Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9bb4f268-0d43-39b8-b2bf-8baa27f0ac40.roa
File: 9bb4f268-0d43-39b8-b2bf-8baa27f0ac40.roa (raw, json)
Hash identifier: rvd1OAGgBKSc9Hm9woIjUYF/leiyGCapNsJWETiqDIE=
Subject key identifier: B5:E5:35:F1:E5:89:FB:83:BD:8F:52:C1:4E:AC:56:E8:F4:F9:0C:CA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D8B9DCAF9451E45381B06A680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9bb4f268-0d43-39b8-b2bf-8baa27f0ac40.roa
Signing time: Tue 12 Apr 2022 04:00:00 +0000
ROA not before: Tue 12 Apr 2022 04:00:00 +0000
ROA not after: Tue 17 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:8b:9d:ca:f9:45:1e:45:38:1b:06:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 12 04:00:00 2022 GMT
Not After : May 17 04:00:00 2022 GMT
Subject: CN=c2b4d0e6-33f4-4d31-8f56-6cab2e6b651a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:b1:c8:6a:dc:d4:63:28:50:ea:8c:b0:7e:
38:d9:bf:97:46:eb:86:3d:e7:ea:10:96:6d:31:3f:
9c:24:6c:07:97:bc:5d:d0:da:9a:ac:e4:46:f6:73:
b1:79:67:c0:88:9b:ba:0c:b0:d3:4b:8f:04:58:7b:
08:f6:9d:4f:29:75:b2:f2:fd:99:95:af:61:10:d8:
3a:ea:88:e1:e5:eb:37:4a:e4:38:fd:03:e6:77:5b:
20:6f:9c:78:c5:bf:b8:a6:1b:ca:44:78:2a:b4:07:
f5:97:b3:72:79:ba:11:1f:83:9e:2f:2f:e4:d8:91:
2b:8a:af:45:ee:62:c6:93:22:10:9b:4a:db:34:ea:
63:26:02:e6:4b:7e:b8:ed:04:a6:88:a1:d4:b5:53:
f2:43:88:8f:17:00:0c:df:3d:3f:53:46:3a:4b:8f:
9d:1d:8c:c4:d9:60:8a:60:6b:69:b3:13:71:3f:1f:
0d:9d:40:9d:b4:43:2e:96:52:f2:f1:b8:31:db:83:
5f:02:0f:08:09:ca:be:15:f5:9f:e4:ad:8a:eb:f0:
63:bc:9e:7c:fe:ee:41:ba:ca:10:19:fe:a8:13:66:
ca:e8:b5:b6:56:ac:9f:94:5a:95:ad:38:f5:a8:8a:
5d:41:54:34:1e:02:5d:7f:80:f7:50:10:71:c9:a3:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E5:35:F1:E5:89:FB:83:BD:8F:52:C1:4E:AC:56:E8:F4:F9:0C:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9bb4f268-0d43-39b8-b2bf-8baa27f0ac40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:e9:34:79:8e:10:2a:73:e3:34:6d:54:14:a3:96:09:76:ed:
90:6f:8e:7f:72:3f:d3:c8:57:99:7e:ff:cd:51:df:b8:a4:b5:
f6:77:46:ce:fc:00:30:0e:cd:28:b8:3f:cc:aa:2c:e8:33:bc:
3f:3c:64:b5:72:0a:00:2a:c8:69:de:c2:8d:23:c1:1e:59:83:
fb:31:58:6f:3f:03:e7:97:07:e0:11:62:5b:30:b9:11:e9:da:
a5:52:5e:d7:97:d4:98:b2:3e:18:e1:32:ca:f5:48:d7:e9:7f:
d4:6d:97:65:3a:91:2f:ca:02:59:5f:aa:a4:6c:c3:e2:fa:34:
a6:7f:bb:49:fa:be:e3:46:30:c4:4c:29:ba:eb:c7:8a:02:8d:
19:3d:02:f2:a7:ac:9c:87:41:fd:66:f2:90:9e:5f:fe:ce:cf:
fe:ba:dd:07:7e:4e:63:b9:85:92:9f:5d:78:82:8a:0c:48:90:
a7:9a:f7:7a:ab:d3:ac:9e:b5:6f:7b:d1:42:40:59:c5:2d:09:
2e:69:4c:11:c9:26:01:c3:44:14:d9:a2:85:8e:f5:00:63:f8:
de:bc:a5:f1:d4:7e:28:17:84:2e:1f:77:fc:1f:6a:a8:5f:97:
0d:b2:34:cf:9c:b7:eb:66:34:73:b0:a9:96:99:59:7d:05:e5:
f8:25:bd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:46 2025 by rpki-client