Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fd4e40d-61c7-3dcf-a9d3-9c73631a4077.roa
File: 3fd4e40d-61c7-3dcf-a9d3-9c73631a4077.roa (raw, json)
Hash identifier: 4Q5P84mO9c3EY3uvV/k4lyFVhmOrIeIVfW1O8qItDg0=
Subject key identifier: A1:F3:C0:97:E5:5E:C7:DA:20:D1:C5:0B:82:8B:B0:61:90:A0:EA:88
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6DA108D7FDB95860D4E0F980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fd4e40d-61c7-3dcf-a9d3-9c73631a4077.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 162.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6d:a1:08:d7:fd:b9:58:60:d4:e0:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=56c1abbb-1812-4ef7-9a53-97c415c3d4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:3f:d5:e8:15:a2:ae:19:64:e8:39:eb:7a:
88:ec:51:94:85:d4:ef:7a:e4:6c:d8:14:c2:32:4f:
20:9d:05:92:eb:c6:89:66:44:f7:49:6f:b5:ad:bb:
66:c8:0e:af:3d:1c:3c:eb:ba:34:80:46:e8:92:9f:
f6:50:7a:3e:91:87:3c:a9:61:1f:e0:6b:ac:8b:a2:
6e:65:3c:e4:1d:ad:11:fd:8a:db:d2:ea:7b:3a:22:
4a:65:d4:1c:d6:35:e3:8b:37:20:80:70:d9:f9:2d:
49:13:f3:1b:d8:0b:0c:e1:c7:18:10:b7:d3:b4:a5:
32:7c:78:3b:23:bb:5b:a3:31:5b:bb:3b:6a:54:c5:
5b:42:5b:da:ad:f0:00:33:9a:f1:6c:c3:2d:50:a1:
ae:ff:5e:66:0e:a8:94:a2:c5:74:79:f3:7b:11:b5:
35:0f:35:0b:61:88:ee:e2:da:68:71:cb:d6:4f:15:
bc:9b:1e:75:dd:e1:22:14:36:05:17:a1:4a:a2:3b:
3d:95:e4:ce:a7:80:cb:e1:3f:f4:03:9b:50:64:f8:
31:6d:d5:ba:d7:30:f5:ba:2a:9f:32:3d:1b:d1:48:
72:60:ec:ed:b1:fd:c9:c6:a3:fc:7f:1a:83:50:c6:
43:d7:bf:73:e3:4e:ab:dc:c2:bf:c5:be:13:82:c2:
9f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F3:C0:97:E5:5E:C7:DA:20:D1:C5:0B:82:8B:B0:61:90:A0:EA:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fd4e40d-61c7-3dcf-a9d3-9c73631a4077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.85.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:b2:24:58:3b:5c:62:6a:25:62:d6:41:0a:91:0f:47:1e:8e:
f1:b5:a2:e9:53:20:e4:e9:c0:13:c7:d9:dc:b7:75:92:f2:e6:
7d:b8:99:b3:da:4a:18:8e:a0:98:eb:55:e5:64:e0:bd:f6:24:
e2:34:89:bb:43:b1:3c:3a:5e:1d:9a:ae:2e:53:f4:69:7f:ef:
89:59:b8:0b:5c:12:03:42:ac:7c:62:02:9f:48:20:ab:62:68:
91:fb:90:d8:8f:59:03:3d:b9:93:b7:d6:1d:9b:02:ed:7d:8c:
ad:43:7f:b0:02:a2:2c:c3:f1:5d:f5:5a:e2:82:5e:e9:25:25:
99:b1:95:3f:82:ed:f8:4d:2a:fd:a5:c8:c6:b0:a0:c3:b9:21:
6c:2c:02:88:94:29:27:64:72:7a:f8:89:29:c4:e2:3d:b5:11:
7c:b5:9c:19:f9:55:68:ee:10:1d:23:29:90:87:01:f1:d3:b2:
30:d1:a3:9a:a9:0a:73:2d:01:42:b3:54:fa:0a:73:0d:78:01:
48:97:19:8f:a3:67:d2:e2:b5:cf:be:72:32:e8:63:2d:81:90:
4a:e2:57:18:f8:43:c9:21:8a:0d:9b:7c:da:d2:bd:2f:a2:4c:
c3:c8:63:bc:ed:9d:d0:31:af:6c:55:66:3d:6a:a0:8e:e6:4c:
67:5b:1c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:10 2025 by rpki-client