Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89dd5f45-8683-34f4-bef4-f8e58d4ccd95.roa
File: 89dd5f45-8683-34f4-bef4-f8e58d4ccd95.roa (raw, json)
Hash identifier: b8NxHadIKgvjjTeYomtW3wvBE64a1AeD57CKq8BT4jc=
Subject key identifier: C3:CB:5B:69:B4:F6:C2:65:7A:E3:75:D8:C7:5A:1D:37:F1:09:C0:2C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3369E15B198BFC298251CF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89dd5f45-8683-34f4-bef4-f8e58d4ccd95.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 167.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:69:e1:5b:19:8b:fc:29:82:51:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=834caa05-f873-4505-8774-2ee3fcd722f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f5:ee:21:a0:a0:ca:21:56:83:65:d5:4d:06:
cc:0a:f8:6d:34:83:0f:35:cd:28:04:77:08:b4:e3:
b1:06:6d:1e:d8:3a:75:40:77:88:69:5a:1d:a8:10:
3a:74:0b:b5:ef:2f:98:38:5f:d9:fa:3d:4a:01:4b:
99:91:d5:9b:a0:ea:aa:9c:5a:cb:de:27:f9:6b:cb:
89:f3:2d:c2:6d:d4:1e:ac:9a:cc:e0:4a:d8:5d:ab:
e2:14:ce:10:db:44:57:16:6e:31:82:e7:05:a0:c5:
c1:d9:48:61:84:70:90:be:6e:b6:b6:14:ce:8b:d9:
79:25:c2:e4:1f:5c:2d:21:9a:ad:f3:d8:0e:68:b2:
95:85:96:51:55:39:b6:73:57:ef:02:f7:5e:dd:18:
a6:c1:ff:64:78:05:ac:30:ef:92:59:0d:44:3c:da:
ca:c0:77:84:eb:a9:ed:a0:c5:63:90:66:62:d5:6f:
b2:d3:d7:7c:f3:23:86:fa:d1:41:a9:f8:51:1f:c6:
03:5a:d3:78:77:86:b7:ef:c4:11:f4:c7:6d:f1:88:
33:f2:4d:ed:44:89:d3:94:57:c4:32:3e:92:66:8f:
29:53:a7:b8:95:9a:6c:12:f3:c7:c6:c6:55:b6:ce:
21:57:19:48:2c:08:74:93:f7:bc:e9:e6:9d:4b:f3:
78:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CB:5B:69:B4:F6:C2:65:7A:E3:75:D8:C7:5A:1D:37:F1:09:C0:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89dd5f45-8683-34f4-bef4-f8e58d4ccd95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:4b:e8:7c:da:66:58:91:7f:d2:74:6d:dc:a0:d9:59:5f:83:
7a:79:c6:15:a7:34:48:b3:e0:a0:32:62:a0:44:f1:15:ce:a3:
16:98:84:eb:52:4d:dd:b3:8f:d8:03:77:eb:c2:17:55:35:ed:
e2:4c:3d:92:1a:38:44:0c:89:2d:7d:64:45:f4:54:4f:f9:71:
04:56:b9:3c:10:f3:eb:7c:37:3c:63:82:fc:e8:e3:3a:88:75:
cf:9c:1a:14:95:c9:03:a1:8b:4e:ed:77:c9:ce:11:63:fb:7a:
ae:1f:42:8f:16:ed:b5:fd:65:aa:54:bc:3f:15:8b:df:07:96:
eb:90:d6:31:59:b5:71:39:15:de:a3:25:41:c6:c0:a5:49:24:
37:d6:69:10:b6:93:70:a5:ae:74:03:0a:d9:cb:a4:aa:1d:fc:
db:51:89:e3:22:63:0c:95:f0:f8:a4:1f:58:e9:39:a5:8c:5b:
44:78:92:28:2f:db:44:f1:13:9b:3d:30:91:55:ac:c6:e8:c6:
cf:91:70:61:0c:f0:a8:86:6f:d0:c6:9b:b5:ba:ad:03:6f:07:
35:f6:68:a1:6f:36:28:ee:46:42:a8:30:60:2c:7b:62:2e:95:
6c:2a:e7:4d:a2:f2:57:75:ee:e2:31:ab:77:c9:88:fa:a1:f3:
ab:39:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 01:12:22 2025 by rpki-client