Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/849e51e3-1e4e-3b58-bd0c-a1c0138a8ebe.roa
File: 849e51e3-1e4e-3b58-bd0c-a1c0138a8ebe.roa (raw, json)
Hash identifier: LOiZPvVmO11ujP7Hrtjhx7CNiCZSnuz7bhDjI2sjq7M=
Subject key identifier: EA:5B:F8:F7:DB:2C:55:62:F3:36:E5:21:78:B5:E9:69:0D:25:C8:D1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C9F4E5D08DA4C6966C0E1CD00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/849e51e3-1e4e-3b58-bd0c-a1c0138a8ebe.roa
Signing time: Mon 17 Jan 2022 05:00:00 +0000
ROA not before: Mon 17 Jan 2022 05:00:00 +0000
ROA not after: Mon 21 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 153.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:9f:4e:5d:08:da:4c:69:66:c0:e1:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 17 05:00:00 2022 GMT
Not After : Feb 21 05:00:00 2022 GMT
Subject: CN=c416a957-5d38-4a9d-a463-fa41a9b38856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:87:fe:8f:fc:46:48:fa:26:10:6d:7d:af:
69:37:c5:e4:61:7e:48:ab:73:55:8b:e7:59:26:80:
3b:7d:b6:4a:98:3f:7f:47:18:2c:54:87:c6:1c:9b:
df:2d:a6:e3:86:91:62:f7:1d:c5:f7:30:e5:48:85:
91:12:3e:0d:ae:3c:23:21:cd:0a:93:6c:12:3c:ff:
1f:cf:c9:fd:35:60:7b:8b:d5:ab:3e:cc:54:81:45:
fa:dd:6f:b0:c2:ab:e2:19:66:90:f4:be:81:fb:59:
e4:cd:d4:28:01:c0:39:5f:bf:69:a3:96:21:0c:0e:
d0:87:bb:51:01:f6:9b:7e:c3:ac:e7:80:00:00:20:
a6:4a:da:e7:dc:64:06:02:b6:f5:ad:ba:cf:eb:8b:
fa:c2:26:bd:be:c0:60:b8:c2:e4:d9:10:d3:7c:62:
fc:4c:e8:76:22:22:ca:60:13:bb:91:fd:ae:52:79:
12:c4:74:f9:a6:cc:be:84:4c:cc:84:76:ac:f6:94:
74:72:55:89:de:1c:3e:15:d5:6a:bd:a1:ca:39:1c:
f6:4e:3b:4d:67:52:98:d1:40:21:3f:94:4b:77:f7:
ad:47:34:d0:ab:c4:fe:c8:43:bd:d2:26:40:82:50:
86:44:9a:e4:20:90:d7:71:89:83:67:0b:0a:49:fa:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5B:F8:F7:DB:2C:55:62:F3:36:E5:21:78:B5:E9:69:0D:25:C8:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/849e51e3-1e4e-3b58-bd0c-a1c0138a8ebe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
153.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:34:e1:e6:49:97:45:4a:9f:1f:90:ea:22:1d:89:e8:b6:91:
05:03:3f:87:94:ef:b6:57:16:7a:3b:93:f2:ca:f6:0f:db:3f:
f7:9f:06:65:0d:2b:53:5c:f0:e1:f7:2b:0c:0a:62:5a:ba:3b:
0f:cd:87:76:84:28:73:b4:0a:fb:95:d3:29:44:b5:5c:3b:e2:
09:3d:9a:70:40:16:1e:fb:b3:46:9d:6e:8a:75:9b:50:93:b7:
ac:27:db:32:0e:ec:bf:0a:b2:35:b3:e6:c3:49:88:84:90:33:
e5:67:9f:c2:6e:c8:a2:03:d9:9a:60:19:20:ec:d5:2a:4d:5a:
4b:cf:c4:a4:44:d0:6f:7d:85:37:25:32:29:53:bb:6c:15:6f:
a4:9e:7f:cd:4b:32:3c:8f:bd:96:40:8f:00:0c:3f:d7:40:18:
e2:be:3f:89:26:13:e4:1f:88:b1:bc:c3:11:05:8c:3a:b1:d3:
04:c9:b2:a5:36:77:55:98:b2:53:ce:3f:6c:de:98:33:ed:ab:
6c:2b:2b:a3:13:22:6d:4a:b1:82:92:11:f6:59:f5:27:04:e9:
76:93:57:8d:a9:87:14:a0:22:4d:fb:c9:fb:ed:2c:57:f5:f4:
7d:3b:11:89:93:ee:19:92:b1:05:12:e6:e9:ee:04:08:67:8a:
e0:8a:14:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 08:48:33 2025 by rpki-client