Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cbe2b12-3221-3f2a-a6fb-f58bda0eacc0.roa
File: 0cbe2b12-3221-3f2a-a6fb-f58bda0eacc0.roa (raw, json)
Hash identifier: qIUFbmqMn6Ai6zdOpdiwmOCgGGpXX7FNjuXAPxeJkhk=
Subject key identifier: F1:B5:7F:FC:68:D7:84:8C:6C:EB:40:AB:6F:F8:90:79:BF:FD:35:4D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCB0F7E71B756D745825ECA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cbe2b12-3221-3f2a-a6fb-f58bda0eacc0.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 167.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cb:0f:7e:71:b7:56:d7:45:82:5e:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=6994b152-576e-4ef3-81a3-2a994b029251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:56:10:48:83:ae:f3:63:95:46:e8:2c:cd:ac:
56:8a:af:73:0a:c6:3f:13:ad:ab:4c:f8:d9:3a:aa:
99:3e:ce:46:be:99:c0:82:74:a3:4c:2e:6a:d8:a0:
67:ef:cf:42:c1:ae:19:9d:2f:76:23:54:35:b1:90:
d2:af:d0:92:26:c9:47:86:c7:2b:45:36:79:eb:19:
6b:8e:6c:15:4a:54:ea:1e:f3:1f:e7:26:09:db:0d:
68:da:8c:a4:b5:12:2b:1b:f8:3d:c4:fc:fc:be:05:
0b:73:22:25:87:55:4c:f5:6e:f2:d5:46:2a:ff:f4:
8d:a8:a3:67:0c:92:5e:b7:3f:2a:9f:34:cd:9d:cf:
6a:2a:d2:02:8a:37:80:87:ae:a3:48:f1:5c:01:08:
f7:a3:23:1e:4c:d1:43:26:da:4d:c3:43:fd:73:07:
f6:2e:43:8d:ba:cf:83:f7:db:7a:a4:a8:02:b9:b5:
c1:3d:c7:99:9c:7d:52:96:3e:a7:ce:28:55:ba:13:
44:57:c3:3c:1b:e3:08:38:5d:26:9a:26:52:2d:77:
3b:88:1d:7e:d2:be:4b:18:86:74:69:74:5a:f8:71:
5c:51:0a:56:34:98:af:9d:b9:8f:a0:7e:9c:a3:09:
da:b4:b8:47:c1:f9:6c:62:01:6e:9c:75:b8:57:37:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B5:7F:FC:68:D7:84:8C:6C:EB:40:AB:6F:F8:90:79:BF:FD:35:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cbe2b12-3221-3f2a-a6fb-f58bda0eacc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:c5:34:60:7f:ed:61:d4:a0:c8:43:e1:b6:fb:63:17:a5:6b:
1a:b0:31:4e:b1:85:2a:8d:7c:94:88:64:c0:55:18:77:e6:3f:
ba:a0:e1:61:8a:d9:c5:c6:b8:b7:cb:23:4e:f8:ef:c8:78:b2:
dc:e7:f3:4e:ae:7c:f1:39:44:25:c5:b1:56:52:31:2e:32:23:
d9:5f:51:f1:7c:d8:43:a7:34:a1:31:5c:df:8f:94:03:28:f5:
ee:09:89:43:82:44:88:ea:d6:03:8f:33:20:62:85:b8:6c:93:
24:e9:65:d9:fd:9a:9d:c6:4d:ad:40:55:19:f2:c5:6f:75:eb:
da:c2:10:28:5c:53:43:7e:15:00:ae:e3:a6:41:3a:76:c5:31:
19:b7:f9:be:69:13:0c:68:05:66:03:35:aa:4f:72:89:6a:95:
a0:7a:6e:81:fe:af:a5:69:92:cf:9f:8c:6f:1d:dc:9d:f9:fa:
0b:8f:76:b9:68:82:f3:c2:f2:bc:f2:3c:52:59:18:ba:1a:f7:
94:de:d5:93:0c:bf:75:d4:0f:e6:b0:ce:7a:ae:2f:ec:0e:9a:
dd:70:9b:62:23:23:a5:ed:8c:7b:cf:5c:4c:17:41:8e:ea:9b:
3d:a3:83:42:78:1d:f0:7a:30:06:54:45:26:e4:75:3f:10:60:
e4:65:c0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:43 2025 by rpki-client