Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa49ec4f-b771-3bc7-8d8a-3a00acb7cd9c.roa
File: aa49ec4f-b771-3bc7-8d8a-3a00acb7cd9c.roa (raw, json)
Hash identifier: 4aB7bqYVjxqu4FnPOQpmJm5TpqAhvyZ44N70XsSIpBE=
Subject key identifier: 1C:35:04:EE:AA:97:C5:79:E1:35:E3:6B:68:40:9F:7E:6C:20:46:DE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409C9DAE8482E8146D5FCE6280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa49ec4f-b771-3bc7-8d8a-3a00acb7cd9c.roa
Signing time: Tue 17 Jan 2023 12:00:00 +0000
ROA not before: Tue 17 Jan 2023 12:00:00 +0000
ROA not after: Wed 22 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 13.60.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9c:9d:ae:84:82:e8:14:6d:5f:ce:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 17 12:00:00 2023 GMT
Not After : Feb 22 05:00:00 2023 GMT
Subject: CN=751021de-9c01-431e-a121-e22c60c4e376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b2:01:5b:6e:aa:f6:a6:61:8e:a7:33:94:a3:
ea:0a:8b:a6:2c:2f:e1:55:7d:e9:6f:ff:50:c1:74:
c3:e8:10:1f:97:8a:23:73:a9:02:aa:02:12:b6:c0:
a6:ad:ad:62:4f:77:cb:38:4c:1e:94:84:ea:7d:8c:
45:c7:d0:e0:bb:31:2a:2f:f3:78:1d:fa:51:ea:c6:
7d:ea:83:1f:eb:20:33:c2:a2:a5:76:7f:13:1e:e3:
7e:8c:c3:8c:af:1a:0c:5f:35:85:42:5c:3d:05:1a:
bd:b6:ad:41:5b:17:8d:de:f4:cf:3e:1d:81:b6:43:
c0:51:d9:3f:94:1d:a6:ee:92:18:61:21:75:ed:89:
0c:c7:7c:b1:b8:d3:4f:d6:79:e7:cf:da:f1:11:3c:
2a:4c:7d:a6:d4:6d:8e:05:20:5c:48:19:85:4d:01:
2b:ef:85:59:11:cf:5e:8a:70:5f:d2:c2:24:3c:8a:
e4:16:09:e4:49:ce:ff:d3:32:76:ef:2a:2b:70:01:
8c:c7:87:8e:a4:8a:7d:98:45:8e:c2:79:59:d9:49:
00:bb:38:10:1b:46:5d:ba:f3:6f:3b:d4:24:33:73:
c1:1a:9b:06:bc:cf:d3:70:77:78:c7:17:89:ee:1a:
a3:6a:85:0f:e2:2c:52:92:b2:d0:11:da:22:70:7c:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:35:04:EE:AA:97:C5:79:E1:35:E3:6B:68:40:9F:7E:6C:20:46:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa49ec4f-b771-3bc7-8d8a-3a00acb7cd9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
13.60.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:ab:e1:cf:7e:4d:32:72:e8:3c:b3:1a:07:64:21:f0:39:00:
83:d8:a0:e1:90:c4:1b:8f:97:55:86:6c:82:23:85:ac:0b:04:
a7:56:9f:f3:ee:e6:33:20:97:63:b6:9c:6e:74:e0:20:bc:5a:
4c:a3:b0:c2:23:99:37:55:1f:fa:bd:0f:4d:bc:a7:41:38:90:
fc:fd:e6:55:3a:78:b0:b0:f9:e3:b6:aa:e4:52:98:38:f5:2b:
bb:cb:43:63:ed:9f:64:3b:de:c4:7f:ad:fc:9d:d9:4e:ca:82:
12:c9:54:2f:6a:53:83:d6:b5:6d:de:72:b6:b3:3f:f1:90:ce:
6f:00:c8:15:00:5a:6d:da:81:ab:9d:f8:95:43:83:ff:74:3f:
bb:7b:87:c8:b2:a1:f6:d1:dc:4b:09:ac:85:d1:0c:d4:4e:7f:
89:38:a1:ff:e7:63:64:7f:14:43:d0:40:7a:9f:c4:08:6b:1f:
6e:7d:3c:8d:7d:a1:0a:fd:5e:bc:1d:27:95:37:18:72:a0:88:
ce:7b:f0:f0:fe:bb:46:bb:3b:0f:2a:b9:20:24:1f:1b:72:b9:
25:04:d8:0c:22:3a:f8:b1:f6:4f:79:50:8e:26:51:54:77:58:
43:36:39:b8:85:94:c2:2c:b4:34:87:f8:1c:e3:a5:17:f3:56:
15:ba:05:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:27 2025 by rpki-client