Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97a89f5d-cde2-35f2-983f-e888e5b645f5.roa
File: 97a89f5d-cde2-35f2-983f-e888e5b645f5.roa (raw, json)
Hash identifier: h9341kmKPjEkkL8CeLYKrFtH9qZsVyB5MmVDrptr6I0=
Subject key identifier: 9A:75:39:4D:0D:9C:F6:96:87:6D:90:94:3A:05:CA:32:C8:10:81:85
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FDE573E09EDB5CC0EE5F8E880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97a89f5d-cde2-35f2-983f-e888e5b645f5.roa
Signing time: Thu 10 Nov 2022 12:00:00 +0000
ROA not before: Thu 10 Nov 2022 12:00:00 +0000
ROA not after: Fri 16 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 160.223.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:de:57:3e:09:ed:b5:cc:0e:e5:f8:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 10 12:00:00 2022 GMT
Not After : Dec 16 05:00:00 2022 GMT
Subject: CN=5850f908-f982-4850-8e78-a910355e2f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:8a:fc:1a:f4:7b:d5:3c:5f:95:73:2b:09:
67:0b:98:1b:19:eb:08:00:0f:2f:56:77:6f:38:5e:
70:cb:32:54:29:a7:19:b1:bf:68:d0:0f:b0:15:b8:
d4:27:2e:16:cb:45:00:a8:aa:1f:50:7a:5f:4a:9c:
41:bf:9c:c5:ec:03:20:70:8b:f6:27:86:f2:d7:a3:
c1:c3:5a:49:3f:5a:f9:58:9a:3e:5d:f2:ec:3a:af:
1f:01:1f:52:19:ee:a8:e9:14:ca:26:cd:03:18:de:
9d:7f:07:32:fb:a5:8e:56:38:b2:71:fd:6b:82:a2:
e0:66:2c:b2:9f:17:09:e5:0d:dc:19:b2:4b:d2:e6:
9f:7b:2d:46:83:a4:83:b7:c5:83:50:13:f1:4f:8f:
08:d0:c4:04:08:5a:86:1a:e3:ec:64:08:29:20:dd:
72:f6:02:3c:cd:78:0a:6c:88:55:a3:41:18:d0:51:
37:93:37:97:35:3e:b8:67:94:4e:86:28:08:5c:4d:
3f:15:7e:a2:00:c8:66:ae:f6:39:ad:ff:75:75:c9:
0c:30:c1:bb:16:fc:f3:01:40:d1:b9:53:ac:6a:20:
5a:db:58:60:16:9b:87:b4:97:c5:ee:55:4b:6d:af:
ca:6d:13:32:28:e1:ed:a2:b3:6f:f2:e4:7d:70:82:
b0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:75:39:4D:0D:9C:F6:96:87:6D:90:94:3A:05:CA:32:C8:10:81:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97a89f5d-cde2-35f2-983f-e888e5b645f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
160.223.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:d2:61:68:9b:95:b2:dd:00:54:9d:02:d8:83:66:00:e9:b9:
ca:fa:df:b8:e2:4c:8e:15:89:1a:f1:22:82:90:46:fe:04:b4:
74:71:db:c5:d9:d0:b7:57:af:8f:3a:b5:ce:42:cb:9b:51:e8:
33:e7:96:78:56:75:17:e0:89:ca:60:ad:30:b3:83:98:64:50:
23:df:fd:71:82:05:31:0c:13:97:21:ce:98:87:6c:e7:c5:3d:
b1:35:89:87:9f:df:52:0d:6b:5b:65:23:b1:bb:f9:60:96:a8:
79:32:7c:fc:86:05:33:2c:4b:a6:d5:3c:ac:99:8b:62:f0:1f:
d3:6d:a4:b1:0f:43:29:42:54:c5:e5:0b:7c:f3:ba:24:6b:a1:
26:2c:20:ce:e5:1a:7e:2c:0c:1d:c4:f0:34:ac:fe:f3:4a:2c:
79:20:d6:fa:21:cf:82:3b:6f:3e:5e:5e:1a:78:55:7d:17:47:
60:86:6c:e0:72:52:01:cf:b1:17:79:37:da:72:d1:ee:de:ed:
4a:a0:a4:d8:46:24:ed:7a:8e:cf:d9:71:48:f3:3e:90:85:af:
a5:17:86:ab:0e:e6:13:46:58:96:cf:4d:ad:1f:80:f1:12:de:
46:82:12:5c:13:5b:dd:eb:cc:02:4e:ef:f7:47:97:0c:3c:91:
a4:5e:64:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 10:57:42 2025 by rpki-client