Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aaa56d88-7f05-3250-a4cd-9a8e4d13645b.roa
File: aaa56d88-7f05-3250-a4cd-9a8e4d13645b.roa (raw, json)
Hash identifier: ecOBmZQZ7UaV2oI8zFu2ECKhfNuXnFaF0LkJXIT4kO8=
Subject key identifier: 51:CA:E2:37:12:13:19:01:7E:32:AC:AF:48:4F:91:FD:7D:13:01:B1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E50E589547CDAE05F45C32800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aaa56d88-7f05-3250-a4cd-9a8e4d13645b.roa
Signing time: Mon 20 Jun 2022 12:00:00 +0000
ROA not before: Mon 20 Jun 2022 12:00:00 +0000
ROA not after: Tue 26 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:50:e5:89:54:7c:da:e0:5f:45:c3:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 20 12:00:00 2022 GMT
Not After : Jul 26 04:00:00 2022 GMT
Subject: CN=0f08219b-b860-455f-a7bf-893b0ec251fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:d3:a3:83:53:8d:c6:68:9b:9e:64:41:7d:
45:83:8d:cb:1f:25:1c:e3:30:16:b7:d9:49:e0:69:
7d:56:95:05:44:f6:37:1a:88:14:50:49:39:ef:d8:
da:22:d2:37:14:37:2e:d1:69:83:86:a8:12:d2:17:
9e:d9:45:72:bc:7e:67:e3:8b:f9:dc:3c:a9:b4:9a:
23:b1:fd:20:db:fb:74:eb:61:cf:d5:cf:bb:00:00:
8f:61:72:aa:e8:51:a1:74:7a:ce:54:df:14:40:32:
4c:8a:94:08:88:d7:39:16:f1:be:db:a1:fe:6d:24:
76:5e:8a:e5:20:83:20:40:43:59:1b:c1:32:86:b7:
e4:fe:22:04:2b:6f:34:0e:07:03:a3:ec:76:96:59:
29:8b:2f:30:0c:93:a9:4e:80:80:42:98:d9:11:b1:
3f:45:50:92:f9:35:2e:c8:c3:94:04:97:a3:fc:e2:
b1:45:c9:50:0e:39:96:ba:04:ef:7f:41:a6:a8:e5:
65:9d:d0:b8:5e:57:4b:4d:80:96:ae:37:c4:47:6f:
db:d7:21:87:89:a2:c0:de:d9:77:59:08:e1:25:6b:
5c:8b:33:59:dc:d3:0c:a2:ae:f8:58:20:62:fa:02:
e8:6a:31:64:0a:43:ba:2e:6d:f9:23:0e:21:c4:f4:
7a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CA:E2:37:12:13:19:01:7E:32:AC:AF:48:4F:91:FD:7D:13:01:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aaa56d88-7f05-3250-a4cd-9a8e4d13645b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:60:cd:91:68:8c:5a:18:77:a6:16:a5:ee:8d:3b:f1:ac:12:
d4:ee:83:85:ed:42:48:f3:02:d2:c6:d3:90:f5:77:c2:a9:9f:
d7:45:69:3a:09:25:13:3b:ef:ea:c7:e5:0a:f4:b4:a2:7e:5c:
23:8d:8c:4f:f0:47:a7:76:50:53:bb:34:a7:64:e5:c6:1a:35:
aa:05:8b:34:2a:b3:85:ed:76:a3:90:a5:ff:f4:c4:60:d8:16:
a1:91:f8:cd:47:7d:0e:75:8e:5b:2e:75:05:d0:ae:06:50:d5:
e6:19:03:00:06:22:6e:11:de:f5:0a:d4:85:c4:88:91:35:74:
24:62:4b:41:de:2d:bd:b5:59:bc:af:21:a7:87:78:8b:bc:e1:
09:74:76:02:68:22:b6:17:fa:98:24:96:6a:4f:16:81:5e:51:
44:5f:4f:31:4f:ac:08:b7:de:66:16:3a:23:1a:16:95:f4:70:
5a:ac:46:5b:56:77:62:64:a8:b6:8d:22:3e:cb:f7:d1:a8:b5:
d0:1b:f5:1d:45:0a:93:9e:e8:08:31:bb:16:f0:e3:ad:47:6e:
6f:73:8d:80:a1:0a:44:a0:fc:9f:d8:fe:eb:00:d9:37:ad:cc:
73:7d:f4:53:41:4d:23:79:78:84:11:b2:f4:dd:eb:ed:d1:a1:
a3:58:14:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:07 2025 by rpki-client