Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/657d4a7b-67fd-301e-9c21-1c77f590c2e1.roa
File: 657d4a7b-67fd-301e-9c21-1c77f590c2e1.roa (raw, json)
Hash identifier: 5EnCkz8VFLXSyhF21LfnOiEjqtmnIi2ZIPjdqKouYGM=
Subject key identifier: B0:11:BA:1C:C0:94:5B:71:01:CE:D0:38:BA:F6:75:12:9B:70:27:2E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2F66AB5227B0C652E989A580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/657d4a7b-67fd-301e-9c21-1c77f590c2e1.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:66:ab:52:27:b0:c6:52:e9:89:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=2da94840-684a-48f0-8500-1f0ecc826bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2f:9a:ab:eb:07:16:11:d8:4c:31:78:60:c7:
1e:35:6a:6f:fd:ac:7f:e1:fc:ec:de:72:ec:d3:f7:
40:f6:0d:4e:fd:70:53:2b:f3:93:35:12:25:d7:2f:
9a:bc:1b:58:3f:22:1a:09:b9:bc:79:d6:6a:22:06:
aa:71:4c:52:91:18:72:8d:29:2f:c3:4b:d3:4d:9d:
d4:9e:0e:f1:e4:2c:88:a6:9c:6a:28:a1:bf:2f:b4:
b5:f8:06:c2:45:8d:63:65:ef:fe:e3:9c:84:ad:1a:
43:09:07:0d:3f:2c:58:81:54:21:0a:8a:ec:f7:e9:
a7:57:c8:13:2b:e6:15:0f:9b:a4:2a:ee:4d:40:7c:
6c:dd:ef:be:e8:76:49:5f:a1:93:37:e8:08:17:12:
76:0f:e6:72:b2:87:a4:89:9a:ab:45:ba:08:7c:85:
40:3c:34:b1:bf:3e:37:b5:46:6a:9f:83:a0:4c:8a:
20:cb:fc:c6:b7:30:af:21:92:40:3b:8c:9c:3d:f8:
24:bb:63:89:19:30:ec:75:c1:7f:f5:0d:ad:8c:af:
9e:1b:b0:e4:73:cb:5d:31:60:83:5e:59:16:82:cf:
87:8f:47:2a:53:e8:9e:43:fd:28:33:f0:2f:34:46:
2e:1b:19:33:5f:84:7f:5a:de:9f:72:28:68:d1:c6:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:11:BA:1C:C0:94:5B:71:01:CE:D0:38:BA:F6:75:12:9B:70:27:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/657d4a7b-67fd-301e-9c21-1c77f590c2e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:82:a3:cd:67:58:4d:43:8b:d3:72:f6:db:f8:67:2b:9a:26:
44:cb:97:98:53:d4:09:23:3c:b6:4c:40:dd:92:86:de:8d:66:
46:80:03:8b:b4:5f:d5:b8:83:ce:33:4f:0f:11:60:fb:45:7a:
4e:16:d2:ae:71:45:31:08:ad:67:51:47:eb:45:26:52:37:57:
e2:ac:64:3f:0b:12:f9:52:f0:c7:f7:ed:d3:95:59:18:e1:9b:
03:2a:81:36:c6:b7:b5:fe:d0:e5:75:17:82:b3:77:7c:96:46:
5c:81:0b:17:dd:1e:4e:d4:d0:fd:2b:91:ce:73:a4:da:0c:10:
b9:00:82:7f:c4:95:b8:06:ea:f0:6f:bc:96:dc:82:ef:a1:6b:
2d:da:da:e1:9a:f4:c7:1c:4b:84:d6:b4:d2:cb:71:c6:d8:aa:
d4:ea:54:a2:3a:73:9a:6c:8e:2c:4f:a3:de:9d:67:73:89:48:
99:4b:25:e4:60:9b:1b:af:5f:02:e7:e0:81:75:7a:27:a9:3e:
9d:c8:08:7c:ee:4a:bb:5e:fa:f9:b0:54:84:cd:43:b0:04:e0:
ea:b7:5d:6a:e1:24:86:4e:00:94:9e:d6:be:c6:e1:5f:61:70:
c5:d4:ab:04:6b:ae:82:e4:24:d7:9a:6b:90:cf:15:c4:3d:c9:
78:36:7e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:29 2025 by rpki-client