Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de1a6886-2335-33ac-be9d-ae1c9562a034.roa
File: de1a6886-2335-33ac-be9d-ae1c9562a034.roa (raw, json)
Hash identifier: 33xH/JEWdfhwAkKEXrlnbPoIHI9xGtqRxws+nqMR/NU=
Subject key identifier: 01:97:B2:56:F0:39:9B:C8:0C:8F:23:2A:23:D2:C2:F9:8E:3F:60:7D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3185D7082E70000D66BDEE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de1a6886-2335-33ac-be9d-ae1c9562a034.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.55.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:31:85:d7:08:2e:70:00:0d:66:bd:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=9f8aef9d-2cae-46ee-ae6e-14255209dfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:33:62:71:2f:37:0b:22:32:a2:89:80:51:
10:81:5d:b8:65:19:35:ad:d9:00:c8:08:d3:7b:98:
44:95:5e:5d:60:df:1d:c5:ae:01:d0:5b:ca:b4:16:
86:65:0f:58:d3:e3:33:aa:04:96:84:ae:2a:6e:92:
0e:17:7f:da:76:cd:5f:a4:9c:29:10:19:f0:df:a5:
7c:d3:15:30:f0:1d:45:48:10:43:fb:db:d8:09:81:
11:35:3e:eb:01:0d:38:96:23:1c:11:ba:a1:e2:6a:
c7:0a:52:1b:da:0f:b0:58:f3:35:23:7a:31:e7:41:
bc:e4:19:37:0e:22:8b:e8:c4:15:cb:8f:5f:16:3d:
b7:0f:df:d4:ad:58:48:f7:c9:c5:b3:31:72:7d:b6:
09:d8:f0:8e:ea:37:95:fd:47:5c:60:2a:f5:14:a7:
2d:8e:72:b1:c6:e4:6d:90:f4:e9:bb:c3:f8:3c:ce:
50:c7:d1:69:5a:ac:05:e5:8e:1e:1f:15:75:b6:44:
58:90:f7:c6:7c:e1:18:ee:af:e0:48:21:e3:c9:ae:
a6:f2:96:35:ec:2c:38:c0:7d:6c:3a:f7:e8:45:b1:
25:d0:6f:d5:a4:2b:d0:b1:47:9e:0d:78:8e:b8:c2:
66:18:43:c0:b1:7a:15:60:02:45:5f:a4:c9:df:45:
a1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:97:B2:56:F0:39:9B:C8:0C:8F:23:2A:23:D2:C2:F9:8E:3F:60:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de1a6886-2335-33ac-be9d-ae1c9562a034.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:71:ff:3c:05:0f:6d:bc:3f:fd:a9:3f:13:90:bf:63:95:78:
10:79:88:5a:b0:93:f5:d3:30:7a:33:f1:19:5e:fd:a4:19:89:
07:04:54:5b:c5:ed:6a:89:75:5e:c6:91:2c:98:2c:3b:62:32:
bc:69:c5:38:d8:16:d4:fd:20:24:d0:11:3b:2f:e3:17:5e:b3:
07:79:95:2f:2d:a8:85:88:49:da:76:5f:fd:d6:fc:08:2a:a3:
7d:b3:9c:5e:50:bd:78:2c:ae:e8:54:fb:e8:1d:18:8b:4d:cc:
bf:d9:27:b3:df:75:8d:6e:79:aa:ff:1d:c1:c0:f1:2b:e6:b0:
3b:04:de:d1:7e:fc:61:10:c7:57:e4:4c:12:c4:86:50:0d:4b:
c9:73:4e:c7:98:52:df:b1:4a:7f:70:fd:85:cd:3a:9a:59:07:
7a:2e:ef:64:b8:3f:3e:89:e0:03:29:18:d2:b1:c0:d5:19:2c:
27:77:0e:a1:c0:92:ba:1d:a8:89:5f:f3:db:c6:5a:9f:62:62:
cd:4b:a3:39:97:4c:d4:d2:69:a9:3c:66:14:34:26:32:b2:75:
40:fd:29:52:db:34:ca:20:56:4c:c4:2b:b7:9a:46:01:49:a8:
4b:98:a1:1f:39:fd:98:1a:bb:09:71:01:c0:a7:49:3b:af:88:
b5:15:d2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:44 2025 by rpki-client