Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a1b3c053-5980-39d1-8289-b16a68d0381c.roa
File: a1b3c053-5980-39d1-8289-b16a68d0381c.roa (raw, json)
Hash identifier: 4gX3RHLoMChLkIAQx5gj0yOJt/ImrgMUEaeE9/fT4Y4=
Subject key identifier: CD:CE:51:AD:3F:2B:92:18:44:83:7B:C8:CE:C1:BC:70:2A:D2:F9:6C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F9EA01607A513FFAF7B6032E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a1b3c053-5980-39d1-8289-b16a68d0381c.roa
Signing time: Tue 18 Oct 2022 13:33:07 +0000
ROA not before: Tue 18 Oct 2022 13:33:07 +0000
ROA not after: Wed 23 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 137.160.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9e:a0:16:07:a5:13:ff:af:7b:60:32:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 18 13:33:07 2022 GMT
Not After : Nov 23 05:00:00 2022 GMT
Subject: CN=8d91d115-bb43-47cf-a867-a03dabc4e759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a1:38:25:c8:fd:d8:42:d1:38:fe:52:ca:77:
78:e2:86:6e:af:04:e4:4e:93:ce:a0:17:df:c3:89:
65:7e:cd:31:27:ad:b5:f4:b9:c5:57:87:79:40:20:
35:95:92:41:31:30:98:b7:ac:48:6a:aa:56:b4:1c:
fe:cf:81:d9:01:aa:84:c1:2c:5d:2b:ff:50:2d:7c:
51:01:54:83:54:0e:79:52:44:09:6d:c6:6f:c0:65:
93:a1:56:48:c9:84:fe:fa:ef:21:e7:48:f4:24:01:
0d:6b:c3:3f:c1:46:68:29:e5:11:d7:74:9a:53:fe:
ee:d6:4f:f9:48:10:af:76:39:7e:f2:84:90:24:aa:
c3:dc:d9:a6:22:c6:0d:02:de:44:2a:59:aa:6f:9f:
78:70:58:75:f5:a7:71:5d:d8:b8:7c:42:42:38:af:
15:7b:cb:6b:68:96:c2:57:12:e3:ed:d8:e1:c7:fd:
4a:2e:a6:1f:1c:d6:f6:30:c9:2d:62:48:33:7f:08:
66:e4:36:1a:14:99:87:13:0c:94:7e:f4:0f:a0:1a:
1c:2d:89:8f:d8:3c:e4:62:23:1a:3a:85:bc:32:d2:
9a:32:b4:c8:02:a0:eb:6a:27:65:5b:60:fb:31:95:
a4:b8:0c:21:bb:8f:92:fe:15:39:0d:23:dc:60:bf:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CE:51:AD:3F:2B:92:18:44:83:7B:C8:CE:C1:BC:70:2A:D2:F9:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a1b3c053-5980-39d1-8289-b16a68d0381c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
137.160.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:29:d5:b2:c5:96:bd:72:01:a7:45:d8:44:58:58:28:b3:99:
6d:f3:a1:33:ef:e4:bd:e4:23:f6:d4:d5:6b:08:51:ce:16:16:
45:5e:2b:73:02:4e:e2:55:cc:1f:f6:85:81:79:aa:07:f9:da:
49:3f:52:f0:a4:09:9f:2e:80:80:a8:53:3e:be:71:fa:4f:7e:
1c:01:ee:0c:e2:cd:a7:26:1c:e5:da:3f:c6:17:bf:8b:06:3b:
47:38:32:28:b3:3a:eb:a8:2c:07:b0:9f:c6:96:f1:67:3a:13:
75:f3:b3:72:1d:34:72:c3:a3:b2:3a:f1:06:f4:15:93:ad:2f:
ab:13:26:b6:06:8a:ea:30:bb:a2:48:3c:ac:f0:44:fc:bc:ff:
ff:83:ca:4d:56:a9:ab:00:55:01:04:04:2a:33:76:15:98:9e:
ea:bf:db:49:c3:f9:35:8e:ac:46:e4:a3:bd:47:4a:dc:a7:76:
b7:10:06:f8:8c:96:ea:f9:d6:0e:1f:4a:9d:24:62:9e:f8:ce:
32:cb:e5:1c:06:5e:b5:b5:c8:06:8f:a9:24:94:6e:b2:7e:4e:
65:1c:a6:72:48:a3:5d:ee:79:9b:64:5f:e1:0d:75:61:66:8f:
48:64:c7:6d:ca:e3:4e:02:a4:46:3f:c3:50:d0:cc:ff:dd:48:
02:80:26:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:57 2025 by rpki-client