:4e:00:ec:3f:bb:ff:74:92:4a:71:16:8c:46:a7:
cc:c3:d9:21:7c:c7:3c:f3:b6:b6:60:a3:fd:6d:95:
61:ba:55:6e:70:b1:23:91:22:bd:bd:03:b3:46:94:
90:3c:12:73:8e:43:74:b0:ff:fc:07:05:f7:d3:71:
bf:8f:69:09:35:90:4a:d1:25:62:e5:28:c2:9b:d9:
b1:77:80:3e:44:89:d8:35:87:47:a5:da:f7:06:76:
97:c8:53:fd:dd:14:4e:fb:68:60:91:09:07:a5:c3:
54:e8:2f:7d:46:38:7e:af:ea:d5:11:82:dc:ee:8c:
90:fd:55:38:f1:7c:e3:73:6e:94:b8:9d:39:05:80:
04:16:85:20:9d:59:85:e9:44:ae:4f:dd:09:04:6a:
6b:9c:25:ee:13:a6:a0:cc:15:02:62:52:dc:54:34:
2a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C8:89:D6:27:5B:3C:6F:2C:2A:18:50:07:43:96:E0:1B:C7:48:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/633dcb59-eb13-3353-a1bb-37cad2d0c8b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:6b:53:b8:13:71:73:9e:0a:88:eb:20:60:5b:d1:45:df:3a:
8f:4e:c1:a5:59:03:d3:c4:29:b7:7d:4e:7c:0a:ac:d3:64:33:
2a:c7:61:ae:62:e5:9e:60:3d:91:ce:2a:11:00:53:c5:44:ad:
26:29:3e:93:85:d5:8d:b4:3f:96:ca:31:00:4f:53:28:b7:90:
e3:2d:1e:01:ab:1d:5b:d1:4f:e7:5c:f7:00:33:8d:26:82:20:
dc:31:95:b0:e9:ff:11:20:03:bc:c4:b8:8d:b3:7b:7a:92:db:
b2:c8:dd:9a:b4:85:42:29:28:25:66:7a:c2:0a:a9:e1:a3:95:
76:e3:59:bc:1b:6f:d9:f1:1c:f7:0d:0d:5c:4b:6a:b5:5a:0a:
36:42:16:76:79:f4:64:2a:69:c4:88:1a:d2:53:43:47:ec:de:
dc:af:0e:01:8e:09:6e:bd:b9:1b:14:07:bd:4e:79:b3:43:dc:
46:85:56:92:d0:4f:ce:4b:f4:69:55:b2:ef:50:70:66:69:e4:
24:9d:65:65:91:a4:69:29:ad:1e:4d:6b:a6:18:57:80:34:65:
d3:21:41:e2:6e:bc:d5:8a:16:80:f9:69:a3:e1:65:f8:83:80:
1b:2b:b2:39:39:b1:2d:f6:da:93:8d:90:cd:fe:a6:2d:1a:2f:
78:bb:a7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:59:04 2025 by rpki-client