Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae2bd40e-57f6-3f0f-a691-df86baef3e03.roa
File: ae2bd40e-57f6-3f0f-a691-df86baef3e03.roa (raw, json)
Hash identifier: OHT3+Na+HMk+jRxoMa+tw0QLTlUkjA6iFWjWQi2mwzE=
Subject key identifier: 29:66:9F:54:6D:B8:19:35:B1:64:41:E4:0D:0E:7B:DF:10:EF:8D:D0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405C24C4CC1F6E4FA4DEAA5F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae2bd40e-57f6-3f0f-a691-df86baef3e03.roa
Signing time: Sun 25 Dec 2022 12:00:00 +0000
ROA not before: Sun 25 Dec 2022 12:00:00 +0000
ROA not after: Mon 30 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 158.254.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5c:24:c4:cc:1f:6e:4f:a4:de:aa:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 25 12:00:00 2022 GMT
Not After : Jan 30 05:00:00 2023 GMT
Subject: CN=20f3c1d9-0459-4803-a3b2-ba1dfb9e7b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:14:3c:3d:a1:39:97:0c:83:94:a3:89:09:
10:5a:0c:9c:fc:e4:8c:6e:96:20:9d:eb:b0:15:75:
36:50:ec:a0:b8:8b:be:16:2d:d8:90:aa:fa:5c:60:
d3:84:64:88:05:c3:a1:fe:88:7a:ed:fa:63:91:64:
65:8d:05:96:0e:00:f3:59:23:bb:17:ec:f3:ae:c6:
f4:88:a3:86:76:d0:18:af:b4:0b:8a:90:f2:37:55:
a5:95:06:0c:8b:7b:54:12:6a:04:2e:19:37:98:73:
5e:f7:88:ad:6d:52:9c:19:2a:36:34:e1:8f:9d:5b:
78:09:56:58:c9:57:b1:6c:f3:dc:d6:38:c9:77:32:
3a:c7:51:9b:06:d0:3b:56:1d:c5:8f:4e:4c:b4:95:
a0:82:b7:ed:0d:40:80:85:05:93:9e:57:68:99:6e:
4b:1c:12:17:d5:aa:34:4e:2f:1a:ba:34:59:e2:3e:
30:b9:19:7a:5f:5a:e8:3e:59:d6:72:49:ca:9c:ba:
15:d0:0e:5d:37:97:4f:5d:82:c2:df:82:9d:e9:77:
45:a6:43:14:b3:cc:1b:30:83:20:84:d7:d9:4b:74:
de:a1:56:88:4b:f3:08:44:1d:ce:d7:86:52:7d:39:
96:92:5b:6a:9a:7b:ee:aa:bb:37:06:e1:52:a2:3e:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:66:9F:54:6D:B8:19:35:B1:64:41:E4:0D:0E:7B:DF:10:EF:8D:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae2bd40e-57f6-3f0f-a691-df86baef3e03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.254.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:dd:2b:3c:7b:72:83:eb:19:35:6e:0f:01:a6:7a:d3:f3:e6:
c5:82:dc:84:ca:21:c1:0e:1f:48:f5:95:9a:29:6d:60:01:8c:
7e:d1:e4:8c:3e:1d:cd:b1:37:36:63:93:1f:b4:70:f3:09:86:
b9:1d:ee:10:99:15:dc:7c:37:33:55:a3:b1:30:b6:03:31:bd:
f7:16:e3:84:4e:a4:5f:d0:24:ce:72:c6:1d:a9:ce:3f:78:90:
2b:ab:e8:c9:cd:e9:ca:a3:35:ed:73:22:fa:7e:14:f0:f4:9f:
fa:c9:4b:e6:e3:0d:1a:2d:63:25:fe:bc:7f:d4:e9:b0:2f:f4:
e2:f2:2e:b0:b1:2a:ee:4e:1c:6b:5e:46:7d:48:bd:16:cd:df:
93:a6:7f:ae:ee:31:f4:be:2a:46:12:4f:8c:c5:a3:6e:f8:92:
a1:db:2e:a6:37:81:ec:d3:05:9f:dd:22:62:27:68:02:6d:24:
92:b5:c8:02:c8:ef:78:33:4e:a7:4c:a3:64:69:db:ed:4b:ef:
0c:b4:df:35:1c:96:8e:ff:be:8b:ed:1b:b4:10:80:0f:10:2d:
ad:5a:6a:8b:99:7c:1b:2a:7d:fd:62:d8:bf:07:20:5a:e1:54:
9b:da:bd:f2:3b:d5:6d:d3:1e:65:7d:43:f3:d7:d9:44:43:92:
d1:11:57:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:36:55 2025 by rpki-client