Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a40a1ddc-6ba7-3fe6-a329-89866965f1b7.roa
File: a40a1ddc-6ba7-3fe6-a329-89866965f1b7.roa (raw, json)
Hash identifier: 3ONkBiXyqE/IydKbQf6z+pJ09GFE7OKOd+2X4MTHnrc=
Subject key identifier: 9A:2F:FB:84:67:F6:A8:2C:50:21:DE:F5:F2:6A:98:27:D0:F6:0F:81
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D332EB4A075F74EAA2EDB0408
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a40a1ddc-6ba7-3fe6-a329-89866965f1b7.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 130.176.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:2e:b4:a0:75:f7:4e:aa:2e:db:04:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=c4f5eaad-1290-4e33-a313-3ab827a70ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:55:0c:e0:ab:66:a5:05:d6:cb:e1:72:77:5f:
09:69:2f:af:20:a3:89:6a:5b:ac:51:80:77:d5:cf:
95:3c:cc:6e:5d:ed:0c:d8:5f:56:82:57:a2:ab:13:
2e:80:2b:fc:44:6f:86:21:3a:58:5e:71:04:2a:ae:
d3:10:d8:c6:8f:f5:cb:6b:cf:05:da:82:76:1e:a1:
f5:57:71:dd:3a:f0:9b:ea:11:7f:c0:85:22:77:0c:
fa:dc:d1:49:13:77:48:93:f5:e7:5a:67:20:37:9e:
4f:3b:ea:15:56:6e:1f:a8:43:43:cc:d2:00:d1:71:
f3:68:37:81:a9:7e:76:f2:e4:27:55:38:58:92:1f:
9c:ad:a4:b5:1b:9e:d0:14:40:9a:d6:b8:0e:13:53:
1b:b5:9f:6e:1c:a7:ff:57:43:87:4c:c3:81:5f:89:
8e:06:a9:36:60:23:78:e3:b6:7a:c2:bd:84:7b:82:
9c:82:d0:c4:c3:8f:18:8e:9c:c2:14:6b:73:64:c3:
80:ee:d8:33:16:c6:e6:d0:97:d9:02:33:bf:ef:32:
26:29:2c:58:61:af:f6:5d:53:fd:84:5b:de:17:9e:
84:d9:07:7a:da:99:9c:68:28:0a:16:1d:ff:bb:23:
6b:b4:69:5d:8a:aa:ab:f6:15:e4:33:02:0e:bd:72:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2F:FB:84:67:F6:A8:2C:50:21:DE:F5:F2:6A:98:27:D0:F6:0F:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a40a1ddc-6ba7-3fe6-a329-89866965f1b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.176.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:db:57:59:3b:85:c9:f5:ff:57:14:da:e5:74:2c:ad:32:c2:
bc:2c:71:47:37:63:84:91:18:7d:bb:b4:59:8e:e2:c8:09:25:
af:e5:06:6f:f3:42:84:e7:f6:ba:66:ce:33:a1:59:5c:8b:79:
47:7f:cf:b7:81:a6:cb:22:a2:14:76:85:ec:6e:fe:b5:aa:69:
86:35:a8:0f:af:34:44:f5:05:d0:4a:77:a4:10:63:7f:a3:f2:
7a:b8:66:40:f2:f0:c6:98:94:8b:06:95:20:c9:f5:7f:47:e4:
32:6c:7f:62:d4:b8:71:e4:64:ff:d9:f2:41:f5:e2:ca:5d:31:
4d:cd:f3:a9:0d:1b:bb:d6:a9:f2:89:64:61:e3:4a:91:6f:f0:
a0:84:3e:ac:63:85:da:18:90:e2:02:cc:87:68:4c:f8:27:6a:
73:95:bd:02:de:dc:94:b1:07:07:97:29:76:1c:f4:5b:da:5a:
ce:c2:2e:04:00:8b:04:32:ef:2f:98:82:5f:b3:46:b9:e5:fb:
7d:56:21:16:4f:b3:95:55:b0:9c:71:af:7e:ff:25:ef:5c:c8:
11:9c:40:cc:11:4a:c0:97:f2:75:44:47:8c:7c:33:0d:f2:bd:
02:5f:f6:04:fa:0c:3b:5a:e1:4c:b6:cc:67:80:5c:be:ba:9f:
dd:24:2f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:55 2025 by rpki-client