Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/568957e7-6fb0-33f2-b236-8cb74afc8a5f.roa
File: 568957e7-6fb0-33f2-b236-8cb74afc8a5f.roa (raw, json)
Hash identifier: 8zueCiNHO5Y2bNqPPbsrYvkCWcGQATlmscPcyOfzsQk=
Subject key identifier: F0:DB:34:87:52:2D:8E:04:CC:A9:91:6C:03:6B:05:76:32:2E:0E:0D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CED8863182E6127E6A6AE7680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/568957e7-6fb0-33f2-b236-8cb74afc8a5f.roa
Signing time: Mon 14 Feb 2022 05:00:00 +0000
ROA not before: Mon 14 Feb 2022 05:00:00 +0000
ROA not after: Mon 21 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 153.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ed:88:63:18:2e:61:27:e6:a6:ae:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 14 05:00:00 2022 GMT
Not After : Mar 21 04:00:00 2022 GMT
Subject: CN=e768a042-5cb3-4e15-bc20-2e0b27c05dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:af:75:ae:21:24:ec:cd:1b:2c:b6:60:77:cc:
40:5e:9b:15:8b:af:ff:9b:01:04:d3:d1:63:0f:17:
bf:76:f6:bb:bb:b5:d6:2a:7d:73:1d:98:85:06:11:
d8:be:c2:4f:50:d5:86:6f:2f:64:e3:71:fd:e3:7c:
dc:58:46:57:2f:4a:96:26:88:fd:8e:07:4d:aa:b3:
10:7b:02:38:e7:aa:08:d4:98:20:73:b0:a6:15:64:
c1:be:ab:a5:10:0a:0a:cc:92:24:f0:30:9e:26:fc:
e1:09:c7:f4:5a:27:50:e5:8d:a9:e0:6e:f6:1d:f4:
3f:09:ed:55:f5:42:a0:a8:26:9b:61:c8:47:51:f3:
0b:27:fe:45:ea:cf:d5:da:3e:15:79:13:84:b7:58:
25:14:df:d6:83:0c:cb:dc:08:e2:d8:c2:7a:70:47:
1a:c9:12:43:fa:5c:07:90:11:a0:6f:41:13:2e:33:
fb:a6:72:8a:5b:6a:b2:6a:41:c4:e9:79:1d:ad:e3:
2c:86:6f:e9:31:fe:22:d9:13:16:03:83:8d:cd:0e:
33:ba:3f:e5:54:22:35:62:04:7a:18:56:50:6e:a3:
91:53:03:8a:74:24:53:0e:af:80:56:9b:42:18:9d:
97:e9:b9:a6:0f:6c:5f:9b:59:eb:e8:8b:6f:6e:36:
65:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DB:34:87:52:2D:8E:04:CC:A9:91:6C:03:6B:05:76:32:2E:0E:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/568957e7-6fb0-33f2-b236-8cb74afc8a5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
153.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:77:f1:f3:ea:63:ed:12:a2:76:f1:39:01:3f:c1:13:91:a5:
8b:11:bb:ab:71:dd:44:b3:78:8e:22:6c:12:df:aa:71:cf:75:
65:91:f6:bb:89:85:6b:fb:6d:b8:05:d6:e7:ac:69:eb:e1:b5:
c7:e9:b9:09:f3:67:8c:20:2a:68:aa:a5:c2:78:e9:5f:90:42:
e0:c7:43:bc:10:8b:36:b7:3f:7c:c4:f1:7c:69:75:8d:40:9b:
d5:09:78:bb:1e:8d:78:68:0c:2a:db:c3:51:0c:4d:0f:a3:55:
23:aa:22:c4:e0:bd:a3:bd:66:34:75:1b:a0:21:9e:08:ea:2c:
48:ea:4b:db:eb:47:f2:0b:39:41:7a:c7:c6:2f:c3:76:9e:2c:
0d:81:84:a3:50:6d:61:81:81:ed:47:ce:87:81:ba:d4:be:97:
93:7c:f3:22:51:76:a2:cb:ec:11:6c:d7:49:fa:16:ec:b0:bc:
e0:ad:cd:3e:92:59:d8:d1:cb:40:e7:67:29:d8:12:b4:db:c8:
cc:c0:22:fc:24:2a:04:ff:2a:33:dd:d1:8e:9c:f4:61:52:65:
40:82:55:44:4f:70:83:1b:60:71:b0:0b:b9:36:27:fb:a7:ea:
5b:ed:57:e3:74:52:1c:a5:29:2f:83:60:d8:0d:87:63:45:95:
31:ec:b8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:06 2025 by rpki-client