Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1eb57dad-18e9-3ff3-a4cb-3de5827086a2.roa
File: 1eb57dad-18e9-3ff3-a4cb-3de5827086a2.roa (raw, json)
Hash identifier: nVgLx4szWFc6w0ngVevJr5pq26eJUtBxfxjM2FKay2c=
Subject key identifier: AD:4A:BE:64:A4:73:B3:2C:73:68:C6:2E:7F:99:6F:43:8C:12:83:52
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F2FCCB69EA99512F36362C7C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1eb57dad-18e9-3ff3-a4cb-3de5827086a2.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 204.168.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2f:cc:b6:9e:a9:95:12:f3:63:62:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=fa589f70-ce3c-4014-b208-603f2c9ba185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:43:31:3f:23:55:1b:be:e0:31:d2:82:23:
2f:56:da:82:04:20:64:f6:f6:81:85:a0:4a:be:e9:
fb:2c:1f:36:f8:90:00:ff:5c:86:64:3f:8a:b0:c2:
27:ce:a3:aa:a5:34:1e:8b:dd:ca:2f:55:71:84:fe:
d2:94:e0:d5:d2:65:63:12:6e:29:94:cc:aa:01:4d:
d3:47:b8:0f:2f:0d:2f:68:0c:93:8b:42:50:d7:d3:
7f:29:19:23:34:a1:04:59:f9:28:7f:d8:ab:2c:58:
e9:ef:73:a8:ec:eb:c7:53:9e:8b:ef:29:c0:1b:20:
b5:13:f6:5d:1a:2b:4f:fb:45:6c:66:e6:bb:5c:ce:
22:96:57:1b:f7:fe:db:9a:eb:25:ec:8a:66:58:cc:
da:26:ad:47:63:66:dc:b8:a8:5b:e8:40:45:7c:21:
91:4d:c9:15:d2:e5:8c:97:bb:18:ef:0b:b5:ce:58:
be:cd:63:63:2c:67:ef:29:f0:e5:6f:82:ca:6b:72:
31:3a:20:f3:56:67:22:5b:04:3e:81:8d:75:3d:3e:
63:0d:be:38:42:2d:ec:15:a9:ec:77:4e:a2:95:2d:
36:89:3f:c3:09:d7:92:f3:b8:03:79:94:bf:5b:78:
95:4f:82:51:09:bd:7e:03:60:56:a4:d5:4c:0b:d2:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4A:BE:64:A4:73:B3:2C:73:68:C6:2E:7F:99:6F:43:8C:12:83:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1eb57dad-18e9-3ff3-a4cb-3de5827086a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.168.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:67:db:fc:5e:89:64:05:26:ff:df:27:11:56:53:1b:00:62:
6f:0b:53:99:1a:4f:0c:e8:bb:df:23:85:0e:c8:5d:13:21:c7:
f7:22:97:98:05:5b:44:22:77:83:cd:3d:09:66:e5:cd:57:1a:
48:ca:a7:6f:c6:71:e9:50:48:d2:26:29:8e:f3:09:6a:82:6d:
d6:76:43:99:ed:b9:89:de:13:07:37:11:b9:16:14:61:0a:41:
70:b6:40:bc:38:94:36:4e:8d:c1:8a:24:a7:d2:90:78:3c:1a:
c7:4b:2a:e5:5a:d2:ec:3d:e0:32:d8:6f:1f:44:0f:33:67:b2:
58:34:0d:1c:fb:86:f8:64:5c:e2:67:4f:94:a6:4d:3c:0b:70:
74:7f:90:50:2b:13:ef:f0:08:37:b1:80:a4:f8:14:7c:f8:3a:
6a:0c:6b:dc:30:63:9c:c6:30:16:da:64:62:c3:5f:4d:7e:95:
1b:93:4d:3d:4f:a5:b5:19:d1:32:61:48:2b:8e:85:91:55:89:
b0:cb:df:f0:dd:dc:b4:3c:ba:90:0b:2c:2e:d3:a8:a3:6b:37:
95:a7:77:f4:33:a9:75:9a:4d:77:69:58:b6:60:68:03:ea:53:
2c:60:a6:25:26:ff:f8:fd:44:7c:a1:5e:c7:7f:4f:65:49:c6:
b1:e5:f7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:22:37 2025 by rpki-client