Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f54cca38-c4f2-3b67-a3e9-5069b09cb2f0.roa
File: f54cca38-c4f2-3b67-a3e9-5069b09cb2f0.roa (raw, json)
Hash identifier: G1SPzmjdz/S2yvsgzl+U24lKX5o+rAMcjlM+htDimGo=
Subject key identifier: 9C:28:E4:DC:B2:E6:4E:6D:41:45:A9:7B:D0:F7:1E:86:1E:18:D4:14
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DC86C255D844799A019A60500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f54cca38-c4f2-3b67-a3e9-5069b09cb2f0.roa
Signing time: Mon 02 May 2022 12:00:00 +0000
ROA not before: Mon 02 May 2022 12:00:00 +0000
ROA not after: Tue 07 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 56.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c8:6c:25:5d:84:47:99:a0:19:a6:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 2 12:00:00 2022 GMT
Not After : Jun 7 04:00:00 2022 GMT
Subject: CN=0d740459-965b-4b7f-9342-8239d5747320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:12:28:70:4e:a0:80:3e:d3:79:25:18:02:
31:bc:c9:1c:b1:d1:41:1d:a1:76:54:6a:7a:b8:45:
54:3e:43:ad:8d:5a:f0:f3:a9:46:0a:54:10:4f:ff:
4b:63:53:7a:3b:30:41:16:00:fd:07:77:43:db:eb:
26:52:41:e3:d0:7a:15:82:95:de:a8:c9:43:81:7c:
8a:ac:ef:27:eb:4f:7d:f8:42:89:af:49:dc:c9:2e:
ad:ba:13:36:7b:f4:52:32:37:0a:a2:aa:1b:b7:41:
09:d0:2e:53:d8:ea:f8:b9:56:60:5e:52:9b:46:07:
6b:e6:69:35:97:f8:a4:b4:a2:2f:b3:f1:25:17:21:
7f:98:6f:ad:6a:99:65:df:8c:9a:ed:bb:ac:87:fa:
a3:fb:85:4d:03:7e:c2:d0:b5:99:17:c1:54:36:21:
74:3c:9b:94:73:6f:af:5a:35:c1:de:c9:70:33:a1:
3a:eb:bb:b7:51:62:3a:f0:d5:e3:3d:2c:54:87:df:
96:72:1f:35:06:d0:97:60:5e:97:96:9e:57:40:84:
b0:c3:ba:67:d0:b5:a7:fc:42:67:17:51:58:62:dd:
07:ac:15:3a:a9:e0:4a:40:86:57:42:cf:99:d7:b7:
8d:c1:65:a0:95:1f:7c:8e:29:bc:c8:28:1c:d1:6b:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:28:E4:DC:B2:E6:4E:6D:41:45:A9:7B:D0:F7:1E:86:1E:18:D4:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f54cca38-c4f2-3b67-a3e9-5069b09cb2f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:00:89:60:29:67:f4:dd:20:55:db:75:06:76:e1:c9:73:6a:
65:73:2d:77:c4:73:c3:c5:a5:d4:e0:2f:e6:5e:2a:3e:f1:79:
fd:79:f4:87:1a:46:b4:81:fb:85:ef:e1:0b:6b:a9:79:e1:41:
7b:4e:80:f0:a5:15:f5:57:64:47:6e:9a:f4:e3:c4:fa:26:eb:
8b:42:c3:15:52:d7:d1:a9:94:cf:02:2d:32:d0:e1:2b:1a:31:
57:60:f4:0e:03:e5:34:bf:96:5d:84:87:65:ca:64:04:b5:0d:
a7:a0:30:3d:b5:38:4f:e8:79:a9:f3:fa:aa:6d:b2:b5:68:8e:
7b:20:73:46:18:76:9b:1c:fe:4e:a0:df:f5:4b:ad:5e:85:2b:
7a:b6:a7:ea:29:88:72:ba:45:48:35:a6:ce:2f:84:ee:02:be:
89:72:43:cf:2f:e8:2d:ae:82:62:24:a1:53:69:84:c4:b4:d3:
c3:e2:83:da:92:d7:23:3d:74:11:12:6e:be:44:cb:a4:f3:ac:
f2:b2:4b:66:17:5a:dd:95:86:21:12:a5:07:a6:cb:cc:b1:98:
93:dc:30:dd:39:81:c2:6c:ef:07:66:e4:8f:aa:6d:44:01:7f:
c9:06:74:5d:cc:63:7d:5a:d0:37:50:b8:8d:65:95:2d:b2:08:
9e:15:67:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:09 2025 by rpki-client