Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2305bfa9-8359-3b57-b381-f618490169c3.roa
File: 2305bfa9-8359-3b57-b381-f618490169c3.roa (raw, json)
Hash identifier: QKiIS7NrvOilfvpqI7rOe02fwEnBiLQz5ScMy7MSDxM=
Subject key identifier: 9E:D9:57:3B:FF:D1:4A:F3:33:02:36:24:9B:84:D8:81:C7:C2:C7:BC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584075361FB66BED9837F803BCF0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2305bfa9-8359-3b57-b381-f618490169c3.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 152.24.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:75:36:1f:b6:6b:ed:98:37:f8:03:bc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Feb 8 05:00:00 2023 GMT
Subject: CN=9a49b72f-8ee6-4e82-b4e9-4ab66cdca2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:f2:ad:6d:ac:53:6c:cd:39:cd:90:e9:aa:
32:e6:b8:3d:59:94:24:87:af:45:ef:d3:b2:d8:0b:
75:f2:23:5b:57:12:36:28:2b:10:03:51:fb:86:e1:
79:c8:5d:a5:62:b5:5d:38:49:06:d9:d2:9c:a2:4f:
3c:71:7c:be:52:c2:93:61:26:95:b1:0b:cc:b3:31:
06:15:2e:44:da:2d:8b:86:79:90:e7:03:e8:62:b8:
69:2b:ae:dc:ae:7f:15:87:c1:c9:e4:18:fa:0b:21:
c4:c9:2b:75:6c:cf:cd:65:91:29:58:41:88:50:3f:
c1:60:68:ae:e4:98:97:59:ad:64:de:97:4e:90:4a:
ad:fc:50:1d:33:56:8e:db:3b:04:a3:da:5b:a3:b0:
e0:4d:4e:fd:68:00:ee:b8:d8:54:36:da:95:5f:f9:
af:28:73:0f:6e:06:1e:2b:53:d4:08:65:29:df:f8:
50:52:ef:b0:66:b4:92:1b:9e:4f:ab:d8:97:d7:cb:
7c:67:59:9b:ec:14:cc:b1:e1:ad:de:af:ec:8b:ec:
b5:50:34:ef:41:42:b4:d8:b7:a3:e1:26:af:ee:e5:
d3:58:59:5f:60:c1:1f:49:53:35:83:f7:e6:3a:4a:
fd:73:0a:82:be:77:86:36:d0:f5:23:04:77:66:5f:
cb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D9:57:3B:FF:D1:4A:F3:33:02:36:24:9B:84:D8:81:C7:C2:C7:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2305bfa9-8359-3b57-b381-f618490169c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
152.24.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:ad:bd:95:a7:03:79:61:e1:4c:79:37:ca:d6:d7:b5:68:a1:
94:db:ef:22:95:af:df:06:7c:a2:22:f6:43:2d:b2:68:64:6f:
7f:1d:ce:44:ec:ef:eb:e6:ff:a8:a4:09:b3:e8:7a:da:04:82:
e4:d0:31:7a:47:f2:69:33:0c:81:35:69:ae:06:82:f4:b8:cb:
6e:4b:e1:6e:de:55:52:c3:a7:74:b4:fa:30:5e:c9:5d:32:00:
8c:8d:8c:87:49:0c:71:71:b2:1f:4c:2b:aa:56:10:22:b2:07:
67:58:78:40:63:86:98:79:5f:d7:7b:26:41:23:55:2a:23:c7:
6b:1a:f7:17:49:ad:da:70:4f:63:9b:c7:ae:15:75:79:f8:fb:
09:6b:01:96:1c:57:15:3f:a6:2f:29:53:c5:e9:ca:eb:1c:dd:
57:e1:a4:2f:67:9e:8a:36:ad:fa:7a:f3:7b:de:05:00:4c:91:
84:f7:03:2c:fa:8d:15:13:9e:6f:97:ab:ff:bc:58:35:65:14:
bc:95:e5:6a:e2:59:a4:e0:33:8f:8b:b8:21:2d:f9:c9:d8:b4:
0f:00:c7:fb:75:66:26:07:07:87:be:28:d0:0a:9d:10:09:63:
35:6c:80:e8:77:4a:fa:c0:a0:9a:36:8f:2b:c9:3c:a1:73:41:
9b:a7:dc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:44 2025 by rpki-client