Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/923f57b0-64c9-3b61-8724-6db6b2abfc7a.roa
File: 923f57b0-64c9-3b61-8724-6db6b2abfc7a.roa (raw, json)
Hash identifier: 22Ig+RGiBkoTn0hQhcW8rW+NcLKKEVAi50Z4rAi5cbM=
Subject key identifier: 05:E5:13:0D:25:98:FD:6C:64:1A:A9:96:3B:34:BC:3C:EF:24:30:70
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F04B3B79A13D8DFADECAC2780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/923f57b0-64c9-3b61-8724-6db6b2abfc7a.roa
Signing time: Wed 24 Aug 2022 12:00:00 +0000
ROA not before: Wed 24 Aug 2022 12:00:00 +0000
ROA not after: Thu 29 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:04:b3:b7:9a:13:d8:df:ad:ec:ac:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 24 12:00:00 2022 GMT
Not After : Sep 29 04:00:00 2022 GMT
Subject: CN=f3a95625-299a-4d65-ad34-0fe041901918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:5f:dd:e5:fa:f1:84:f6:51:5f:19:1c:8a:
23:1a:79:15:d1:54:ad:20:77:98:0f:55:96:0c:56:
44:a9:85:3e:a5:00:c9:cd:96:27:02:5e:5f:ff:6b:
2f:cc:03:19:35:2f:5e:38:e3:a3:29:58:22:61:81:
df:84:7a:0e:15:eb:1b:0d:42:0a:7e:48:28:98:90:
47:14:ea:88:1b:ce:ba:f7:af:90:21:18:d0:f1:e6:
93:7e:a9:c2:58:c2:c1:b1:c0:48:04:06:ce:0e:47:
41:2b:af:98:d2:80:fc:f4:b1:db:50:0d:0c:26:f1:
86:15:58:7d:1c:6c:c9:8d:41:a9:6e:fd:e3:7e:72:
12:f8:f8:8e:86:88:78:43:41:b8:c6:9f:bc:83:9c:
66:2c:47:be:92:d6:c9:4d:ac:7a:57:62:e1:88:5e:
69:cd:5b:14:00:bc:11:11:3b:30:b7:c2:22:de:66:
4d:f7:e9:65:da:6c:1c:33:ab:d5:5b:67:cd:52:d2:
05:10:71:15:0f:a4:79:08:ad:99:12:fd:56:52:c4:
33:8e:19:16:59:49:8b:f7:e9:88:d4:b0:84:fa:81:
59:38:f7:6e:bc:65:f3:43:b7:1d:4d:fd:c5:48:1b:
c6:50:db:21:0c:1b:f1:92:5f:ec:b5:2a:2d:39:89:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E5:13:0D:25:98:FD:6C:64:1A:A9:96:3B:34:BC:3C:EF:24:30:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/923f57b0-64c9-3b61-8724-6db6b2abfc7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:64:86:fe:38:43:da:f1:0f:a1:9d:79:ca:83:98:73:28:50:
25:0a:37:74:26:31:07:c7:35:13:aa:62:6c:52:d8:8b:31:ba:
53:85:2e:ab:73:64:6a:a4:81:a7:75:14:53:3f:66:e3:e9:8a:
dc:f2:8c:81:9c:51:0f:f7:7b:3a:a4:84:d4:00:c9:8e:46:ce:
2c:65:eb:a1:11:7c:fc:b9:fe:d8:6e:39:fe:dd:a6:71:b0:28:
f7:5c:49:ca:e2:e5:84:7d:0b:39:01:6d:d9:f6:90:35:08:b4:
68:93:3c:2f:6d:9d:eb:9f:56:5a:ed:06:32:08:04:df:68:42:
70:2a:db:30:1f:e8:a7:a7:be:dd:a8:68:1b:ad:e4:7c:e4:39:
4e:a4:d4:b7:04:a7:b0:e6:78:73:6d:b2:36:1e:7a:bb:2f:26:
f0:fe:9f:63:b2:d5:1d:41:b4:6f:2d:d9:57:45:3d:89:d8:1f:
a3:fa:a9:12:75:c8:31:11:12:0d:bb:3f:3a:82:9e:45:2d:53:
58:75:a0:de:76:9e:42:df:a6:d4:0e:e1:20:ab:de:89:f3:37:
91:9b:40:95:39:f4:d0:c8:87:75:c2:ad:67:bc:5c:c2:6d:2c:
dc:7b:a5:8b:ac:c6:a3:38:75:71:2b:cb:cb:15:b2:79:85:2e:
ac:08:90:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:10 2025 by rpki-client