Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b5a438ce-ba45-3e89-b57d-9c7cc9e98886.roa
File: b5a438ce-ba45-3e89-b57d-9c7cc9e98886.roa (raw, json)
Hash identifier: ycQjK3LIlH/wB4EqyVBkKTcSd/ilb0Nh3ZoPalcY5AI=
Subject key identifier: 64:9E:02:E3:74:FB:B1:A8:CD:5D:85:F5:20:A2:D6:15:DD:40:74:5C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D18EBEBAA7E6076A56A3508E4
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b5a438ce-ba45-3e89-b57d-9c7cc9e98886.roa
Signing time: Wed 02 Mar 2022 05:00:00 +0000
ROA not before: Wed 02 Mar 2022 05:00:00 +0000
ROA not after: Wed 06 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 159.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:18:eb:eb:aa:7e:60:76:a5:6a:35:08:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 2 05:00:00 2022 GMT
Not After : Apr 6 04:00:00 2022 GMT
Subject: CN=8f97e86b-b08e-4007-a9a4-d8654e67d969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:9b:27:d5:28:0e:75:aa:c1:17:80:36:63:
90:7f:f9:94:af:17:d2:c3:10:93:15:33:64:cd:a6:
9e:99:bb:cc:63:ff:c6:70:4c:8b:a2:dc:f6:7d:22:
2a:8d:61:21:45:b9:dc:78:43:7f:a2:38:66:1a:dc:
10:6a:15:69:e1:f2:35:e9:c8:39:0b:45:fc:2f:85:
f0:05:51:fc:69:e4:62:7a:6b:bf:38:15:7a:25:14:
a9:19:8f:4d:1a:d5:98:93:64:1c:56:fa:83:8f:ec:
c6:39:99:fc:fc:87:da:76:f1:43:66:69:1f:64:03:
f4:da:3d:22:e6:0e:55:4c:bc:14:4f:1c:7b:21:09:
8f:88:43:84:e0:ff:92:eb:f4:c1:0b:a4:4c:53:f6:
f2:61:39:1a:27:ee:30:5b:1f:7b:ff:76:a7:b5:1a:
95:38:1e:8a:0f:c7:f2:8e:6b:37:d3:7c:03:99:91:
08:d6:a4:27:6f:50:80:45:87:27:86:66:67:85:2d:
13:7d:80:96:f0:61:ea:26:08:86:8d:21:0c:4a:be:
2b:cc:5d:a0:6e:e3:85:2d:83:73:54:6f:59:6c:62:
3f:c2:e7:a0:13:f6:fa:db:ff:b3:52:b8:9b:ab:d6:
71:68:36:98:ca:8f:68:37:cd:7d:7b:67:1b:5b:a1:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9E:02:E3:74:FB:B1:A8:CD:5D:85:F5:20:A2:D6:15:DD:40:74:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b5a438ce-ba45-3e89-b57d-9c7cc9e98886.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
159.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:9f:62:41:c0:0a:0b:43:b6:46:b6:79:6f:d3:35:ad:21:15:
b3:7e:b8:a2:b4:56:97:79:a7:36:f7:15:49:3e:71:d8:4b:45:
65:f4:4e:80:63:55:3c:76:bb:5c:27:19:96:ee:27:58:2e:0e:
2d:ab:be:bd:85:ec:5d:f1:fa:e6:34:72:f4:1a:27:9d:4b:f4:
42:8f:36:c0:77:72:ca:05:5c:44:db:f6:f1:4e:20:9f:5f:95:
5b:7c:af:be:1a:68:71:87:2d:50:09:75:b4:58:35:79:12:fc:
10:fe:a7:51:43:6e:0e:5d:84:a5:23:6c:f7:d9:cf:24:7e:53:
0f:40:53:f9:b3:51:28:46:2e:48:9a:ff:17:29:8f:e0:96:0a:
2d:47:7f:91:d9:16:14:d8:18:85:c1:30:c2:1c:59:c0:e4:0d:
70:e8:e0:91:07:5b:7d:5f:2e:8d:ac:8d:4f:5b:06:c3:24:08:
ff:0c:a4:9a:0e:60:e0:20:31:07:e0:cc:86:60:89:f0:c6:ec:
1a:82:10:b3:85:af:16:a6:9b:63:73:3e:1a:30:ec:8f:0a:8a:
d0:6f:6c:2a:06:de:41:1c:2f:de:c4:f1:98:cb:dc:9b:b1:7d:
e0:0d:f9:d2:1e:d8:27:5d:3d:60:9f:c6:dd:c9:29:a5:05:b8:
91:42:b0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:35 2025 by rpki-client