Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/92b9646d-119c-3e2d-affa-4e358db4559a.roa
File: 92b9646d-119c-3e2d-affa-4e358db4559a.roa (raw, json)
Hash identifier: lYzAUV1l1351npgryzlAi+j18jF9pzSkmzMul1yk5oo=
Subject key identifier: 28:89:21:2A:F2:A4:CE:B8:92:6A:54:6B:54:23:8D:D7:15:CD:B8:D7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584024831BDCC0EDED3CD5080880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/92b9646d-119c-3e2d-affa-4e358db4559a.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:83:1b:dc:c0:ed:ed:3c:d5:08:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=2a85e444-4a7d-4dc3-806d-d77e05ade298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:fa:cc:ca:c2:dd:9d:9c:23:6f:c4:20:71:
ce:47:be:d8:5f:3d:39:58:5b:85:ed:e3:dd:23:f6:
46:4d:5d:08:a9:be:e6:ec:df:49:4a:18:49:c2:7b:
9b:e2:f7:69:63:68:a4:e8:dc:00:01:13:31:a0:e8:
94:f1:93:ae:09:f2:a4:d9:be:30:88:31:b3:95:10:
ec:d2:a7:fc:88:21:8b:c0:7c:62:8b:0b:40:06:b5:
3e:11:19:19:5f:18:c1:28:3d:c4:52:86:7c:84:ab:
44:70:b0:4b:16:ee:f7:7a:7e:b4:24:bc:cd:ac:0b:
00:0e:24:3d:77:88:dd:61:22:f6:1b:5c:ae:7a:3b:
bf:c4:87:af:e6:63:b3:cf:d0:36:7e:ee:03:cd:54:
63:78:51:8e:3b:81:15:b0:0b:1f:18:39:fa:2f:d0:
ff:1b:87:42:86:08:38:be:22:0f:b1:77:91:a1:c1:
0a:fe:f9:b7:9f:79:14:f8:c8:fa:0e:b0:2b:84:d8:
29:07:56:f5:17:30:06:2b:13:73:d5:d9:19:b2:74:
b1:ec:81:83:43:bc:b9:60:e5:b5:70:76:ba:15:f5:
d9:40:10:d0:d4:3c:0b:51:35:d1:2a:b4:29:98:d9:
65:33:31:c5:ec:9d:02:06:48:30:5f:72:3a:fd:e2:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:89:21:2A:F2:A4:CE:B8:92:6A:54:6B:54:23:8D:D7:15:CD:B8:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/92b9646d-119c-3e2d-affa-4e358db4559a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:8b:b8:42:9a:d7:fe:22:eb:68:0e:5b:1f:49:73:ad:0d:da:
50:59:d8:68:1a:37:3f:46:d6:ee:55:3e:33:cc:8c:6f:5c:dc:
cd:bd:1b:44:59:86:c3:bb:1e:70:53:32:ab:ed:fc:58:42:7f:
ca:ac:8a:63:1e:92:6e:88:40:d2:59:bf:af:f3:06:50:cc:2b:
75:d3:ec:7a:f3:c7:ab:7b:aa:65:41:92:81:09:d8:bf:7a:30:
83:5f:e1:9a:87:29:d5:2f:14:89:7c:7b:31:b4:a0:7e:79:28:
1e:be:62:e5:15:d2:b6:59:d6:f5:ae:ee:0c:64:c1:d6:fd:7c:
fe:4c:e3:7c:39:62:9d:eb:c1:74:8f:7e:10:3b:4a:ff:1b:19:
40:5b:61:7b:12:a2:45:6f:b0:c1:a0:c5:81:93:b1:4f:c8:de:
7a:38:95:e5:dd:07:91:ad:35:cf:03:16:42:b4:0b:be:01:78:
d3:aa:d5:45:4e:e6:4e:72:c0:02:eb:72:44:e2:3f:ff:a4:95:
80:69:a3:f9:63:f4:24:e9:53:6c:54:c7:2d:52:66:5d:55:12:
13:01:46:44:55:f2:ba:89:6e:68:2b:08:a1:bf:29:c1:95:cc:
20:4a:25:3b:0a:24:6d:ef:79:75:6b:8a:ef:a6:6c:63:eb:37:
5f:ff:41:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:36 2025 by rpki-client