Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/69ffc3fb-b463-3f7d-94ed-85f9ebb9d64d.roa
File: 69ffc3fb-b463-3f7d-94ed-85f9ebb9d64d.roa (raw, json)
Hash identifier: pj9O3zVt3DSugUEQSaFcOLqCTreysVXdcBxh/IC9z2Y=
Subject key identifier: 76:87:27:AD:5B:26:2D:F6:B8:DB:2A:64:BE:7E:FE:D6:2D:9F:F8:D3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584024834EAF2A60C4E72D89F3D8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/69ffc3fb-b463-3f7d-94ed-85f9ebb9d64d.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:83:4e:af:2a:60:c4:e7:2d:89:f3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=6a07d83d-3821-4692-9269-b2d59f8d7cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:2d:fc:03:7d:1f:1a:8a:1a:52:eb:8a:04:
99:25:3a:91:93:de:e5:b9:25:42:d2:44:a5:da:a4:
32:f5:04:71:eb:94:3a:33:a5:cb:32:b0:97:e5:4b:
60:17:f9:cc:98:4f:d3:6c:dc:82:87:6b:5d:d7:4e:
65:54:2b:c9:1b:9f:25:54:84:e4:40:9a:7e:df:44:
4e:a2:4d:86:f9:4e:88:d1:1e:14:01:21:10:b1:c6:
d0:5e:44:53:49:a4:32:2c:de:0b:e5:c9:bf:fc:4d:
16:0d:95:c0:5a:8d:57:89:c8:04:97:8c:d3:d1:07:
dc:af:20:03:d5:a3:79:97:ca:9f:44:39:7a:3f:f5:
41:61:6d:cf:e7:a5:de:47:df:50:8b:d3:7a:38:b4:
ff:24:a8:da:d7:95:51:84:b6:1b:f9:f7:f8:52:5e:
5b:0b:7e:62:25:b5:8f:b5:93:2d:65:33:44:7b:9f:
a9:79:cb:71:8f:3f:0a:c1:45:05:f9:a7:c9:de:5b:
ee:48:47:14:60:af:5a:64:3b:f9:5f:30:3b:1e:f8:
4a:66:99:6e:f3:48:e8:7e:70:fe:5f:5a:81:43:cb:
92:5b:82:04:08:06:4a:46:7f:aa:36:f2:05:08:55:
f6:0a:33:70:6a:c8:fa:3e:10:76:29:46:8a:87:52:
df:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:87:27:AD:5B:26:2D:F6:B8:DB:2A:64:BE:7E:FE:D6:2D:9F:F8:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/69ffc3fb-b463-3f7d-94ed-85f9ebb9d64d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:e9:9d:b4:61:dd:cd:31:7f:35:80:57:0e:a9:ac:c6:88:78:
04:76:87:c5:01:4b:ae:53:56:67:d8:60:21:ed:9f:70:8a:23:
8d:e5:ac:c3:0f:68:7f:c4:99:ed:64:b7:f0:57:bd:65:36:9c:
99:f2:2c:49:a5:4f:ee:e8:12:b6:c3:37:46:79:9b:19:d5:29:
ef:0c:11:d6:16:4f:56:a8:e6:2f:67:17:18:77:ca:1c:d4:78:
75:8b:c6:80:93:45:61:99:98:ee:c3:57:2c:99:17:e4:f8:20:
79:a4:fd:9e:ae:63:42:ed:f9:fb:05:94:e0:be:0e:31:56:91:
38:53:08:df:f1:fd:89:c3:2f:81:a2:e9:22:a1:68:9e:ad:58:
ab:f1:4e:60:74:d5:f5:8d:0a:16:92:b4:33:35:83:a9:15:19:
2c:0c:74:3f:e1:f9:86:00:ff:ac:75:f4:c9:07:80:ae:bb:9e:
af:98:a5:8d:9a:c6:e0:38:62:c3:eb:2d:cf:10:ce:11:e6:57:
12:1c:2d:01:da:eb:da:33:43:52:cd:fc:79:95:74:dc:ad:75:
b4:ce:66:3a:d0:b7:65:74:e5:ca:b5:e0:8c:c8:59:50:33:74:
e2:d5:7a:e1:b6:1b:fe:b4:75:be:71:d3:1d:bb:9a:49:9d:0e:
09:f7:e1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:16 2025 by rpki-client