Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d830d06-8017-3d87-9287-f42b1bbad739.roa
File: 7d830d06-8017-3d87-9287-f42b1bbad739.roa (raw, json)
Hash identifier: pWea/bfsQwCrKTkb5bJjoSWdmGvZMPn9lZ/O+aJTsMc=
Subject key identifier: 18:41:AF:39:CE:53:F9:74:8F:9F:C6:42:1A:67:84:7D:64:11:26:80
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400DEAAB23B19AB3687BEA5080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d830d06-8017-3d87-9287-f42b1bbad739.roa
Signing time: Sun 27 Nov 2022 12:00:00 +0000
ROA not before: Sun 27 Nov 2022 12:00:00 +0000
ROA not after: Mon 02 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 158.254.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:0d:ea:ab:23:b1:9a:b3:68:7b:ea:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 27 12:00:00 2022 GMT
Not After : Jan 2 05:00:00 2023 GMT
Subject: CN=ca1f0cc2-7240-4668-bdb6-7e354805d33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:8b:d6:41:a8:00:6c:7e:f6:c5:39:7d:f5:
e9:a5:d7:c6:65:5a:ea:5b:9b:07:8e:69:7f:83:5a:
65:fb:c9:6e:62:6b:c8:71:a0:fb:21:52:95:67:4d:
76:30:99:cc:c3:93:38:50:cb:83:44:6e:ad:e4:97:
e3:c6:f2:9a:ba:a3:d1:e5:d4:e8:10:bc:ec:25:81:
3f:89:d6:4c:9b:40:4e:1b:b0:a6:e0:e2:06:ad:db:
63:5a:fd:be:42:34:11:4d:9a:ed:85:4f:5c:0f:f9:
dc:b4:06:d8:81:43:b3:f3:88:ce:f0:0e:a7:a3:e9:
4a:1a:73:2e:30:57:56:06:0d:e2:c2:b4:79:9c:b3:
17:d8:de:26:48:96:6e:cc:4f:56:f2:91:a2:49:98:
d4:43:8d:e0:10:44:d3:0f:33:8d:cb:a6:4a:d2:74:
04:ae:ce:dd:80:c6:95:89:b8:b6:78:81:f0:ae:e0:
25:e9:80:6f:a0:e4:95:93:a0:55:4b:08:d5:5d:4d:
ac:ef:72:e8:4c:2b:d0:7b:d6:e6:85:be:78:3f:af:
a1:ad:78:90:da:9b:4e:20:da:66:19:05:ef:26:9d:
18:fd:1f:f5:9a:71:77:fe:68:a6:d5:3c:d9:f4:c7:
4f:ef:03:88:34:35:ab:6f:87:7a:9e:0e:48:59:a6:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:41:AF:39:CE:53:F9:74:8F:9F:C6:42:1A:67:84:7D:64:11:26:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d830d06-8017-3d87-9287-f42b1bbad739.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.254.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:21:91:41:d1:33:c3:a1:dd:8b:78:2b:a1:f6:66:cc:9b:e0:
2f:47:29:9f:04:7c:9d:12:79:1a:53:bc:f6:92:7e:77:97:50:
3f:73:f2:1b:fa:1e:14:7a:03:15:e7:d4:98:2a:84:87:9c:f9:
75:8f:11:4f:bf:63:98:ef:cf:5f:a4:3e:bc:94:b8:b1:4b:c4:
84:23:df:5e:92:08:22:3a:5f:81:9b:af:e2:00:2e:b8:f4:b7:
75:ff:dc:12:7b:0a:cf:7f:a6:2c:53:69:a4:b5:4a:ea:9c:a7:
51:34:4b:e7:5f:af:ca:0b:0d:16:23:f7:c8:50:62:1b:e5:e6:
2e:cb:34:06:9e:64:1b:64:30:57:50:16:17:a8:0d:61:11:d2:
ba:3c:a4:6e:18:1b:a6:1f:4e:21:f2:2b:3c:7a:a6:af:92:70:
9b:34:2d:32:b7:83:0c:5c:ab:6c:88:90:e7:bc:c4:a6:e9:50:
c5:3e:c6:2e:60:46:23:4e:c2:a3:c9:be:6d:57:b8:bf:78:03:
b5:43:02:b5:88:80:58:5c:6c:68:c3:e2:ba:1d:d1:0f:2e:a0:
5c:b7:60:0a:5c:9f:20:04:c5:0a:37:c6:2b:bf:ca:9a:4c:93:
a0:24:a5:c4:f4:43:c8:40:d9:e4:e4:c3:0c:05:45:56:0b:d1:
a6:56:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:14 2025 by rpki-client