Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68985c92-095d-391e-94c6-62fc15e47ab4.roa
File: 68985c92-095d-391e-94c6-62fc15e47ab4.roa (raw, json)
Hash identifier: 11zA64hd2dkntxuIGWHm0Yxa+zB4WMAv/H7cY9AdB0g=
Subject key identifier: B3:D0:CD:C7:14:2C:E6:9E:0C:5A:68:47:FC:32:52:FA:25:20:02:FE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C970CBC2463D2E5EA1CFCDB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68985c92-095d-391e-94c6-62fc15e47ab4.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 162.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:97:0c:bc:24:63:d2:e5:ea:1c:fc:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=b647cc13-cc2e-409d-9b83-e7b4aab5de6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:0a:42:88:88:d4:21:22:e0:f8:af:09:d1:
23:86:c5:e6:f0:2c:83:5c:15:ed:ad:65:54:b6:36:
41:74:40:93:2e:fc:b0:8c:c2:ec:e9:6b:60:23:94:
5c:78:3b:9c:90:a6:7a:42:d4:2a:72:51:b5:1b:bf:
70:cd:6e:5d:68:7c:87:a6:57:5a:b2:55:cb:5a:0f:
9b:06:55:74:0d:0b:0c:1f:4f:49:4d:be:55:38:a2:
7e:2e:e0:dc:3d:0c:72:3b:8e:3c:cc:c9:1b:3c:ac:
cb:4d:64:17:03:66:55:c2:4f:35:9c:69:7a:68:10:
e6:a8:0a:fb:5e:a4:2d:ef:50:5e:90:35:69:f7:66:
63:44:3d:26:31:1e:83:7b:8d:cf:40:73:6e:6a:1f:
28:25:cf:83:ab:24:b6:4d:fc:e6:52:82:b9:c8:4f:
f7:6c:bc:cc:a7:ef:ec:51:fb:7d:41:e5:03:d1:5c:
14:1d:25:4c:21:9a:0c:cc:6c:31:6c:30:43:ce:f9:
08:d2:ab:f0:c2:ff:b8:21:77:df:a8:94:67:72:4e:
62:19:ed:8f:59:77:f3:24:34:09:9a:65:8b:34:4a:
d4:0c:f8:1e:d3:a9:80:20:31:32:63:41:c0:20:89:
5c:ca:1f:7e:60:3c:d4:c1:ac:ad:ee:bf:08:67:47:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D0:CD:C7:14:2C:E6:9E:0C:5A:68:47:FC:32:52:FA:25:20:02:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68985c92-095d-391e-94c6-62fc15e47ab4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.85.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:d7:12:04:b4:f1:21:76:7d:56:b5:dd:be:9a:44:d8:f8:7f:
0e:6b:35:80:10:ab:61:b9:a3:c9:4f:64:2e:93:0c:98:e3:7d:
dd:54:fb:6c:5f:ce:df:fd:9c:8a:19:6b:a4:74:3a:05:da:52:
95:a9:f5:9e:41:d6:91:da:00:53:1c:df:86:3f:5d:eb:a2:23:
ef:7f:7d:62:49:13:17:17:5c:26:2e:cb:cf:cf:b9:f3:12:35:
d0:73:65:cf:30:44:f1:c8:6c:9d:c5:87:bf:53:99:74:16:ba:
cb:91:6d:72:5e:63:85:8b:c9:e9:fb:34:9b:26:f5:ec:ea:08:
81:40:33:cf:d4:a5:0d:fb:64:67:a4:51:89:4a:4f:b1:ff:b4:
b5:63:24:ac:ca:93:2f:5c:29:e0:80:a5:17:2b:b6:61:af:d6:
08:e3:80:bd:1b:50:6c:6b:a3:6f:66:0e:5b:0c:46:0d:2b:eb:
18:e3:39:01:9f:6e:c2:cd:6d:d1:ff:0e:b3:2e:0c:22:5c:0f:
e9:d6:a7:67:8c:82:bb:16:66:27:10:eb:b5:3a:8c:eb:a3:1a:
24:06:d8:43:74:20:49:ee:bd:44:51:11:b2:ea:04:15:64:77:
63:81:4d:ab:2f:6b:69:a5:35:e6:06:9f:b0:66:0e:ea:8e:6b:
20:f4:ce:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:51 2025 by rpki-client