Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66ed7d73-dc2e-3c24-ae23-d0066f277ef4.roa
File: 66ed7d73-dc2e-3c24-ae23-d0066f277ef4.roa (raw, json)
Hash identifier: itz9mxPq9fXwj1P3cfsL2tSbANd9itiCdiL7TE6J/R4=
Subject key identifier: 8A:8D:C5:43:78:89:56:71:8F:5B:96:C4:54:8D:93:1E:83:2A:3B:79
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402AB4CD3DA576C3FC3F1FA180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66ed7d73-dc2e-3c24-ae23-d0066f277ef4.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 168.241.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2a:b4:cd:3d:a5:76:c3:fc:3f:1f:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=7aa27187-0280-43c8-bee6-ca4cb399f185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:77:19:08:af:a6:84:ed:19:10:d1:36:a9:28:
7a:20:26:06:c6:39:5d:06:4b:3f:8e:98:cd:1e:f4:
06:f6:8f:34:fc:9e:e8:6f:bd:f6:21:97:b0:5a:86:
47:9b:b0:e9:cb:b9:29:60:eb:9a:c8:2b:10:24:4d:
7d:15:0f:00:61:11:fb:ed:7d:b4:bc:8a:25:89:27:
d5:dc:35:da:16:ef:62:99:da:b2:47:b1:df:bb:d7:
82:85:da:d6:7c:0b:9f:74:14:ca:c5:d2:28:7f:26:
72:2c:27:42:2e:1c:c0:ae:8b:b8:62:0a:be:b6:1c:
b9:f1:be:2c:65:ac:a3:14:b7:d7:a0:b0:c1:32:7c:
cd:11:ba:d1:aa:7b:76:91:1c:60:31:c2:cc:3c:0f:
db:bc:8f:7f:e6:23:5b:b4:30:f2:9f:15:1d:db:27:
36:0f:0d:18:4b:54:78:ee:1a:9d:59:a6:55:82:6f:
cb:a1:5d:b9:b2:53:31:37:d7:96:99:c3:d2:bc:90:
b8:28:bf:e7:9b:0a:a4:50:41:a2:61:b4:34:db:d6:
bc:c1:c8:4d:71:58:cf:e0:a5:b3:c9:db:9a:98:74:
b0:94:d0:39:98:83:2d:33:c5:d6:33:9f:2f:51:e2:
42:37:69:47:26:50:1c:0f:5c:6a:e7:58:0e:d5:d6:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8D:C5:43:78:89:56:71:8F:5B:96:C4:54:8D:93:1E:83:2A:3B:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66ed7d73-dc2e-3c24-ae23-d0066f277ef4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
168.241.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:af:9d:c6:dd:10:dc:46:b9:67:09:17:65:ce:1b:bc:e2:52:
bc:62:56:61:40:13:3f:d6:87:10:63:1e:98:c8:aa:5f:71:e2:
e5:49:70:47:50:36:7c:73:ff:97:28:9f:9e:81:f2:a6:6d:c8:
e4:70:ff:31:ed:7e:a8:b4:c8:2d:51:eb:37:1a:fb:f9:8e:b9:
fe:6f:74:66:03:17:59:07:c2:07:c8:60:64:b1:f6:8c:b1:6e:
56:53:ed:08:e4:31:24:dc:cc:ae:0a:a8:46:82:e8:b7:28:3e:
9a:96:8c:3f:64:31:d9:f6:ab:c6:b2:a0:1a:9e:ea:ff:83:67:
b3:af:29:fc:f3:b7:30:9f:f5:76:8c:e5:5c:77:85:52:cd:c5:
7f:6e:2e:47:fc:0e:7c:8f:e3:75:19:f3:85:d9:3c:f6:76:a9:
cf:44:e1:17:1a:07:1c:3b:c1:b2:6d:0b:39:6c:cc:7b:38:59:
c6:59:63:4e:8c:6a:be:43:c7:f8:0f:75:09:da:87:f5:9c:22:
29:18:b9:3d:a8:c0:72:ce:fb:5f:1a:c6:fe:cf:99:c3:1a:56:
44:65:24:fc:4a:f0:f7:84:32:91:ae:15:6a:b3:22:2c:4c:10:
f5:e3:f5:7b:9e:e7:14:f3:03:5a:fe:68:5a:07:d9:9b:16:e3:
18:6b:78:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:13 2025 by rpki-client