Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3d74719-89f2-307d-b3de-6f6eb734794e.roa
File: c3d74719-89f2-307d-b3de-6f6eb734794e.roa (raw, json)
Hash identifier: wd/mHmE3aTAVXcNQalkm6JwMJcGxPYdCGdH6U/v9s6I=
Subject key identifier: DD:17:40:E8:69:B8:FC:09:41:60:90:C9:69:2E:BA:17:7D:3C:F3:B4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD95E37B8BD0D796BE5D7E340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3d74719-89f2-307d-b3de-6f6eb734794e.roa
Signing time: Tue 08 Nov 2022 12:00:00 +0000
ROA not before: Tue 08 Nov 2022 12:00:00 +0000
ROA not after: Wed 14 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 143.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d9:5e:37:b8:bd:0d:79:6b:e5:d7:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 8 12:00:00 2022 GMT
Not After : Dec 14 05:00:00 2022 GMT
Subject: CN=7fe0ab76-e3fd-4807-a606-721ad6f57ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9f:97:2d:19:11:02:51:50:74:72:b2:03:0a:
1e:67:b2:dd:16:ec:ca:8f:3c:ff:9d:fc:60:89:b8:
af:93:93:2f:56:21:ee:2c:45:70:a9:57:dd:ca:46:
d2:f3:6c:f5:c9:97:b4:2c:9a:a2:ff:f5:47:2c:4a:
f4:f8:b5:ce:4c:dc:aa:2a:9f:d3:cb:35:de:75:8e:
22:e8:40:44:c0:90:51:ca:a6:86:ed:ca:ce:4b:b9:
22:a4:e9:55:41:c0:93:b5:e7:e4:78:6d:4c:12:d3:
17:88:28:33:74:18:00:40:06:d6:8e:b1:14:40:5c:
ca:b8:ef:dd:3e:be:cd:13:ca:83:8d:06:9d:ab:44:
b7:72:da:ab:8b:36:97:f6:c4:5f:05:66:77:99:1a:
2f:36:d8:ef:c8:ed:a7:b6:34:b1:b7:4c:13:5e:c0:
bc:6c:03:b1:81:c6:55:71:ca:dd:22:73:95:d0:70:
20:f1:ae:b3:17:14:74:a9:d3:61:e4:85:e2:a8:cf:
44:07:b1:95:95:32:e7:97:86:f2:ff:97:12:d8:f0:
a3:51:25:aa:bb:76:61:31:11:6e:a9:47:20:2a:31:
06:3d:e0:0e:25:f4:ec:da:eb:8d:ba:ff:74:e2:bb:
0f:73:fe:1c:5f:2b:be:f2:a1:51:13:05:9f:f0:79:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:17:40:E8:69:B8:FC:09:41:60:90:C9:69:2E:BA:17:7D:3C:F3:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3d74719-89f2-307d-b3de-6f6eb734794e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
143.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:cc:81:8c:c5:25:72:e4:45:16:9b:20:75:bd:43:ad:01:60:
65:cd:6d:49:35:8d:9e:ca:a4:5d:3e:fa:b9:92:12:97:28:42:
de:e3:5f:7c:7c:66:a7:c5:66:f7:4a:df:0e:c8:4c:6c:72:03:
18:66:da:01:db:6b:a2:45:f5:aa:06:10:e8:fa:12:a7:04:63:
6a:b5:ba:93:79:26:58:6e:7f:36:b7:d7:b6:e4:fd:3b:03:ea:
66:f3:c3:b2:d0:3d:9e:c4:c6:ec:0c:ab:35:e8:b5:c0:b8:f6:
e8:d9:9f:75:52:fc:9a:bc:a0:47:c6:16:fa:77:e0:68:87:61:
5d:4e:a0:d8:df:95:4f:1d:cd:cf:b6:a6:fd:bb:f5:87:fd:e0:
2c:be:9f:cc:b3:ea:be:12:2b:21:af:5f:b7:22:ef:40:33:6a:
18:ed:c7:f8:60:93:cd:65:d2:ce:83:b9:8b:00:4f:fb:f0:31:
c4:0c:ec:8c:c6:ca:11:2b:42:10:6d:b3:da:24:e1:52:0b:95:
70:17:78:e0:bd:8c:07:a0:4b:96:d2:14:ce:86:01:8a:1d:dd:
c9:44:62:43:ba:f3:4b:1b:76:5a:06:ca:b6:a4:fb:28:40:fd:
62:8a:f8:1c:67:5e:fa:30:c9:e8:79:0b:84:33:7f:6a:04:b0:
d9:b9:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:13 2025 by rpki-client