Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5bb061e8-754d-36ce-8ec6-a71d6c87ec56.roa
File: 5bb061e8-754d-36ce-8ec6-a71d6c87ec56.roa (raw, json)
Hash identifier: cqi9tn/+kEWA4l0xBS6f5LlpvOBxQNB9F04GWu74re4=
Subject key identifier: 9B:09:D1:63:C9:33:E3:07:88:DC:03:23:3F:A9:0B:F6:F2:2F:CB:67
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FDC1A3B170984695892B29900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5bb061e8-754d-36ce-8ec6-a71d6c87ec56.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 157.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:dc:1a:3b:17:09:84:69:58:92:b2:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=003d9c0a-35bb-4a5b-9cff-63a73164e0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b2:40:e6:19:32:45:4f:fe:27:7d:68:f0:1a:
02:f6:a8:e8:0f:b3:f0:10:cf:52:dc:b8:74:8c:40:
79:77:f1:d7:05:d5:48:08:64:56:64:9c:5b:42:31:
09:40:d8:7d:5e:8d:da:64:1e:11:9f:85:c7:99:38:
78:d9:08:8f:e3:65:31:49:7f:2f:fa:91:18:dc:3b:
33:13:87:a4:ba:10:81:dd:4f:b9:75:ea:2b:b5:3e:
3e:b0:4d:e9:5e:f6:f8:91:89:d6:f7:91:17:ce:10:
25:b6:c2:84:34:dc:a4:dc:52:4b:5b:f3:3a:06:9b:
53:a0:ee:9e:3f:b9:ff:da:eb:cc:66:07:12:d5:83:
0b:e8:c5:1c:39:f2:1f:c6:7e:fc:11:8b:67:d4:43:
a9:10:68:2b:35:5a:e1:aa:2e:e3:ad:9f:f0:23:f4:
08:05:6f:dc:93:6d:bc:01:78:8f:20:cc:67:79:52:
ae:ec:ad:df:8a:a6:aa:4e:13:dc:04:a7:d8:d9:06:
b1:68:b7:41:e6:78:99:55:40:6a:25:41:6a:36:cc:
43:e9:21:a0:26:25:c5:1f:a0:49:88:76:74:96:dd:
77:97:fb:6c:7c:f3:7b:64:8f:19:3d:1f:b9:13:42:
01:b3:38:8e:ea:ed:19:b5:6d:2f:82:7b:ac:8f:69:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:09:D1:63:C9:33:E3:07:88:DC:03:23:3F:A9:0B:F6:F2:2F:CB:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5bb061e8-754d-36ce-8ec6-a71d6c87ec56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:4b:1c:d6:68:6f:89:d6:b3:ee:db:b4:0c:a4:32:cd:50:f1:
4b:07:e9:a1:1c:bb:dd:8f:ee:d0:d7:f8:2f:65:ec:fc:86:3c:
f0:bb:5e:a8:13:b7:c4:dd:75:71:3a:c7:d2:7a:79:b4:d8:a7:
c5:2f:a3:80:eb:9b:89:1f:32:ee:ad:01:e5:e2:93:34:fa:12:
2d:40:c4:cc:24:4f:92:37:91:28:68:62:9e:1e:f0:34:55:40:
5a:73:4a:74:59:db:00:47:59:4b:42:42:26:c7:69:eb:6b:7d:
50:bc:a4:5b:eb:b6:35:42:51:1d:30:92:fb:89:c0:37:c0:af:
d0:5e:e5:f5:f1:9a:4e:e4:2b:bf:02:55:56:b9:e4:65:a3:5a:
7f:4f:85:ec:be:d4:51:3f:c0:01:7a:7a:e0:14:96:05:e0:76:
e2:1f:2d:f4:55:a3:02:bc:50:f0:dd:6c:07:69:cf:0e:c0:56:
f9:3d:44:9f:94:9f:fd:b9:29:3f:3e:0c:a3:32:b3:cc:48:87:
38:ca:0b:08:57:6a:c3:6c:2e:63:03:8f:01:cb:d2:45:5f:48:
f8:99:c1:e1:c4:84:d0:fc:3c:8a:f6:a0:78:22:78:09:b4:99:
45:42:8b:0a:29:19:78:f3:8d:37:7e:1c:69:79:69:a6:01:da:
2c:ed:bf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:01:19 2025 by rpki-client