Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/69412b84-2116-3137-a9c5-64ed0d123d11.roa
File: 69412b84-2116-3137-a9c5-64ed0d123d11.roa (raw, json)
Hash identifier: WvcpNPKF4lHYFfAb85N3XZUdHlkeapXiJOPyM10COOw=
Subject key identifier: 5C:CD:50:86:12:9C:AB:31:6A:D6:1F:A9:0A:14:4F:11:84:07:8C:FB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EEF96E4EC61E079547AA7D160
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/69412b84-2116-3137-a9c5-64ed0d123d11.roa
Signing time: Tue 16 Aug 2022 12:00:00 +0000
ROA not before: Tue 16 Aug 2022 12:00:00 +0000
ROA not after: Wed 21 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 152.24.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:ef:96:e4:ec:61:e0:79:54:7a:a7:d1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 16 12:00:00 2022 GMT
Not After : Sep 21 04:00:00 2022 GMT
Subject: CN=5c45099a-f81b-4185-bf23-de4bd8a5dc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0c:a1:86:38:f3:3d:cb:71:21:a3:ee:0a:83:
a9:f4:1e:0c:9d:d1:43:3d:78:10:ed:44:bb:53:ae:
d1:ba:e2:16:1d:3a:30:9b:cb:7e:e5:97:2e:4b:17:
38:ea:1a:5a:bc:53:11:3e:63:e8:fd:53:8a:95:fe:
59:ed:13:59:ed:19:3b:38:90:66:6d:49:13:96:c1:
46:0d:c4:4b:93:44:00:8a:f8:e0:69:da:bf:9d:76:
78:01:71:38:dc:45:da:6e:8a:d1:52:47:90:59:8e:
9b:67:d1:68:fc:c1:27:da:0a:2c:df:84:27:c7:65:
45:3b:8a:56:98:58:33:60:10:7c:c9:3c:43:eb:67:
9b:da:c2:d7:b8:ce:97:53:d4:49:29:27:a6:94:90:
ae:48:20:e2:83:f1:2c:74:e2:de:bc:d7:88:e2:d1:
14:08:8a:03:e9:77:76:a8:af:f5:00:06:2a:08:e8:
00:29:85:18:88:bf:72:df:64:64:08:04:84:3b:dc:
2b:40:a4:13:09:32:97:92:1f:83:43:54:b3:4f:2a:
04:19:40:17:c7:85:ef:4c:7b:e4:b9:06:37:6e:95:
16:73:3d:f1:0d:e3:31:f4:c7:92:6a:4e:f0:92:db:
cd:15:12:69:b8:da:61:11:07:ec:5a:5d:14:64:65:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CD:50:86:12:9C:AB:31:6A:D6:1F:A9:0A:14:4F:11:84:07:8C:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/69412b84-2116-3137-a9c5-64ed0d123d11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
152.24.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:d7:cd:4c:a7:a3:cb:a4:31:7c:a5:a4:8b:43:cb:c1:05:16:
a3:1d:2d:8e:55:cb:d6:65:f9:68:f2:93:59:00:a8:a6:be:d4:
d5:ec:5a:1b:04:e5:26:2e:6c:5b:9e:fa:d0:17:e7:d5:5d:3c:
2e:37:57:cf:52:51:11:9e:9b:80:1a:2b:7c:b0:cc:5a:69:4f:
36:d6:2a:c7:f0:a9:42:ac:aa:80:31:bf:2c:e6:1d:8e:68:e8:
47:fe:91:17:c4:37:8f:08:77:ae:88:7a:2d:cd:d4:c7:ed:32:
59:23:f3:3a:46:3d:55:54:22:69:f6:17:ab:9b:09:6d:77:8e:
e7:b8:00:ae:de:14:35:23:e0:c7:34:c1:0f:33:0a:2a:38:f3:
e2:cd:71:0d:53:3e:46:8f:13:0d:6f:97:0b:06:06:ae:08:7d:
ac:cf:db:af:4f:b0:47:9e:76:79:49:74:5f:de:cc:99:a6:4a:
84:c8:bb:1b:d2:42:1d:aa:b2:ae:40:24:e4:3c:11:4c:15:94:
fe:f9:9c:9f:b0:6d:86:3a:d9:49:a1:dd:26:bd:c6:5d:a0:7a:
3e:9a:e8:1f:44:0c:06:b7:4f:92:0e:68:3c:ef:11:1b:b0:e9:
96:c5:00:e7:ca:30:12:06:25:31:43:a1:29:00:be:b0:29:17:
65:d0:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:16 2025 by rpki-client