Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9423673c-9ee7-3c36-bdeb-1983f7b6cbf0.roa
File: 9423673c-9ee7-3c36-bdeb-1983f7b6cbf0.roa (raw, json)
Hash identifier: Bv1v4FSaEKfHTvHptCSrTzGY75GQEnojpTvHmWLVIZM=
Subject key identifier: D1:A9:A4:D3:6D:5C:EE:0E:F2:26:FA:99:FA:2D:99:AC:04:80:FF:31
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DD2314F0C8184E7862A5DCE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9423673c-9ee7-3c36-bdeb-1983f7b6cbf0.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 71.152.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d2:31:4f:0c:81:84:e7:86:2a:5d:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=4a6c6cf6-df38-4a36-b15a-20c2e21743c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:b4:75:7b:4a:15:ec:77:cc:4c:fd:17:6c:
ce:c6:f2:a7:23:e5:d2:38:d5:46:ef:25:e4:cc:e7:
59:66:e1:2b:43:e6:79:57:6c:a1:b6:a1:d4:d8:a9:
1d:82:d0:9c:c5:f3:75:a5:43:e6:cc:f5:c6:71:dc:
50:fc:33:72:75:62:e9:dc:c3:fa:49:67:b3:60:e1:
56:fa:de:f4:30:67:64:68:55:a0:3b:a5:6f:4b:69:
a5:d5:c1:aa:b0:90:fd:fe:0c:58:05:c2:78:38:a7:
f4:25:fb:32:ed:26:96:29:05:26:1d:52:af:18:43:
d5:0a:74:97:5d:d1:bb:b4:f8:7e:20:4b:b8:a9:45:
0d:a4:3e:1f:53:7e:ab:ad:4f:b8:06:84:02:8a:76:
7d:69:e0:d2:47:32:fb:a0:73:1a:08:98:20:6a:f9:
31:f3:8d:22:9d:f8:51:e0:9e:da:04:96:6f:c7:54:
ec:c8:bb:36:84:c2:4b:d1:89:e3:cd:70:c9:75:c4:
28:8b:d5:7b:51:32:69:b5:3b:29:cd:7d:d8:e0:3a:
5f:84:aa:bc:96:f6:70:31:e0:4b:c2:b5:99:62:86:
0c:1d:27:46:b2:05:20:97:46:7a:4d:db:42:d0:1c:
6e:12:c9:18:10:c9:f6:da:53:04:87:e8:b8:d0:d7:
d0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A9:A4:D3:6D:5C:EE:0E:F2:26:FA:99:FA:2D:99:AC:04:80:FF:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9423673c-9ee7-3c36-bdeb-1983f7b6cbf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.152.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:88:46:38:76:cd:17:3c:f0:b4:4f:d5:33:7a:ae:0e:04:bf:
63:5e:3a:92:d5:39:ae:2d:fe:00:1f:9c:f9:ee:d0:7a:64:23:
bf:f1:2c:44:9c:b5:af:6f:db:5d:64:1d:ac:8a:52:90:aa:9a:
13:2d:d7:62:ac:d0:ec:ef:32:8b:02:93:80:85:2f:c5:9e:2d:
32:01:04:6d:b0:b1:10:04:52:f4:e5:ec:8f:8f:74:bb:6f:20:
c3:2d:42:3b:45:e4:fd:01:ec:4c:f4:a2:74:13:86:36:cb:e2:
f0:86:f2:fc:dd:d5:70:d3:d8:76:f2:c1:bb:64:1a:6f:0d:05:
a5:cf:67:78:22:2b:47:1a:13:64:01:fc:37:5f:b2:a7:e4:d5:
6c:89:41:6a:47:15:ce:47:57:53:40:4c:e8:5b:17:d7:dd:ec:
77:06:14:47:ff:6a:1b:c5:85:38:da:a2:6c:18:df:25:79:69:
16:91:ca:65:4f:2b:26:46:11:e2:86:47:39:fe:7f:9d:c3:40:
48:65:b3:3f:61:88:78:0c:8a:37:e1:09:2a:12:54:dd:8b:f6:
ad:41:f2:16:66:9b:3a:d4:c4:79:10:28:33:72:4c:be:07:13:
8e:1a:ac:b5:44:4e:05:b5:b0:3b:b1:54:ae:a3:ff:d8:84:14:
70:6f:f7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:56 2025 by rpki-client