Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b5baa40-1bf5-361c-b81e-76813df5fce6.roa
File: 8b5baa40-1bf5-361c-b81e-76813df5fce6.roa (raw, json)
Hash identifier: apOHU0T4lV5CH5fnwxfe6wGHbHrFrgoa6OtFfkDm82U=
Subject key identifier: 16:BA:D3:B7:BF:70:5C:D2:52:3B:7E:92:AB:8A:03:24:1A:99:6A:B9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FDE92D0FAAD0000FA735A9DC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b5baa40-1bf5-361c-b81e-76813df5fce6.roa
Signing time: Thu 10 Nov 2022 12:00:00 +0000
ROA not before: Thu 10 Nov 2022 12:00:00 +0000
ROA not after: Fri 16 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 138.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:de:92:d0:fa:ad:00:00:fa:73:5a:9d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 10 12:00:00 2022 GMT
Not After : Dec 16 05:00:00 2022 GMT
Subject: CN=7f42b03c-5733-404e-9ee6-5754fe62b068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:6f:a7:d9:fa:99:88:81:f7:b5:29:7a:ea:
2b:0e:21:d5:5f:9b:ae:51:41:f3:f4:d2:3b:11:33:
84:10:ab:dc:e6:04:8c:44:b0:11:2a:9d:71:25:5e:
8d:a7:eb:e0:3b:19:1d:69:32:33:ee:a5:5b:89:03:
3a:45:34:26:fa:fa:9a:74:51:e9:7f:9f:2b:8f:a0:
6f:28:88:7d:1c:80:74:78:e9:4e:d4:6c:06:55:43:
08:e8:6e:68:32:6b:18:36:98:44:d4:85:22:9a:fd:
56:39:fb:be:cc:37:27:92:3a:39:4a:df:9d:35:1b:
e7:cc:ba:cc:9f:1d:43:a8:0b:42:d7:3d:41:4e:0e:
3d:d9:6d:ff:10:e4:75:c1:88:74:29:0a:8c:21:e3:
be:38:16:b3:54:12:05:66:c4:dc:6b:87:90:4d:ec:
ce:0d:5f:90:c2:0a:d2:b8:6c:de:4c:a2:0c:16:c6:
71:0f:c8:b1:a8:df:f0:99:21:1f:3a:de:56:cf:1f:
b5:25:e2:66:1b:ea:80:94:a0:0e:43:f7:86:10:7a:
cf:ad:64:5d:31:0b:1b:c1:10:7d:ba:eb:c5:d9:dc:
28:78:25:f5:d3:bf:66:60:d3:89:ed:84:62:e7:36:
76:ac:27:b9:be:d7:7b:76:bf:db:33:d4:51:eb:c4:
4a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BA:D3:B7:BF:70:5C:D2:52:3B:7E:92:AB:8A:03:24:1A:99:6A:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b5baa40-1bf5-361c-b81e-76813df5fce6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
138.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:89:37:d8:d5:3e:96:09:81:ed:f6:4d:7e:c9:d1:9f:aa:96:
3f:13:f4:c5:80:38:df:95:d1:95:fe:42:af:ba:8d:b3:3c:52:
ed:93:22:e8:2c:af:bf:86:62:ad:2a:37:32:62:3e:15:38:56:
bb:98:e2:9e:1c:1d:4b:4a:c8:45:f8:d8:a1:34:39:14:a2:90:
f8:28:8e:bb:93:ad:96:a5:d8:7c:ac:a9:e6:62:8d:39:4f:c4:
68:49:ca:3b:25:d3:bc:09:f3:64:04:0b:23:ae:8a:43:7d:6a:
0e:29:94:17:46:7a:1e:32:bd:07:dd:13:1c:5b:65:9b:41:8b:
81:82:74:58:cd:b4:09:dd:ca:da:e1:d1:e4:4a:aa:ac:08:94:
57:a2:5d:2b:84:d0:ce:f5:e3:f9:8e:89:ec:f5:45:ed:4c:a5:
eb:fd:89:af:6b:0f:d6:86:93:cd:5b:c5:f7:6c:5e:12:be:8e:
eb:c2:fe:df:30:a2:52:10:6c:ec:f2:31:a2:f7:49:e1:a9:8e:
26:75:80:ea:c8:a3:96:dc:c7:e2:e1:dc:0b:da:58:95:df:cd:
d6:45:03:26:44:dd:82:b3:a9:b8:a7:03:f4:ba:3a:70:5c:55:
3c:0f:49:c7:05:15:88:67:66:76:80:17:f4:7d:15:9b:16:b2:
17:38:21:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:33:56 2025 by rpki-client