Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f4d6890-1214-3cb4-9cd5-a0d7d2662044.roa
File: 9f4d6890-1214-3cb4-9cd5-a0d7d2662044.roa (raw, json)
Hash identifier: 5kLdVk1fXgxaQbJDyGVWpEAkVIFYO+4sXa7aE7+pGjs=
Subject key identifier: 75:A5:E7:40:C2:A9:D8:45:1D:82:B9:D6:2E:CB:0C:16:E8:24:8A:2D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0C8144D55E70824BF4848300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f4d6890-1214-3cb4-9cd5-a0d7d2662044.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 104.153.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:81:44:d5:5e:70:82:4b:f4:84:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=7d5c2611-6506-46ed-82b9-6b76bc92afb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:51:71:99:13:80:f2:5b:fa:be:8f:2d:e9:
e1:23:95:3e:ff:b8:b9:02:8b:97:70:d9:87:ba:88:
f6:98:3e:a8:ed:0e:72:22:7f:ad:7b:fd:11:86:8e:
ec:bc:20:93:93:26:57:0c:e6:f2:d0:ab:3f:08:cb:
a2:98:ff:81:99:95:e2:54:57:ed:c7:e1:e1:92:0f:
03:67:e0:e7:67:e8:59:46:bc:ab:4d:ba:82:45:6b:
2a:ec:3c:f3:71:71:df:cc:51:5f:9f:70:9d:f1:64:
7f:6b:27:24:0e:5f:dd:8f:63:68:3b:79:fc:42:bc:
38:3b:60:4c:36:84:ce:46:69:0f:2d:da:8d:c9:d9:
06:8f:4b:73:df:8b:24:14:7d:52:e6:18:7d:11:77:
d7:49:a2:99:60:90:b7:68:be:cf:0e:3d:47:af:72:
53:61:30:2e:9b:4c:f6:90:b7:c6:19:c5:28:60:b5:
13:a8:a8:f1:5c:84:7a:67:cb:a3:67:4c:dd:3e:61:
55:85:cc:76:07:15:b5:fd:6e:17:9d:a8:86:f0:56:
bf:f5:95:11:a1:ef:79:ff:0c:76:87:fb:0b:f5:92:
ad:9b:3d:15:90:76:79:e7:a5:09:69:86:c0:35:2d:
27:73:74:b3:31:33:34:09:58:cf:65:20:37:44:af:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A5:E7:40:C2:A9:D8:45:1D:82:B9:D6:2E:CB:0C:16:E8:24:8A:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f4d6890-1214-3cb4-9cd5-a0d7d2662044.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
104.153.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:e9:4a:67:7a:7b:18:3a:af:50:a6:a5:21:5f:8e:09:a8:80:
45:74:29:3e:89:c1:5a:cf:38:ed:2a:d8:f6:f0:53:7f:e6:c8:
17:0e:6a:63:4c:1d:f5:cd:81:e9:99:a8:c9:71:10:cc:15:76:
9b:d1:47:f7:fb:b6:0e:fd:a5:10:d0:d9:fb:24:4c:a8:94:54:
78:73:37:c7:24:6a:cb:10:88:5a:8b:69:4e:15:1b:c7:7a:0c:
50:65:94:1e:63:b5:1e:1d:ac:c0:25:4a:63:25:46:8d:2b:47:
f0:bf:f6:a5:9e:fa:8f:38:17:b6:4f:f9:c4:0a:86:76:91:78:
ef:15:4a:38:4f:54:bb:9d:a5:45:fd:86:25:4c:5f:04:39:2d:
9d:97:58:60:73:ee:09:37:5d:80:97:88:20:6e:c7:0a:3f:ea:
f2:a5:87:c1:f6:d9:7b:58:99:25:f5:8b:ae:ea:22:44:2c:a1:
fe:7f:82:ab:be:85:3d:de:a3:e4:2e:c0:4d:d3:a3:c0:18:26:
3c:fe:c0:ba:80:21:42:03:9f:c5:e0:b8:11:01:73:80:b4:c2:
0f:07:89:02:56:b6:d2:f7:60:20:a5:59:d1:a4:94:1b:dc:93:
0e:66:7c:79:d9:c3:2b:d1:83:f3:1e:12:cf:a1:e5:23:db:17:
83:56:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:04:27 2025 by rpki-client