Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49c47d91-e30b-3dfc-952e-3509d632f962.roa
File: 49c47d91-e30b-3dfc-952e-3509d632f962.roa (raw, json)
Hash identifier: zIYN7EZ+KilngDAX16Q6LgLHaNR7z2qEVBdMt+hW+LA=
Subject key identifier: 84:77:1A:1F:E2:64:91:2B:EF:0E:42:B1:AC:2D:7D:F4:56:2E:34:4F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F584EF94C6370ABCB0EDD6000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49c47d91-e30b-3dfc-952e-3509d632f962.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 71.152.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:58:4e:f9:4c:63:70:ab:cb:0e:dd:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=5c4b92bf-e359-4097-94e7-74dc82801fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:6d:ba:7d:37:de:d3:d0:94:b9:03:f5:9f:
15:de:3f:d4:6a:2a:67:96:34:66:f0:2b:da:81:52:
72:88:d7:bd:71:e9:09:05:81:da:b2:26:e4:ae:48:
84:fc:ba:33:6f:82:e8:48:2d:1c:b6:71:32:2c:b3:
14:5f:19:34:75:ad:c2:e4:74:16:00:ef:11:56:c0:
05:ef:ad:55:19:21:64:a7:fb:d0:c5:38:79:ca:c0:
6e:49:7a:08:f9:86:4f:50:00:cc:c6:14:84:26:42:
0b:9b:f1:14:4f:25:89:4d:fe:27:80:cb:60:3f:cc:
2a:29:fb:42:98:1a:ee:63:c8:05:4b:fc:a8:ea:ce:
3f:2d:86:b2:e6:53:96:9b:d7:f2:60:e4:8f:d4:f9:
de:e7:8f:92:99:8c:0b:6c:2e:16:50:52:70:43:e4:
4f:7e:69:b1:a8:90:05:d5:76:e1:fc:82:cb:97:e7:
62:ac:db:17:70:2d:6a:1e:47:5d:92:52:5c:f4:a1:
2c:9d:34:f6:d6:7a:54:9b:71:1e:f1:d5:91:1b:e8:
65:74:2d:41:ae:1d:61:f2:cd:a8:27:11:88:cd:06:
3a:82:b3:57:46:3e:12:20:21:b0:19:6a:c7:ed:3c:
a4:75:60:df:2f:76:d9:5c:24:90:4d:8e:b3:d2:70:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:77:1A:1F:E2:64:91:2B:EF:0E:42:B1:AC:2D:7D:F4:56:2E:34:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49c47d91-e30b-3dfc-952e-3509d632f962.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.152.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:08:1d:4a:6f:f1:44:35:7c:6d:db:bd:a4:6c:2f:4d:7d:50:
77:aa:f4:a5:76:70:c6:e7:d2:58:0a:ae:8c:0c:83:e9:12:bc:
e1:5f:c2:84:46:d1:f7:8d:05:45:94:81:06:d8:bf:98:08:d5:
79:f4:0a:54:5e:12:5e:7a:e1:94:5d:27:05:04:c3:d2:cf:57:
bb:98:9b:48:e6:14:4c:a9:5e:59:90:06:36:ac:a4:b6:c6:49:
a1:19:c0:8a:0d:cf:84:97:34:75:20:aa:30:17:69:9b:0c:5c:
ff:5e:9c:df:cc:ad:3d:08:4b:43:d2:8d:f2:9b:99:ed:16:d4:
83:ac:64:4f:30:9e:26:66:4a:e3:06:59:c4:a7:8f:bd:4b:7b:
4e:11:60:73:fd:14:cd:f7:d2:66:87:84:dd:4b:50:b9:5e:6c:
9a:73:8c:c4:9b:ba:2e:6b:36:9b:33:7d:f2:ab:10:ab:1b:55:
11:6f:7a:51:f5:6b:1c:67:26:45:29:fc:95:03:0b:0e:88:4e:
b3:39:82:31:57:bc:38:af:0e:ed:b5:18:e9:0a:ea:be:93:53:
bc:cf:02:c6:e6:aa:24:36:2d:a4:e7:19:6a:5f:05:fc:b7:d5:
ae:7e:f6:1e:07:e5:1c:e1:b7:99:18:a1:52:9a:90:2e:e5:6f:
83:27:a1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:59 2025 by rpki-client