Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b411bc0-d4ab-3bd0-9fbe-28b03f2ea31e.roa
File: 8b411bc0-d4ab-3bd0-9fbe-28b03f2ea31e.roa (raw, json)
Hash identifier: fVR+otGO09Gw63cCtJs1lnNo4sv5Rje5agpBjSlxSb4=
Subject key identifier: 4D:12:F6:51:BA:37:3F:EA:43:B8:24:16:88:62:1A:92:D1:D3:19:D4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F8DEF1292D534D8CA5F9F3480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b411bc0-d4ab-3bd0-9fbe-28b03f2ea31e.roa
Signing time: Wed 12 Oct 2022 12:00:00 +0000
ROA not before: Wed 12 Oct 2022 12:00:00 +0000
ROA not after: Thu 17 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 157.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8d:ef:12:92:d5:34:d8:ca:5f:9f:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 12 12:00:00 2022 GMT
Not After : Nov 17 05:00:00 2022 GMT
Subject: CN=b299286e-01d3-455b-8f27-ee4d4e801144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:be:0e:79:80:07:ca:1f:e0:68:2a:78:b8:
88:a2:c1:78:3b:90:2e:84:08:9a:54:6c:1f:d1:10:
47:57:b4:80:5e:10:84:45:8e:05:a5:9d:f1:35:1c:
92:10:04:40:58:f1:d6:e4:f6:15:b6:63:69:35:f7:
44:0e:65:e3:97:9b:82:52:cf:5e:76:00:91:54:f9:
d4:e8:bc:d5:e4:d5:8a:8d:c3:39:fa:89:50:04:eb:
b0:88:63:c3:be:db:de:e4:2c:89:f3:e2:ed:40:ba:
11:8e:7b:1b:b5:8d:86:36:f0:b6:ee:35:ab:55:e2:
b5:76:f6:ee:bc:e3:a1:61:e9:4f:fc:8c:df:9f:00:
c6:3d:b3:ad:07:f7:b7:f3:e5:ca:a8:84:c7:22:4f:
6f:a1:1c:bc:68:d7:79:c0:a7:13:a9:7e:40:95:4a:
14:27:3c:12:49:3d:fd:ba:e9:f5:9e:f7:a8:e9:77:
33:c7:9b:90:b2:25:93:c1:45:c8:dd:89:ac:56:b2:
6f:38:cc:5d:34:40:8d:87:19:f1:95:11:0c:01:41:
7e:d5:bd:33:be:2b:57:c7:db:8c:bc:3c:1f:fd:ca:
89:2e:c2:d6:6b:97:83:d4:7a:98:81:4b:ae:88:47:
3a:4c:d0:06:af:86:ff:be:ee:62:88:97:84:a1:b8:
fa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:12:F6:51:BA:37:3F:EA:43:B8:24:16:88:62:1A:92:D1:D3:19:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b411bc0-d4ab-3bd0-9fbe-28b03f2ea31e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:a7:99:0b:65:56:b2:02:1d:c2:71:95:8a:76:af:38:86:61:
f3:d7:25:d5:df:1e:eb:09:02:59:cc:f9:bd:f2:0b:94:24:0d:
cc:fe:f8:c4:e3:1b:a5:35:14:5c:d6:a4:14:2a:7c:d8:ad:29:
46:e7:7f:d6:85:33:c7:9c:9e:61:9a:d5:1a:55:98:ec:c7:e1:
76:78:62:28:cb:29:da:00:b8:c4:ab:66:fb:45:e9:d7:dd:70:
bb:99:a1:f5:b7:dc:65:3b:1d:c7:de:e9:87:92:51:10:e6:9f:
de:00:07:c0:a8:84:1e:45:a7:83:3f:3b:c9:94:c7:b8:72:51:
79:0e:1b:45:a5:bc:04:36:50:09:ef:6e:6d:20:39:eb:20:68:
b8:44:57:bd:26:8c:ee:6a:88:24:ce:60:dd:4e:c5:6c:85:57:
61:0f:04:33:45:4c:df:60:25:36:65:98:9d:39:e7:a3:6e:88:
33:fd:56:06:40:7f:1d:da:a2:5f:90:f3:d1:72:c3:59:2c:29:
a7:f6:38:a4:06:92:4c:38:23:4b:5b:2b:7d:39:95:73:ae:70:
3d:24:dd:85:a2:85:27:65:76:07:24:2c:ce:54:ae:c4:01:1f:
4a:1c:3f:40:8b:ca:e8:b0:d1:9f:0a:80:d6:1b:bb:f2:11:d4:
7b:92:1b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:46 2025 by rpki-client