Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e1e1e374-af38-3b72-8917-4c6bd3b72f51.roa
File: e1e1e374-af38-3b72-8917-4c6bd3b72f51.roa (raw, json)
Hash identifier: gmM69XA4ebaWnvDAOyqlHrGC9xELIIPUNqStcSBLThE=
Subject key identifier: AF:E6:7C:67:2C:9F:70:57:3E:D9:B5:0A:2D:AD:7A:00:A6:B7:0F:9E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408CFFAE58717045BCBE0A7200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e1e1e374-af38-3b72-8917-4c6bd3b72f51.roa
Signing time: Wed 11 Jan 2023 12:00:00 +0000
ROA not before: Wed 11 Jan 2023 12:00:00 +0000
ROA not after: Thu 16 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8c:ff:ae:58:71:70:45:bc:be:0a:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 11 12:00:00 2023 GMT
Not After : Feb 16 05:00:00 2023 GMT
Subject: CN=0557a7b5-ca62-4797-8706-e346e4b33a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:9d:03:a0:6a:70:46:5a:74:2a:f9:d8:4d:
d0:59:ca:de:4c:72:a0:16:d1:e8:d7:6e:da:06:fa:
eb:35:77:5a:e7:6d:16:c5:ab:1b:44:14:a4:4c:c1:
99:97:b3:15:15:6e:c6:37:f6:85:f4:4d:34:de:a1:
f0:2b:79:52:ac:1b:1b:35:a2:ac:6e:db:ed:09:9b:
a0:51:fd:58:90:9f:87:65:d7:07:9f:e7:c3:c8:9a:
53:83:e4:e0:ae:d4:c5:39:48:ef:37:76:7f:b1:15:
c8:1b:2d:20:87:3f:9d:78:6c:d9:ba:84:9f:5e:bd:
df:d1:bf:1e:e3:4f:89:cb:41:6d:54:52:d4:44:fd:
bf:78:4b:e5:d0:48:cb:a7:e3:08:5f:3b:10:4b:7c:
80:bc:a3:7e:10:63:db:ea:07:83:bb:b3:3b:ee:ae:
72:29:82:16:eb:68:1b:ef:98:b3:e2:5a:af:ce:fb:
e1:71:76:3b:1e:87:95:df:8d:38:de:eb:73:04:56:
4a:f8:c8:92:c8:8e:33:f1:81:1a:44:21:05:0d:cf:
29:27:b0:e6:d5:fd:72:97:b3:fe:3b:9b:3e:ba:c7:
6d:7b:01:a7:fc:fa:9b:93:85:71:99:2c:f7:a1:74:
be:19:3d:c7:ea:fa:c0:9a:56:3e:c2:d6:0d:86:86:
12:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E6:7C:67:2C:9F:70:57:3E:D9:B5:0A:2D:AD:7A:00:A6:B7:0F:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e1e1e374-af38-3b72-8917-4c6bd3b72f51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:00:33:a1:91:8f:d0:7b:d0:ee:d3:b0:d6:6d:78:71:d4:a6:
cb:18:50:20:e2:d0:f3:b0:27:fb:ec:7b:f7:97:ff:91:fc:13:
7d:a4:af:a0:23:d7:b0:35:0f:da:f0:d3:ea:b9:7f:cd:ec:04:
58:fe:9e:9c:2a:f0:66:fd:da:86:f5:c9:73:c1:aa:8b:af:85:
88:3f:28:77:0b:14:09:4a:66:ef:c3:e0:41:6c:b3:70:0a:8d:
cf:86:39:58:34:32:e0:d0:3c:dd:44:8f:e4:6b:19:60:66:7e:
cd:78:90:f9:0a:be:09:3e:35:3b:3c:9e:ef:6a:8a:3b:a9:b7:
2c:4f:6c:a0:4e:39:ec:36:c5:9d:b5:d5:fe:f0:29:1e:3d:8c:
af:60:fc:33:a7:77:de:80:9b:d3:1a:7b:af:c5:df:39:0f:9a:
1a:73:b0:88:74:35:68:2e:bc:25:b5:c2:f9:dc:9e:bf:cf:ef:
31:ec:fc:b2:cf:42:cb:f1:87:1c:36:89:e3:b2:14:69:15:36:
1e:f0:cc:02:b4:69:0a:25:61:cd:3f:55:e9:f6:af:c2:69:79:
8b:52:62:ef:41:d6:bd:dd:94:1d:c7:30:65:b7:c2:4f:c5:8b:
17:e8:c5:d0:4b:6a:2a:a7:c0:8f:00:1d:fa:0d:de:24:fe:5c:
3c:29:09:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:44 2025 by rpki-client