Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0fef1aa0-7a04-3c9b-ac8f-167b7249d59c.roa
File: 0fef1aa0-7a04-3c9b-ac8f-167b7249d59c.roa (raw, json)
Hash identifier: 1NNNNejltaP7RxZyl3EvC4PHS+j/Nt54C3lMX0r9d1U=
Subject key identifier: 41:6A:0B:7E:9B:0F:61:6E:25:1D:34:17:AE:B0:1A:42:DC:57:94:6F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840352D11A9A1FA652ED042A820
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0fef1aa0-7a04-3c9b-ac8f-167b7249d59c.roa
Signing time: Sun 11 Dec 2022 12:00:00 +0000
ROA not before: Sun 11 Dec 2022 12:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 168.192.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:35:2d:11:a9:a1:fa:65:2e:d0:42:a8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 11 12:00:00 2022 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=c603af58-01aa-40c4-8c2c-0468251b122f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2c:fa:73:61:d8:66:14:15:69:c2:00:98:0e:
03:ac:8e:3f:02:ae:39:0e:a9:88:9c:d7:6d:c8:e1:
1c:95:d3:3a:5b:62:42:ba:1f:3b:2d:3c:b2:06:6a:
91:3a:95:ae:33:91:6c:d1:9f:38:9a:fd:3a:20:9b:
05:b8:d7:fe:21:1a:7b:3e:40:7b:0c:d3:5e:79:c4:
d9:82:85:c9:1e:7d:32:b8:a4:a8:fc:0b:0d:5d:75:
6d:8b:3a:65:96:07:81:f3:56:13:6d:1c:3d:1f:7c:
06:0a:8b:a9:2d:a8:5a:ca:3e:b6:31:ed:45:7a:a1:
4f:61:60:a0:fb:73:5d:72:6d:7f:b4:9a:68:7d:7e:
86:6c:18:07:54:f2:d4:94:cb:a5:e4:fa:9d:12:39:
90:9b:82:25:c5:c3:48:90:59:15:63:e1:0c:60:d4:
d6:8f:f1:25:26:08:66:2f:82:47:88:6c:b4:3c:84:
af:f7:ff:b1:7a:c7:bf:c3:c1:df:04:3d:be:2b:ac:
cf:20:13:4b:ab:98:75:78:39:78:48:38:63:1d:d5:
c5:5c:96:60:c1:33:49:12:09:a9:33:12:e4:00:ad:
28:04:e2:21:36:d3:79:0d:ad:2b:fc:14:ee:98:7e:
10:74:9f:51:76:90:c7:37:2b:9c:6f:85:33:db:79:
6c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6A:0B:7E:9B:0F:61:6E:25:1D:34:17:AE:B0:1A:42:DC:57:94:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0fef1aa0-7a04-3c9b-ac8f-167b7249d59c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
168.192.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:38:a8:d1:dc:fe:33:fa:ae:5d:5e:a7:9a:a5:20:05:85:9b:
5a:47:89:47:cf:1e:9b:26:e3:f2:63:85:0c:98:ce:d5:18:25:
c5:44:8f:cf:9c:da:cc:d7:e8:15:52:9e:be:16:0e:5d:38:65:
e3:f1:19:53:df:52:2a:b6:ff:ce:3e:4a:e6:8c:81:fe:22:e5:
e3:19:03:a9:64:fb:b5:27:04:f4:c0:c6:fb:78:7c:9f:fd:d4:
d6:81:88:98:8d:fd:45:e3:45:d1:33:57:a9:fa:42:d1:28:01:
3e:e1:39:9d:53:19:b0:5d:12:d5:42:ee:ff:50:dc:9b:53:9c:
b2:5d:e1:e8:85:bc:fc:43:7d:53:8a:f0:c6:b9:f4:74:f3:fb:
2e:38:da:e1:d2:c3:26:6c:63:e5:9b:e1:59:ce:12:c2:f9:6e:
d1:c9:e4:14:90:d0:06:94:9a:6a:36:e0:d3:78:5b:71:ec:0e:
6e:ab:13:0b:e5:20:e7:43:98:8f:33:7c:46:c0:33:4c:de:86:
5b:af:3b:0b:02:f7:33:94:b6:83:1e:14:6f:a9:d5:02:d0:f1:
55:e2:d5:56:ef:ad:b8:bd:aa:b3:14:b0:01:3d:94:c5:d1:84:
9c:1f:03:f0:22:4b:14:26:e1:14:14:38:83:7f:ed:5d:29:05:
a0:32:5e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:37 2025 by rpki-client