Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a2808d3-aaca-3f0c-a05b-c3b111aa38c7.roa
File: 7a2808d3-aaca-3f0c-a05b-c3b111aa38c7.roa (raw, json)
Hash identifier: 7KH/WZdNIeAq15EdwZHtzzj2wOGa2yD5C/syblEh8RI=
Subject key identifier: E5:00:04:73:4B:A8:D4:E5:D8:4B:D7:BE:1F:51:F4:1F:69:B1:0B:CC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D89EDA4D04729AB73DB368700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a2808d3-aaca-3f0c-a05b-c3b111aa38c7.roa
Signing time: Mon 11 Apr 2022 04:00:00 +0000
ROA not before: Mon 11 Apr 2022 04:00:00 +0000
ROA not after: Mon 16 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 160.209.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:89:ed:a4:d0:47:29:ab:73:db:36:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 11 04:00:00 2022 GMT
Not After : May 16 04:00:00 2022 GMT
Subject: CN=a766ae6a-f408-4224-949d-5a74ba678608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:53:18:12:e1:98:7f:1b:16:75:37:33:c6:
8d:1c:b1:f1:fd:7c:bc:ff:55:a1:0f:4f:ef:11:6c:
66:4f:27:20:e9:f9:5e:a2:0f:f9:4e:00:50:75:02:
4b:8b:bb:fc:7b:bd:7b:a0:94:85:07:c3:b5:83:2a:
10:db:54:1d:0f:33:e4:64:92:bd:eb:f5:8c:52:10:
1c:67:81:ab:56:df:02:21:07:b7:01:06:a5:23:26:
9c:f5:fc:50:49:ba:f0:92:5b:c5:85:5d:96:05:e0:
3c:84:f2:3b:f1:79:d5:81:d9:99:d8:67:78:a6:65:
97:2e:18:0a:ff:fc:08:63:9b:34:56:c1:d5:af:30:
6f:da:31:1c:65:5e:7f:e0:f9:16:f4:08:26:52:83:
f9:6c:13:a9:74:f1:f3:ad:af:ad:77:1e:ba:44:1d:
3d:40:2f:6f:00:a6:00:f7:55:81:d9:b6:5a:a7:5a:
27:bc:b1:cb:14:dd:1d:d0:46:f3:32:39:00:f1:47:
41:e2:8c:4e:e0:4c:08:c9:77:f9:ef:6e:f4:98:fc:
34:9b:a4:b6:10:78:a0:86:71:d2:50:66:6c:07:3d:
1c:4e:87:6b:92:d1:da:d5:b7:b6:61:90:2c:ae:6b:
08:42:03:73:64:61:a0:28:51:7c:51:07:e7:ad:3d:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:00:04:73:4B:A8:D4:E5:D8:4B:D7:BE:1F:51:F4:1F:69:B1:0B:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a2808d3-aaca-3f0c-a05b-c3b111aa38c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
160.209.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:65:3f:21:34:42:59:d7:bf:e7:d3:aa:07:78:0f:86:65:10:
e0:85:f8:78:0a:2c:f7:e3:61:6d:99:4d:b4:ee:39:b2:fa:24:
3d:11:b9:d5:2f:65:b8:e0:ca:34:dd:7a:d4:6f:7d:6a:6e:a7:
17:2b:3c:84:f2:9d:f0:2f:7f:a4:ca:ee:18:a6:46:25:c1:c2:
fa:53:19:f1:39:0f:52:9e:2f:02:98:ac:45:c2:c6:23:8c:6b:
01:50:a9:bb:0e:55:07:c1:79:c2:3e:dd:ec:ee:0d:58:b4:40:
e3:49:af:14:31:45:a6:ff:cb:66:4c:0c:b9:55:b8:19:39:50:
22:5a:99:d4:09:3e:bb:d2:0b:1d:a4:20:c1:5e:98:cb:4e:a1:
6b:0a:dc:59:02:4f:a5:9b:a2:22:d8:d8:81:bb:53:73:49:0c:
11:c6:b7:cf:1d:fc:d1:34:d8:ad:4e:14:1d:d5:91:a5:83:4e:
48:b6:6e:e6:41:4f:df:a4:34:43:92:79:36:ef:6c:22:45:0c:
18:52:5c:02:e1:e6:5a:da:2f:33:c8:9d:e8:88:3a:c7:76:fb:
6a:cf:75:91:b0:e0:0e:ff:52:a4:e6:99:5b:cc:48:ba:b2:de:
50:93:2e:6d:0c:ef:55:8a:13:c5:ea:e5:21:65:c9:5c:8d:f1:
d2:3a:ca:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:54 2025 by rpki-client