Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02bfb9fb-9704-3240-b1f6-156829a0beda.roa
File: 02bfb9fb-9704-3240-b1f6-156829a0beda.roa (raw, json)
Hash identifier: bUbCmre/Yarfno8fOyMmLkZbnEJHjHD4ieSi5Bui8zU=
Subject key identifier: 6F:F6:B1:AF:30:50:A5:E8:0F:16:DC:6D:DB:2A:0E:17:53:44:7F:F8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DCFC7AFCBCEF9F2A4C94DCAC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02bfb9fb-9704-3240-b1f6-156829a0beda.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Fri 10 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 204.168.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cf:c7:af:cb:ce:f9:f2:a4:c9:4d:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2022 GMT
Subject: CN=695e4aa8-c567-4aa7-b631-d9a02166149d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:10:b0:31:a9:31:b7:5d:57:cd:94:b2:d2:73:
59:cc:5b:bd:37:29:7b:64:14:3e:c4:04:85:99:86:
bd:c2:f8:12:69:f2:ef:97:e2:74:24:22:8a:13:b9:
c9:56:3f:1f:1a:be:d2:5a:1e:76:59:d5:94:ba:e2:
63:9e:5c:10:84:5b:b7:51:d4:ef:cb:36:58:7d:db:
ce:2d:91:a2:1f:87:f3:3e:33:6f:df:27:1b:f5:78:
ee:f6:8a:30:d4:4e:2c:b8:02:22:a9:b3:6b:8a:43:
04:1c:06:9b:a9:f0:f8:e0:34:29:3d:60:11:f2:b2:
29:f2:c7:92:ed:45:53:fa:9f:64:56:3e:57:d3:5b:
70:6d:05:db:b7:88:f3:4c:58:cd:a8:31:b6:d7:30:
97:5a:eb:80:85:0b:86:ae:be:b3:91:80:ed:f1:50:
53:9e:83:82:af:5a:51:4c:26:69:25:5b:c7:6e:81:
72:64:6b:5b:de:34:21:b1:a2:0d:52:a0:2e:cd:a0:
56:94:c6:93:95:b7:37:c1:6d:07:72:86:20:10:2d:
23:d9:b2:1c:f0:9c:e9:08:db:02:c6:8b:7c:6f:c0:
a9:2d:af:43:6c:5d:f4:43:12:d4:83:d4:08:30:33:
70:a8:db:8e:da:3d:42:94:d4:9b:3f:d9:28:2d:76:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F6:B1:AF:30:50:A5:E8:0F:16:DC:6D:DB:2A:0E:17:53:44:7F:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02bfb9fb-9704-3240-b1f6-156829a0beda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.168.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:79:ae:04:ae:e2:53:c6:14:ad:3e:45:41:48:d5:da:df:de:
13:89:e0:10:aa:12:aa:a3:70:22:36:24:64:42:8a:69:8c:9e:
d2:79:4d:e1:b7:65:ce:a4:f0:c7:c7:31:f4:40:eb:45:ce:57:
6a:66:e6:f0:b2:26:58:58:7c:35:51:8c:95:b0:f0:ff:35:a9:
d5:95:8b:64:3a:cd:16:b9:92:3b:6f:1a:79:55:2f:5c:e7:b6:
05:4b:44:ad:33:f9:48:b8:02:53:f5:ef:9e:2b:2e:07:50:d2:
9e:bf:7d:e1:a5:18:39:14:13:04:23:a9:d1:3e:b3:b1:b8:17:
38:7c:b9:76:4a:20:b6:c1:33:3f:b8:d9:94:43:58:a2:81:d9:
0b:83:43:1c:5f:5c:44:df:ee:fa:d6:5e:fe:eb:cf:38:ca:75:
4e:1c:5c:df:3d:85:70:3d:35:20:dd:ee:6b:31:24:bc:3e:dd:
d2:74:da:cd:c6:11:58:36:e0:75:54:20:87:be:68:02:ec:48:
37:e4:f8:a7:b6:15:3e:15:bd:5e:ef:60:d5:6a:92:4e:a3:b6:
ca:1f:a5:59:ed:fc:d3:f6:4d:fa:27:e3:49:30:81:e6:1a:03:
f4:42:80:0f:8d:e7:41:6e:28:26:09:e5:6f:98:5b:f2:b0:9e:
0b:0f:37:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:22:26 2025 by rpki-client