Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae9bfd69-4919-32c6-9a7f-848c13f5a13c.roa
File: ae9bfd69-4919-32c6-9a7f-848c13f5a13c.roa (raw, json)
Hash identifier: vFUp5SY0r6yKW/37sHLLSfZQV94N/CPbBOOBe+ottX0=
Subject key identifier: A2:30:13:7D:07:32:CB:FD:97:E8:40:44:4F:2E:03:4E:00:B6:0B:E2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DB4629BB85684BB9E5968A980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae9bfd69-4919-32c6-9a7f-848c13f5a13c.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 31 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 164.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:62:9b:b8:56:84:bb:9e:59:68:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : May 31 04:00:00 2022 GMT
Subject: CN=772b603b-dc0e-48f0-ad6c-5785ed95496b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:33:6f:f4:54:41:84:82:73:73:f3:9b:af:
93:7d:94:f0:61:92:f5:5f:b6:f9:69:30:35:0a:f4:
97:3b:a4:05:e5:83:2c:96:27:b9:95:22:78:e4:e6:
c4:38:9e:87:f8:ab:3a:c6:66:ef:a9:c7:68:08:9b:
7c:86:8a:8a:2b:83:0e:22:ee:de:64:c4:45:b0:31:
11:75:2f:da:4c:b8:af:eb:be:99:51:94:6d:87:fb:
7e:c3:ce:61:0d:6c:23:4a:74:15:fd:60:f0:a6:47:
33:a6:b2:30:24:cc:88:a0:6a:a8:70:89:b9:76:0d:
62:3a:55:2b:35:51:42:dd:da:da:fc:d0:d0:e4:40:
4d:30:60:a0:b7:b2:ce:3d:ee:79:72:c2:89:a6:d5:
8c:07:8b:06:be:5c:de:56:97:3c:00:ee:6d:75:f7:
99:df:ba:1d:f1:d6:35:23:a7:37:47:f7:64:66:25:
78:aa:ee:d9:94:09:e4:32:ef:88:df:e2:64:26:32:
bd:ec:3c:24:3e:40:53:3d:28:85:85:fb:a7:cb:7a:
1e:b8:2c:33:94:b4:a5:76:a0:8d:98:f1:1a:3a:fe:
70:9e:e9:84:6c:32:db:94:d2:c1:21:a8:d7:ad:c9:
49:ed:96:41:4b:7d:ba:bc:ca:8c:35:14:48:07:05:
07:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:30:13:7D:07:32:CB:FD:97:E8:40:44:4F:2E:03:4E:00:B6:0B:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae9bfd69-4919-32c6-9a7f-848c13f5a13c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
164.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:99:c4:b8:68:f5:3e:7a:b9:6a:6d:a4:9d:7c:8f:23:4b:d5:
52:43:62:fb:4e:45:e4:f5:5f:fc:56:6a:2f:9d:26:54:20:fc:
a8:2c:9c:0e:85:f2:01:8b:fe:f5:64:70:78:d5:83:22:32:8c:
5e:58:a0:43:d1:bc:e3:c8:dd:4c:09:58:2b:da:0c:e6:08:79:
5a:05:1f:81:32:67:8b:d4:c0:04:97:b6:5b:61:f7:0e:88:d3:
8a:a9:86:44:d8:36:c8:43:cc:b9:5b:53:3a:6b:04:20:06:64:
92:8f:53:f6:2e:bf:74:7d:3d:5a:e4:25:cd:c6:aa:71:5d:46:
4d:33:2f:c0:03:2d:36:92:4e:1a:f8:97:10:33:0e:e9:62:51:
64:a8:1a:29:bd:75:fd:85:51:9c:d3:91:58:93:dc:ad:a2:7a:
3c:74:d1:1c:45:e3:0c:55:02:71:ba:a3:84:54:27:78:f9:2e:
c9:b0:ee:96:ae:a4:30:6c:05:fd:a2:a9:23:d4:2c:d6:fc:95:
2d:37:42:d1:6e:72:7a:d2:b7:02:c9:a3:fb:17:f6:bb:c0:a0:
0b:cd:e8:65:ae:11:c0:2c:22:51:16:70:8b:25:45:e1:de:66:
99:6d:5f:c7:3e:c5:e2:18:36:d9:87:db:a1:58:ac:54:96:60:
a6:55:62:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:57:20 2025 by rpki-client