Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a23eadc4-441f-34b9-b985-4d01e57c1e9a.roa
File: a23eadc4-441f-34b9-b985-4d01e57c1e9a.roa (raw, json)
Hash identifier: 61tIcT975mW8+9xKu365W1KxhvnyTtXlx0TnniNaSso=
Subject key identifier: 08:8D:AE:C3:C5:D6:07:2C:6E:CE:B7:B0:AF:93:16:6C:97:68:9F:F8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBBCC0EAAF6AF831E64890A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a23eadc4-441f-34b9-b985-4d01e57c1e9a.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 164.195.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bb:cc:0e:aa:f6:af:83:1e:64:89:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=687cca60-d144-4e96-b455-ba3be2e373d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:ee:7f:34:56:4d:69:fc:17:99:74:a2:59:
89:44:a5:86:1a:9f:58:03:77:58:85:a4:18:54:fe:
da:21:fc:5b:e9:f1:f5:fb:ad:53:67:fb:22:5e:24:
96:2a:dc:e9:27:26:91:de:ac:13:a9:49:c1:0f:71:
c1:d8:fe:61:99:c0:47:34:7f:e1:9d:9f:3b:60:41:
03:6c:63:9e:00:74:8e:b0:8a:16:8d:16:a7:9a:c0:
ac:94:9c:39:b0:8a:0b:db:d0:97:e3:33:3a:71:a8:
fc:79:71:b8:9b:45:90:13:60:ea:25:e5:2e:bc:01:
f9:ce:af:42:f5:f1:ad:27:1e:a3:9d:02:d7:30:4c:
42:cc:11:20:1c:1c:93:85:c4:25:75:8b:f6:0b:85:
f7:83:c0:f7:65:b1:c1:14:49:3b:f5:fa:ca:7f:2a:
0b:6c:e7:e1:66:14:67:24:e7:87:d2:34:81:e9:68:
e1:c4:74:4a:f5:d9:66:f0:15:b6:3d:09:e1:87:d1:
27:ef:e4:44:c6:49:c4:e5:96:19:00:34:64:fc:8e:
95:04:7b:e0:9c:17:d3:82:a0:7f:ea:61:8e:13:1a:
6b:ea:84:e7:3c:b1:73:33:b3:bf:da:ac:f4:ee:3a:
e3:27:fa:a5:70:0f:1f:89:37:11:fb:89:64:fa:95:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8D:AE:C3:C5:D6:07:2C:6E:CE:B7:B0:AF:93:16:6C:97:68:9F:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a23eadc4-441f-34b9-b985-4d01e57c1e9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
164.195.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:cc:23:2f:73:85:53:eb:d8:4e:72:d1:f0:01:b9:50:a3:b4:
23:53:f2:37:11:f5:00:46:24:0f:c9:a0:75:31:37:ff:44:b4:
44:5a:ca:7c:01:73:07:89:60:3e:75:7e:6d:d3:5b:18:cd:85:
9f:25:f1:3f:2d:73:85:a4:9d:e4:a4:38:d8:ee:8c:af:c7:0a:
40:61:41:45:7a:56:44:c5:d3:e0:53:19:b7:24:5b:14:83:be:
99:d5:15:84:18:6d:8a:42:82:a6:56:66:25:7f:63:db:d6:70:
02:4a:9e:53:fa:2d:64:12:92:8c:d4:9b:fc:d8:35:09:7a:04:
48:ff:0e:50:18:a2:88:98:82:40:50:05:25:26:fb:ac:7c:7b:
0c:d9:95:bd:1b:a0:5b:9e:94:1d:44:74:c7:24:2f:bf:89:18:
f9:88:5c:93:2d:a8:89:aa:4e:16:a9:89:13:43:9e:41:19:b7:
11:4a:f7:c0:21:20:d3:26:5b:1e:98:0c:40:80:16:1b:b7:1a:
be:3a:95:80:c4:7e:25:0e:38:12:f8:a2:71:d4:28:8f:98:24:
6a:fb:75:a7:5c:eb:f7:9a:f1:d0:80:67:8e:6e:8e:af:7c:06:
22:37:ed:71:13:88:0f:1b:39:ee:c8:13:64:7a:3f:bf:9a:2a:
74:ec:db:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:30 2025 by rpki-client