Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3f8fbd44-cabe-3f39-bbf0-827579eda181.roa
File: 3f8fbd44-cabe-3f39-bbf0-827579eda181.roa (raw, json)
Hash identifier: gvq3e3Kbx3+IluASi9bjnd2j4hDkKOccQG3/xaexBms=
Subject key identifier: 14:4E:56:02:E8:1C:1C:62:70:7B:E3:68:25:1C:A5:9F:B7:1D:B1:E1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBA8BF6EE224B894CEF6CC700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3f8fbd44-cabe-3f39-bbf0-827579eda181.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 167.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:ba:8b:f6:ee:22:4b:89:4c:ef:6c:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=47920000-0a52-4595-9a51-d509181190bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:15:83:a9:3c:42:5a:2f:57:af:8c:c3:43:
34:4e:d4:b7:b4:00:d4:2d:97:54:cf:28:0a:ab:8a:
96:26:82:00:d1:08:a1:ff:22:82:24:71:7b:02:11:
20:ff:87:1e:6d:b1:2a:e3:a9:87:88:44:3d:b8:98:
d5:e8:64:42:c8:fb:52:e6:1c:23:e2:51:3e:8f:12:
7e:23:a3:38:08:d2:61:c6:02:97:9a:79:9f:37:dc:
40:47:0a:1b:3f:e0:9d:bd:5c:31:be:ae:89:28:e2:
8a:f2:42:a4:2b:6d:eb:6f:94:81:02:e0:6e:22:20:
6b:34:5f:a3:4f:39:81:ba:0d:72:de:06:64:d9:bd:
bc:ad:4b:49:8c:b9:e7:c5:8e:16:45:e7:a8:e7:32:
21:52:71:89:b4:87:ec:e8:3f:83:5b:09:ac:98:38:
2f:42:49:45:f7:1f:2b:14:f6:7c:d5:f1:59:ba:28:
92:f9:40:17:93:33:3b:60:e5:fc:bc:8b:be:30:47:
27:06:2d:0c:94:2c:83:59:f1:c2:26:f8:84:0b:ca:
8a:4d:e6:fa:ad:9f:43:c3:17:f1:11:4f:86:82:7b:
41:e4:aa:5d:3b:48:15:36:63:2e:fc:bf:40:05:a8:
03:c2:5d:00:04:05:d2:76:60:d5:a9:e4:5a:99:14:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4E:56:02:E8:1C:1C:62:70:7B:E3:68:25:1C:A5:9F:B7:1D:B1:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3f8fbd44-cabe-3f39-bbf0-827579eda181.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:04:6f:44:6b:77:8c:29:e3:06:9c:54:84:cc:b7:80:34:47:
87:50:4e:9e:26:22:a9:2f:54:bb:07:f1:17:f9:0d:02:b1:28:
eb:fe:42:f7:40:ce:f4:7f:24:25:39:73:28:c7:2b:03:da:1e:
e1:68:19:42:4d:50:89:7d:bd:9e:5e:b4:fb:4c:be:c4:71:f5:
58:d5:4a:39:ee:d9:4c:ee:59:9d:f2:00:7d:7c:0a:c7:ec:95:
26:ff:72:9b:6d:f4:85:90:84:06:4a:da:3e:9f:e2:02:ef:b0:
0d:ec:09:a9:8e:b4:2d:05:3c:e9:19:61:71:57:1c:c8:8c:c5:
4c:4a:e9:56:47:47:22:12:bc:53:fc:5e:b2:05:01:34:f5:d8:
4d:df:eb:9f:d1:5b:e9:b2:7b:fa:11:cb:2c:1b:cb:1b:9c:4f:
cb:f3:55:f4:f9:27:77:4a:70:60:cb:69:9a:76:85:77:13:84:
f0:0c:0d:07:fc:6c:67:1a:49:34:7e:a4:b6:a1:18:79:7d:94:
f6:07:05:19:7f:f3:20:9f:fb:25:08:bc:00:3d:82:7a:0c:e1:
fa:f2:9d:c4:f8:50:46:9c:9b:0b:16:a7:bf:31:9c:af:d4:74:
bb:89:f2:86:6e:24:23:b5:51:f1:2f:e5:84:46:50:7e:52:22:
ba:4a:91:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:35 2025 by rpki-client