Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f5ff9da-f7a7-327e-aeca-b95211c1d554.roa
File: 2f5ff9da-f7a7-327e-aeca-b95211c1d554.roa (raw, json)
Hash identifier: PvbBSRY3dGP/Pwuq0g7POzFOycz/tjYTR4rf3QhCW6k=
Subject key identifier: 28:72:6B:96:7D:7B:B6:6F:DA:51:73:B6:C8:7A:92:F2:90:AA:EE:DE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FFFD779FF09E55EA7AC97F880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f5ff9da-f7a7-327e-aeca-b95211c1d554.roa
Signing time: Tue 22 Nov 2022 12:00:00 +0000
ROA not before: Tue 22 Nov 2022 12:00:00 +0000
ROA not after: Wed 28 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 152.24.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ff:d7:79:ff:09:e5:5e:a7:ac:97:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 22 12:00:00 2022 GMT
Not After : Dec 28 05:00:00 2022 GMT
Subject: CN=e63d10ff-0426-4806-8b8d-ac16e20683b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:ae:4e:43:ca:9d:fe:92:c5:9a:0d:d8:c7:
2f:75:48:ac:98:05:b6:94:98:d2:31:35:e8:8e:39:
60:57:51:c9:57:ba:b4:6f:1a:ee:c1:b0:6a:02:1d:
6b:b7:9b:35:79:4d:38:23:92:70:41:f5:55:02:a7:
ed:d1:2f:b1:95:71:8c:6b:db:27:23:76:a1:dd:3a:
40:e2:f7:e2:71:dc:d4:63:1a:a7:5b:15:e7:be:ef:
c6:29:e2:f6:a5:75:74:15:34:6f:a9:fb:aa:c9:ec:
32:f6:24:e3:20:8c:1c:af:72:e1:7f:0a:50:dc:d7:
ad:b8:4e:5f:64:72:6b:79:96:1e:93:b2:d2:89:14:
6f:2e:8d:ee:a1:27:b1:89:e6:6a:3f:05:a6:1e:d6:
fe:4c:f3:1c:ee:f0:e0:e4:05:4d:a2:14:0a:2f:f4:
fd:66:5a:5f:8b:a7:27:0b:21:f1:c1:0d:2c:e5:05:
7f:a2:37:96:0b:77:24:d5:aa:b0:3d:1b:cb:5d:a2:
d6:13:94:9f:71:e4:95:7d:1f:6f:f7:e0:4a:eb:ee:
6f:7e:52:b7:c1:d5:0e:a7:6f:5b:6e:a8:f0:db:3f:
b7:94:26:97:c1:59:bb:b8:e5:06:cd:9a:30:ed:dc:
25:e5:93:9e:a1:8e:be:1d:0a:27:ba:ee:b3:39:be:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:72:6B:96:7D:7B:B6:6F:DA:51:73:B6:C8:7A:92:F2:90:AA:EE:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f5ff9da-f7a7-327e-aeca-b95211c1d554.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
152.24.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:1f:0e:0b:8d:ee:4d:f0:13:e7:b6:13:e7:0b:39:1e:f7:c6:
6b:06:cf:78:95:7f:b7:ab:71:53:2f:1d:c0:08:de:1e:d6:41:
0c:e4:1e:ce:3e:0a:5e:a2:04:70:30:a2:32:c3:df:30:65:ff:
64:a2:e3:7c:1e:ab:d0:08:30:1b:9f:b5:22:0d:59:7a:d4:76:
a4:0c:df:74:06:08:0e:4f:1a:03:6d:56:58:c2:70:fd:95:29:
57:3b:c5:fa:88:47:59:b8:b6:cc:d8:d8:36:12:0a:55:3b:f0:
14:da:20:30:a8:a2:d7:2d:2f:a8:90:88:2a:f1:46:9e:ec:0b:
25:74:b3:51:a5:07:7f:a0:da:0f:a7:11:16:ae:07:5e:07:d3:
a4:3b:22:1f:24:84:d0:2e:c9:38:92:4c:a6:91:61:5a:47:81:
7d:56:7b:95:b9:bc:83:80:cd:c7:14:eb:10:3f:2c:ff:d3:c9:
cf:d9:ed:35:44:2d:7c:b4:25:ee:08:1b:6b:1b:46:53:2f:63:
9a:6f:51:88:d9:46:1a:b6:b4:da:20:12:80:49:18:06:7f:82:
3b:02:82:c6:31:07:72:92:f3:30:9d:76:c7:04:c4:ba:3e:94:
0e:7f:d2:11:4a:c2:fb:49:74:74:78:4b:77:a7:b2:e9:4c:9d:
fc:2f:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:02 2025 by rpki-client