Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/465a0aa1-c7fc-3d38-a349-0d2057ac0735.roa
File: 465a0aa1-c7fc-3d38-a349-0d2057ac0735.roa (raw, json)
Hash identifier: xEkFZUdErJsRRiucodwO4w+X6zX1oOY3SgZCyCELc4Y=
Subject key identifier: 28:AA:C0:7C:6B:3F:8D:4C:5B:72:74:77:11:B5:42:B4:79:A5:C3:F1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840350F752E7F598BE66CF0B700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/465a0aa1-c7fc-3d38-a349-0d2057ac0735.roa
Signing time: Sun 11 Dec 2022 12:00:00 +0000
ROA not before: Sun 11 Dec 2022 12:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 158.254.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:35:0f:75:2e:7f:59:8b:e6:6c:f0:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 11 12:00:00 2022 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=84d917b2-1e5c-486c-aea0-7b89e8e63d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:13:f2:ba:d1:b8:95:c9:ec:34:ac:df:aa:7c:
66:02:ff:1d:cf:65:cb:49:93:33:8c:bd:d3:4e:23:
0e:5f:49:30:5a:77:af:ba:22:cf:44:4b:81:99:4b:
bd:87:24:92:2e:a5:2c:d0:ed:88:5d:41:1f:80:0c:
71:c9:6b:1a:3a:8a:ba:9e:54:72:e3:eb:3e:1b:90:
93:de:db:74:d0:ca:62:da:d7:e2:f9:23:9f:12:d1:
56:49:fe:f4:5a:af:4e:92:78:16:91:99:54:f8:5c:
25:77:44:fe:48:5f:a6:68:71:20:aa:73:48:38:2c:
5f:cc:07:e2:d8:71:ce:b6:d4:2c:34:50:70:16:71:
5e:dd:54:49:ce:d2:12:19:d3:6b:2a:7e:07:0c:b2:
9f:68:aa:16:30:e3:9c:01:90:c3:50:31:03:68:e5:
e3:24:4a:bc:bf:a7:5b:2e:a4:58:94:53:2f:5d:3b:
1e:f7:66:9f:e5:96:e8:7b:0c:97:2f:75:c2:e6:fd:
30:2d:5c:f6:0d:90:b4:e0:3e:e9:2f:72:f9:fb:63:
a5:1f:c8:b0:ed:89:e5:9a:52:06:88:c5:06:6d:a2:
fe:48:aa:8e:ee:d2:df:bc:0e:26:b0:74:e6:a7:c1:
cd:4e:50:a4:c1:e5:cf:53:fa:5a:7b:a0:e5:94:a1:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AA:C0:7C:6B:3F:8D:4C:5B:72:74:77:11:B5:42:B4:79:A5:C3:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/465a0aa1-c7fc-3d38-a349-0d2057ac0735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.254.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:93:18:a1:55:d8:5f:b3:97:df:03:e1:86:6f:5d:31:38:6d:
0b:14:e6:3a:47:de:ff:08:2a:4e:a3:b9:82:b7:d5:e9:7d:e4:
56:1a:e6:d6:c9:5a:7b:7f:88:dc:57:28:33:a3:69:a4:74:b0:
39:ae:d6:12:c6:6f:ee:bc:38:88:45:20:5f:ef:28:f6:d3:33:
f0:97:12:2b:93:05:6c:8a:26:0b:7a:95:1d:b3:06:c2:d6:36:
99:ac:57:48:bc:08:e2:8f:c5:32:d1:9b:cd:96:b2:94:57:de:
88:67:3b:01:2b:3a:46:85:45:60:20:e9:8c:11:50:03:1a:f3:
19:1c:f3:7e:ba:71:97:aa:b1:49:f8:1b:e8:4e:a6:96:84:46:
62:15:45:87:02:43:80:54:8f:06:be:bb:20:f2:12:bf:8e:65:
7c:96:83:c5:77:af:b1:d4:20:9a:b6:05:35:6e:2b:a9:fd:e8:
f1:31:3d:5d:97:bd:ad:f2:f7:45:5a:a5:30:e6:38:0a:1b:73:
0d:f9:c0:ac:a3:32:53:74:97:99:8d:d6:84:bd:77:cf:39:52:
27:f3:b7:83:82:21:a2:13:39:02:38:a8:71:c3:6c:63:d7:e6:
a2:39:2a:48:a9:d9:aa:7b:ee:f0:d4:87:c9:d9:a6:d2:a5:9e:
00:b3:42:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:08 2025 by rpki-client