Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ef479c3-c4a9-3180-9ead-70c40d2f8b15.roa
File: 4ef479c3-c4a9-3180-9ead-70c40d2f8b15.roa (raw, json)
Hash identifier: bCB3CGOr+U/R6hnWjwdBVPc9j93w/vJpWb4Ovi1/iCw=
Subject key identifier: 6B:85:69:88:EA:0A:CC:D1:58:B3:33:76:E6:19:2E:ED:F1:6F:BE:9E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA7861F295CD685180E853980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ef479c3-c4a9-3180-9ead-70c40d2f8b15.roa
Signing time: Fri 21 Oct 2022 16:30:08 +0000
ROA not before: Fri 21 Oct 2022 16:30:08 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 76.223.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a7:86:1f:29:5c:d6:85:18:0e:85:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 21 16:30:08 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=3014b889-280c-474e-aac8-5af99d4cd011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:21:b3:31:88:27:46:10:ae:52:e0:f8:f8:
03:bd:a0:90:e6:b8:62:36:6f:20:4b:85:f8:63:4d:
c9:44:74:eb:10:77:b3:06:39:35:60:45:2a:cd:f7:
62:94:c8:f8:d3:55:ae:65:de:ca:3d:d5:f5:4f:a2:
3f:c1:a3:32:11:85:27:0e:61:bc:e0:bf:03:e5:b8:
17:83:15:e3:ea:a8:5f:66:3d:89:67:bd:ee:f5:a2:
c5:f7:e6:b1:0d:d0:35:88:6d:77:61:02:99:f0:f1:
13:7b:92:16:5e:52:dc:bf:36:d9:47:3a:85:b3:ab:
28:32:53:a6:2c:f0:a0:ed:17:16:7e:de:6e:01:b8:
76:1b:86:94:80:89:fe:a7:49:54:27:ab:6d:f5:7d:
31:f8:a2:bc:26:a4:c0:27:f1:ca:26:99:07:e3:ef:
a7:81:1a:e9:e8:23:3f:3c:b9:8e:4e:62:f8:b6:a0:
3a:2d:aa:a8:3a:db:ed:5f:1e:33:e8:2a:aa:9e:0b:
83:e6:3a:71:b9:46:30:96:3b:14:31:33:56:40:cc:
51:1a:94:71:85:28:35:27:0d:0e:eb:02:14:76:08:
41:5b:cc:4d:ef:37:d7:19:41:35:ec:9b:f1:c8:60:
8c:62:41:ab:e2:38:09:0c:e2:07:f8:95:5d:26:af:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:85:69:88:EA:0A:CC:D1:58:B3:33:76:E6:19:2E:ED:F1:6F:BE:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ef479c3-c4a9-3180-9ead-70c40d2f8b15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.223.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:7e:5c:c7:a4:7a:88:1f:d3:81:8d:d1:9d:65:82:31:2b:ec:
72:4a:3c:00:8f:b5:2c:cc:00:29:a1:5b:c4:7a:88:78:f9:89:
e9:04:70:f8:2f:80:31:8d:50:b3:c1:ff:f1:1c:78:a5:0b:83:
65:13:06:7c:61:a0:1f:7d:68:09:cc:48:06:82:c8:e1:fa:2d:
cb:5b:a0:f0:17:9b:b0:ed:a8:a4:cf:86:4d:17:77:80:f5:ae:
f0:6c:d1:b8:ea:ea:b7:df:57:a7:58:b2:09:b1:9d:b9:84:49:
cb:98:af:b7:aa:e5:26:76:1e:17:d4:86:ac:64:68:dc:1b:4d:
e4:ce:40:b2:f5:1b:4f:49:d7:c4:c3:8d:05:33:59:04:94:07:
cc:1d:1f:91:5f:eb:eb:d7:ba:4c:4c:1a:b4:84:45:2b:05:8c:
ff:02:8a:28:5d:89:97:36:8c:33:fe:95:75:12:05:5c:4e:9a:
db:42:ab:b7:9a:80:b1:ea:03:d0:c2:75:2c:1c:a9:cd:44:0f:
92:6d:b1:17:5f:cb:13:fa:52:b1:c3:e2:26:b8:aa:9e:b9:3c:
02:d7:46:53:eb:58:4b:29:7a:10:e3:98:4c:bf:d4:87:e9:92:
02:f7:99:fe:c2:d0:60:fb:f5:25:9d:78:0a:2b:a2:b2:04:eb:
5f:71:39:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:23 2025 by rpki-client