Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca467f65-1e1d-3813-a1a3-4b22a2b7a105.roa
File: ca467f65-1e1d-3813-a1a3-4b22a2b7a105.roa (raw, json)
Hash identifier: qzIxeBN+tDYBB3hZcsiNuAukkyAdsOI+axXac1VBEqo=
Subject key identifier: B8:06:41:8E:74:CD:72:7B:D9:39:F0:77:D7:52:0B:47:49:0E:6F:47
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840623155AC8FA115F4B0E65000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca467f65-1e1d-3813-a1a3-4b22a2b7a105.roa
Signing time: Tue 27 Dec 2022 12:00:00 +0000
ROA not before: Tue 27 Dec 2022 12:00:00 +0000
ROA not after: Wed 01 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 167.241.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:62:31:55:ac:8f:a1:15:f4:b0:e6:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 27 12:00:00 2022 GMT
Not After : Feb 1 05:00:00 2023 GMT
Subject: CN=ec4b6c85-062e-4910-b622-976a51a09bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:aa:f8:84:bb:63:05:2a:47:f1:6d:f3:89:a3:
d5:ff:ce:5a:94:a1:31:98:51:fb:c5:a4:38:39:bb:
07:ce:20:3e:3f:03:8b:ad:40:39:10:de:ec:5a:05:
cc:f5:5c:d3:bc:03:41:65:61:76:8e:7e:d8:0d:ee:
0c:05:d6:08:c0:de:ba:79:ee:f3:4c:fe:7f:2a:35:
c4:d3:a1:8d:fb:b8:a9:fc:be:77:fd:bf:66:47:f7:
83:ad:e1:77:a2:3b:5d:2f:e2:fb:52:09:50:3c:41:
20:09:dd:5b:a9:25:23:b0:e5:34:08:54:3c:1a:ef:
18:ee:6c:4d:fb:4b:e5:9c:7b:80:56:64:c8:89:31:
b8:2b:e7:30:94:8d:20:89:eb:38:71:af:5d:ff:fb:
1e:40:1b:d9:5a:28:ff:4f:d6:9a:fe:62:34:b5:63:
d9:8f:3d:d3:0f:72:3f:e9:c1:1a:1c:30:d7:01:c7:
db:9e:ff:38:4e:a5:a6:7b:fc:a5:8f:1c:f3:10:a3:
63:04:61:61:2b:e5:f6:74:56:0b:3c:a5:fa:1e:c6:
b7:2a:67:2a:5c:f4:c1:d8:bd:34:31:6f:6a:d3:d8:
09:2e:c9:ea:2e:8b:30:60:80:fc:87:ca:8d:3c:55:
97:5b:97:f4:30:26:03:57:87:a7:f3:5f:73:e1:f5:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:06:41:8E:74:CD:72:7B:D9:39:F0:77:D7:52:0B:47:49:0E:6F:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca467f65-1e1d-3813-a1a3-4b22a2b7a105.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.241.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:94:47:d2:86:f4:f6:4a:c0:cd:1d:6d:71:7c:48:40:52:24:
54:2c:ee:d1:d7:d5:c3:d0:03:c4:a2:f1:db:0e:39:1b:f0:56:
86:cf:3f:3f:10:d0:a1:0c:df:4c:3c:7d:b7:1b:5f:49:e8:b3:
a2:8e:84:cf:7a:cd:09:ba:d8:b1:c7:18:f1:e1:68:94:34:a6:
1b:f3:e4:0f:7d:d5:f8:15:47:94:3a:47:56:b1:c7:b5:00:a3:
e7:3f:49:24:5e:d6:db:89:1f:b9:de:ab:7f:23:dc:d9:1a:b7:
a0:70:6b:5e:6e:01:a7:df:9f:be:d6:8c:5a:0e:9e:65:7e:af:
f4:96:22:dc:26:4d:90:23:a6:a8:91:a3:60:e1:f6:7b:96:78:
90:1b:95:b2:8d:91:ee:aa:98:d6:1a:13:72:1c:ad:10:97:ec:
3e:9b:d8:74:88:b6:e4:5d:d6:8b:f4:9c:90:7c:2f:bd:79:91:
7a:08:ad:a2:54:6b:20:be:83:89:e4:9b:ed:6c:38:91:ea:13:
01:be:22:0c:f6:a8:2b:7d:f2:5f:27:b0:02:5a:a3:b7:02:b9:
7a:29:aa:ba:00:fc:3d:ba:fb:be:3b:b6:48:e2:0b:c7:e8:00:
d2:38:6a:5f:cc:b9:23:47:f5:d1:40:da:b8:08:5c:e2:7e:ec:
a8:5d:c6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:21 2025 by rpki-client