Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b388f504-2603-327a-9afa-ec76a2d62de5.roa
File: b388f504-2603-327a-9afa-ec76a2d62de5.roa (raw, json)
Hash identifier: wpVyl4zGuKdAX7n5IGadVSLWcIKrIPx4ria86r/FsZY=
Subject key identifier: 22:17:B0:10:83:CE:11:E7:D5:5C:B6:47:63:C7:B0:31:E2:AF:AC:3B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FB504B2A3643592A61AFEFBC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b388f504-2603-327a-9afa-ec76a2d62de5.roa
Signing time: Wed 26 Oct 2022 12:00:00 +0000
ROA not before: Wed 26 Oct 2022 12:00:00 +0000
ROA not after: Thu 01 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 157.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b5:04:b2:a3:64:35:92:a6:1a:fe:fb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 26 12:00:00 2022 GMT
Not After : Dec 1 05:00:00 2022 GMT
Subject: CN=3f42e6da-1ab7-422f-b81a-b9de03b9787f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:86:52:75:6b:3f:96:ca:f3:ce:1c:c1:6d:14:
21:51:78:a5:5a:c8:98:ff:ba:55:16:3e:d1:7f:ae:
ae:16:01:52:72:c5:25:c5:b5:8c:76:ed:2b:c4:de:
48:64:46:23:cc:ca:c6:9a:ea:ad:ff:eb:e1:17:bf:
8d:98:bc:da:6b:35:21:f8:d4:35:8b:24:1a:ab:45:
73:94:b2:4d:1c:0f:47:40:73:8f:27:e1:01:5c:3b:
d9:bb:32:e4:1c:72:d2:78:65:90:18:c9:9d:28:2d:
76:42:f2:98:ca:93:89:3f:38:25:45:9e:18:48:e7:
91:06:2d:1f:83:19:89:98:8b:37:62:e9:14:3e:e5:
b2:0b:6e:0a:ec:5c:87:65:f6:96:d4:31:5b:eb:89:
45:b7:03:40:2e:66:e4:fa:cd:cb:39:d4:7d:55:00:
66:b8:0e:18:60:6e:a2:fb:6b:ad:14:f4:e9:52:b1:
95:e3:1c:ca:82:bf:60:86:99:4f:6c:91:97:41:9f:
fb:8f:90:e3:9e:2f:dd:57:0e:97:5c:0b:92:f8:11:
2c:97:95:37:48:68:82:0e:51:de:79:66:46:d4:59:
f8:1c:04:20:53:31:5c:fc:fa:6b:6f:b7:8a:63:3a:
61:99:6a:55:bd:a5:ce:65:fc:5e:f2:4f:7b:c2:d7:
b8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:17:B0:10:83:CE:11:E7:D5:5C:B6:47:63:C7:B0:31:E2:AF:AC:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b388f504-2603-327a-9afa-ec76a2d62de5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:78:8a:f5:01:00:5e:77:ed:6e:4d:e8:8b:5a:82:69:fb:f6:
cb:66:95:89:83:a7:86:95:bc:31:d6:1a:28:c0:3e:29:3b:b8:
97:49:be:ba:d8:62:67:d9:3c:a9:27:0e:f4:29:e1:58:06:7c:
c0:57:14:ee:6f:eb:ce:c7:ef:f7:fd:aa:b4:d0:7c:85:0f:1b:
a5:b8:d8:71:c5:74:33:df:3e:b5:ac:ab:17:ed:f9:f1:26:af:
34:46:a7:d6:98:22:8b:e4:6d:67:04:55:0a:66:09:ad:67:a8:
7d:6d:17:cc:45:9e:ae:5b:d2:f1:a2:8e:4b:05:99:25:67:aa:
66:d1:19:4e:2b:e8:08:43:1e:9e:2c:02:3b:95:96:6d:f2:97:
62:d5:8b:3f:8a:f8:9b:92:ad:57:fd:8b:39:e1:e8:37:bd:58:
97:da:b5:07:93:6b:e8:b3:4d:e0:2d:66:63:79:3c:8b:1b:3b:
7c:0b:fa:3f:3c:bc:c4:6a:8c:db:f8:a8:61:ef:61:2a:f3:10:
98:c5:96:24:d7:a5:11:2c:99:fa:7d:8b:9f:98:32:5d:20:60:
36:e6:76:ec:19:3c:18:3b:7d:10:23:79:71:9e:18:10:53:38:
5f:df:80:98:83:af:50:59:62:3d:34:56:43:3f:d4:59:55:14:
04:68:0a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:33 2025 by rpki-client