Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/641b6000-2e56-34e1-bead-8d507e0ef8a9.roa
File: 641b6000-2e56-34e1-bead-8d507e0ef8a9.roa (raw, json)
Hash identifier: l3Z7KwoW1NhNcHPm4hsc6IzhCNCcm6dbojBfqZa7ZgU=
Subject key identifier: FF:AE:4A:34:EE:A3:7B:43:6D:0A:A0:19:23:4B:2C:BA:E7:87:21:40
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0C813E79F2D6C7E8BE008300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/641b6000-2e56-34e1-bead-8d507e0ef8a9.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 104.153.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:81:3e:79:f2:d6:c7:e8:be:00:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=a258840a-ced3-4c89-b421-400f5554a72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ab:41:2f:ed:4f:9c:d6:69:ea:45:21:c1:f2:
a3:f2:78:bc:a3:a9:e3:72:fc:64:c5:38:7e:76:2f:
3a:40:e6:0e:f9:b7:80:73:bb:ea:09:bf:49:de:63:
f9:6d:e8:8d:8f:0d:21:6c:28:d4:c3:60:fd:7b:db:
5e:9c:d7:ac:be:b4:93:53:6e:be:19:a7:51:50:0d:
b2:9d:6b:68:ba:8c:04:36:b9:2e:e0:25:78:79:d8:
d7:a6:e2:4e:cc:81:df:11:b8:cf:4b:94:68:97:6f:
5f:15:06:cf:f9:4a:6f:ba:0f:43:b6:b8:b9:7b:57:
a2:1e:62:b2:e0:de:be:c7:aa:41:27:15:c4:ec:81:
7c:ca:0b:be:91:c1:ba:c8:b6:76:df:d9:a7:ab:2d:
ac:b5:fe:43:b6:58:18:66:d1:70:ec:71:2a:c9:f0:
84:58:be:fb:25:79:92:80:1b:4d:47:82:eb:e6:48:
40:07:47:d1:d1:fe:88:24:8d:76:ea:24:9a:d3:44:
cb:0f:d1:f3:06:c7:f2:5f:12:7a:4a:c4:86:d1:c6:
d2:02:70:19:a6:f5:40:3b:ce:9d:1f:00:ab:b3:a4:
ec:17:29:27:50:6f:31:ce:cc:78:32:d5:81:fc:51:
a1:aa:20:a6:f0:e4:74:af:1a:0a:a6:07:f4:67:2b:
57:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AE:4A:34:EE:A3:7B:43:6D:0A:A0:19:23:4B:2C:BA:E7:87:21:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/641b6000-2e56-34e1-bead-8d507e0ef8a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
104.153.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:09:cd:47:c5:e3:fc:9f:26:7e:1e:bb:c7:9d:87:c2:54:10:
f3:5f:4f:80:80:f4:82:d9:89:4f:7c:bf:0a:c5:36:1c:7d:f4:
e8:74:61:17:89:2e:6e:7f:52:0d:84:c0:0e:88:ef:b6:ee:cf:
2a:a6:29:26:6a:a2:e5:8a:31:5e:e5:b3:57:49:19:80:63:a3:
c6:43:44:2b:72:a3:4f:68:20:d0:29:94:53:60:a0:8f:ec:8a:
c8:ee:45:5a:cc:ad:5a:e0:e9:38:32:6f:6a:3b:ed:9b:4d:28:
21:90:de:42:ff:74:e4:52:2f:09:c5:c5:81:51:8d:7a:2d:03:
d8:f2:b7:6a:8f:e6:1a:71:15:85:fb:54:aa:fe:1b:51:66:99:
69:2e:8d:fa:d0:46:97:08:5b:d1:f6:d7:b1:ac:4f:dd:51:42:
5f:92:b7:e5:f6:c9:ac:e6:23:0e:2c:ac:9f:c8:9d:ee:f5:69:
76:d1:5b:43:42:9e:70:5a:c8:74:c6:d4:97:d2:75:77:70:4b:
2a:b9:3c:49:54:85:23:4f:61:5e:ea:d1:f6:53:c6:19:6c:44:
6d:94:cf:8c:d2:01:0b:47:24:d9:d4:20:6d:63:58:eb:2d:32:
a6:c3:9f:4f:74:af:f1:4d:bf:18:ca:2e:f0:55:a8:c1:0d:1c:
db:ac:f4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:15 2025 by rpki-client