Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28a68e66-4634-3550-af73-4c51a6f3e2a5.roa
File: 28a68e66-4634-3550-af73-4c51a6f3e2a5.roa (raw, json)
Hash identifier: wAbyNUyq973LVmVws0CNCJv9HfAgkuY1DwcK8QFoYqY=
Subject key identifier: A9:D6:B2:D8:40:C7:C9:51:74:D3:48:A9:6A:23:90:18:2B:08:A9:FF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CA394E3B3F3196E5B37A86F90
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28a68e66-4634-3550-af73-4c51a6f3e2a5.roa
Signing time: Wed 19 Jan 2022 05:00:00 +0000
ROA not before: Wed 19 Jan 2022 05:00:00 +0000
ROA not after: Wed 23 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 159.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a3:94:e3:b3:f3:19:6e:5b:37:a8:6f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 19 05:00:00 2022 GMT
Not After : Feb 23 05:00:00 2022 GMT
Subject: CN=ff19ab66-8369-43dc-b72d-ecb2af8c4280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:bc:17:ed:83:7e:60:1c:ce:f9:7b:8d:d4:
3e:ef:77:67:88:72:01:6f:de:e2:15:d9:08:a8:8d:
f7:42:82:e0:69:4e:ea:82:c3:96:85:c2:d5:b6:70:
b2:4e:73:93:e6:72:ee:80:e0:7d:21:53:d2:67:d3:
f1:00:d1:74:76:72:81:7f:8c:35:d9:bd:69:cb:3f:
5c:c2:2d:a3:b0:6f:6e:d6:d1:41:62:2c:6d:e8:0a:
e7:44:73:28:2a:3d:7a:42:b8:81:25:8d:92:0f:ea:
bd:ef:b1:0b:64:ce:ef:aa:f3:f0:57:e9:e3:73:1a:
85:52:d7:e9:c8:66:d4:2d:7c:2d:7c:25:e9:ee:9a:
6a:fd:f6:5e:66:4b:1f:ff:de:7b:d5:09:f5:26:f5:
c6:ea:a2:74:e9:fc:ec:e6:a5:7d:37:49:02:77:64:
77:95:86:c1:3a:ec:d4:5a:06:2c:ee:65:ae:c9:35:
24:a8:c1:c8:c2:b6:f8:be:3f:50:76:b0:51:96:a4:
48:f2:fc:35:f7:6a:d1:04:e6:1d:1d:60:35:bf:95:
4e:73:fa:c2:b8:5c:23:c9:e0:7c:09:af:e5:a8:62:
ee:ca:5f:24:0c:43:5e:a4:34:ef:60:ce:7d:0f:4f:
3c:0f:cd:3d:ad:27:ef:61:73:30:4f:62:dd:7b:d1:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D6:B2:D8:40:C7:C9:51:74:D3:48:A9:6A:23:90:18:2B:08:A9:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28a68e66-4634-3550-af73-4c51a6f3e2a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
159.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:6c:5f:7c:1c:70:6b:c4:3a:3f:e5:fc:85:3d:45:dd:3e:44:
76:d3:7f:c1:45:ce:47:d3:05:26:ec:31:55:55:e0:77:b6:a8:
f9:ed:ea:19:2c:d1:e5:3d:b0:64:ec:5a:a9:cf:39:6c:23:84:
99:2b:b6:85:34:a4:00:95:19:76:0b:1d:96:81:e6:5d:06:8c:
c3:65:62:af:c6:e8:a6:bd:3a:2f:62:d7:36:3b:8c:9f:07:9d:
56:58:15:f8:9a:f5:da:f5:bc:8d:66:3a:48:8f:02:a8:3b:b6:
d3:95:5e:e5:29:35:36:4d:03:fa:a8:25:64:db:59:ca:e3:4a:
b4:01:5d:73:8a:ab:57:bc:c4:64:45:8b:1a:a9:48:a2:5e:c9:
73:b4:3e:0c:9c:3f:68:9d:6a:30:4f:72:e0:28:3e:91:7a:a4:
1a:e5:20:be:9d:7c:39:d6:35:74:f3:a6:01:2f:09:ba:b1:7f:
31:6b:29:ee:cd:dd:a8:cb:2b:c7:fa:8d:99:a5:1b:a8:6e:5d:
c7:c9:cb:37:7e:69:c7:c8:2c:70:03:e8:96:0b:17:44:d2:04:
71:35:79:93:40:0d:08:4d:c5:82:78:99:a2:2a:82:fd:85:33:
0a:0d:31:c9:fa:6f:64:8d:5d:75:09:02:57:cf:bd:f6:7c:03:
5d:f9:93:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:43 2025 by rpki-client