Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3ff6df88-ef0c-357a-a144-7c53f73298bc.roa
File: 3ff6df88-ef0c-357a-a144-7c53f73298bc.roa (raw, json)
Hash identifier: bNuWIgwCXC6rfq7eQzDOJL4a1GL4eDE1VmMtOlHlBrA=
Subject key identifier: 47:05:E6:DB:98:25:45:BD:B8:07:15:89:A0:15:DA:E1:52:43:63:30
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F717E078DDA68D2AA4D6C5EC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3ff6df88-ef0c-357a-a144-7c53f73298bc.roa
Signing time: Sun 02 Oct 2022 12:00:00 +0000
ROA not before: Sun 02 Oct 2022 12:00:00 +0000
ROA not after: Mon 07 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 168.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:71:7e:07:8d:da:68:d2:aa:4d:6c:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 2 12:00:00 2022 GMT
Not After : Nov 7 05:00:00 2022 GMT
Subject: CN=e50c03e6-33f9-4360-bab4-1126d10df46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:71:bb:fc:e5:44:04:85:7d:06:be:c4:e7:30:
6f:aa:e6:36:35:7d:e7:4e:08:f1:76:1a:27:ea:78:
d8:59:e9:29:e1:55:eb:78:73:32:69:3d:3f:bd:12:
d0:3c:5f:02:df:0d:eb:2e:78:06:c4:33:32:e7:5b:
b4:99:08:08:61:e8:d0:4b:c0:02:19:b9:18:eb:e3:
0d:1f:a0:65:56:29:d3:54:ec:bb:6c:55:f3:d5:0c:
27:d1:63:ed:0a:c4:07:49:bf:26:40:50:c5:88:44:
fb:e6:1c:fe:41:3c:5f:e9:cc:b8:28:50:3a:7a:79:
e5:c7:f3:bb:8f:07:99:18:e9:0a:bb:38:57:2d:39:
4a:19:49:12:f3:b4:64:05:7b:03:03:9e:95:60:df:
b2:e2:18:eb:92:02:a9:2a:bf:ba:74:28:87:2c:2a:
25:04:90:fc:da:d3:c1:fe:3c:dd:44:0c:5a:74:9c:
95:a6:57:25:38:cd:59:e3:a7:9d:31:44:52:a5:b5:
f0:a2:08:c4:0f:c9:bf:56:58:a5:2b:41:9f:a3:8c:
ed:ce:07:9f:92:88:e5:35:a4:31:89:d8:4d:4b:56:
75:91:9a:b5:5f:b1:5b:56:f4:e2:37:b9:33:a9:7c:
8d:6e:13:2e:f5:bb:d7:ae:ff:02:19:6f:37:f4:e7:
77:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:05:E6:DB:98:25:45:BD:B8:07:15:89:A0:15:DA:E1:52:43:63:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3ff6df88-ef0c-357a-a144-7c53f73298bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
168.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:b8:ef:14:5a:ee:53:e7:20:a3:d7:90:47:f1:25:87:51:13:
b1:0c:7e:f5:d7:28:1f:dc:22:39:bd:f1:38:93:d6:c0:1c:55:
a8:db:42:c1:45:a1:8b:95:13:f8:51:17:4b:ce:25:ac:2b:e0:
41:f4:28:7d:0a:27:6e:ae:f2:7f:42:34:9b:8b:f8:93:28:ad:
fa:55:3b:02:4b:2f:d8:9d:65:7b:12:1e:c1:2f:2f:2a:a8:9c:
b1:32:63:67:1c:04:3d:90:91:96:c2:54:05:82:d9:06:28:34:
19:ba:41:13:de:e3:23:77:9c:b4:ef:9d:0d:62:e7:96:cb:ea:
b5:95:00:c9:0a:61:80:09:44:44:8c:d0:16:82:a3:00:bc:71:
7d:80:55:2e:be:ab:a0:ee:39:c5:c5:20:1d:98:b5:f6:fd:28:
a6:a9:5d:3b:a3:b9:5b:2a:dd:d2:a8:c3:dd:00:b2:9f:75:bd:
62:8c:8f:8b:8e:3e:ae:67:ff:fb:2b:21:4c:27:46:74:fa:93:
1c:74:1c:6c:c3:98:4c:a9:52:c5:e2:10:79:41:b7:cc:9b:77:
d5:19:46:b3:f8:1d:1a:02:25:72:ea:57:34:ae:1f:d6:ad:1a:
a6:a6:b8:2f:26:00:14:86:e2:0e:83:b5:8d:08:ee:a0:88:a2:
74:76:31:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:01 2025 by rpki-client