Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf3612f1-d352-3c17-9431-a9e339f1a1ba.roa
File: cf3612f1-d352-3c17-9431-a9e339f1a1ba.roa (raw, json)
Hash identifier: cahiNsuOxfGwu7aLNbdmKd/WfF+UHjPHJKjN4nz3yTI=
Subject key identifier: AC:95:07:3E:13:C6:4E:7C:DE:D9:9C:DD:EA:41:69:16:A8:FC:80:84
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF039B63F3CD44796E91035F0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf3612f1-d352-3c17-9431-a9e339f1a1ba.roa
Signing time: Wed 16 Nov 2022 12:00:00 +0000
ROA not before: Wed 16 Nov 2022 12:00:00 +0000
ROA not after: Thu 22 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 57.193.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f0:39:b6:3f:3c:d4:47:96:e9:10:35:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 16 12:00:00 2022 GMT
Not After : Dec 22 05:00:00 2022 GMT
Subject: CN=aaf2c194-eb0e-46d1-941e-b74f1a881a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:fc:c5:d1:db:9f:4a:e2:e3:53:c0:44:70:
a3:e7:67:d6:12:74:0d:15:cf:9b:80:7f:24:11:0a:
bf:98:cd:83:50:d8:ee:8d:b7:39:c0:43:66:ef:7f:
6e:bd:5c:36:b5:3b:86:fb:53:a2:78:51:1c:26:90:
67:a0:6b:50:8a:5a:74:f9:13:43:9d:d1:d3:d4:78:
89:c1:1d:3a:d2:14:60:5e:80:b0:9d:75:13:b0:b0:
dd:4d:dd:4a:28:0a:c4:59:b5:96:c4:aa:41:40:f3:
aa:04:51:d7:80:93:d2:24:71:ee:e8:73:82:60:e3:
7d:ca:d6:a0:a6:4a:22:4f:6a:7f:9c:f7:06:c6:86:
ee:19:d2:51:81:af:1e:22:0e:66:40:94:87:80:db:
6b:2a:da:85:48:7d:85:46:a2:9c:5d:42:d5:b1:a4:
16:cf:30:74:cd:57:b0:74:19:5c:be:45:60:21:2d:
a8:bc:c9:29:fb:9f:c0:16:e4:7a:b9:b9:59:2b:a4:
15:e9:30:40:0a:77:ae:08:4c:9d:b6:14:8a:6f:91:
2e:47:d3:50:a3:71:95:7b:6e:16:15:c3:aa:07:8d:
ff:a6:9f:56:4f:bb:cc:0f:73:54:42:9c:bb:64:93:
6c:6f:b0:b8:b9:3e:57:5d:90:1e:a9:ca:ef:66:2e:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:95:07:3E:13:C6:4E:7C:DE:D9:9C:DD:EA:41:69:16:A8:FC:80:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf3612f1-d352-3c17-9431-a9e339f1a1ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
57.193.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:0f:e8:16:95:54:c6:23:b7:33:9a:0a:40:95:e2:af:98:65:
5e:70:bf:92:fe:38:1e:4a:7e:99:db:b3:29:3b:5c:b2:94:18:
89:01:29:95:0c:4b:d2:0e:4d:d4:32:73:4f:90:0c:69:0e:2f:
e7:cd:67:cf:ea:47:56:62:02:7a:07:4a:32:d9:8e:b6:d5:70:
73:41:e8:9b:ac:3d:b4:3e:e4:b3:f8:fc:d6:a1:63:db:b3:e7:
bb:c1:f4:15:99:4d:83:34:94:07:67:e3:0d:dc:11:29:f1:45:
e9:34:d5:70:b0:17:8f:f8:be:e0:1a:41:0f:75:07:40:13:c6:
99:f5:00:0e:f9:60:ea:39:40:e3:c0:5d:21:7b:e9:4d:86:aa:
4d:89:2a:94:3c:d5:78:34:14:12:a3:9a:e8:07:53:1b:5f:26:
53:58:94:f8:d5:a0:8f:2e:92:b4:20:0c:53:72:e9:9f:9d:34:
41:94:64:ef:75:e9:f7:97:a5:71:35:42:b9:59:02:c6:da:cd:
49:ce:f9:39:27:f6:8c:e7:b9:dd:d0:7c:9a:54:5f:7a:9f:76:
63:e5:25:5b:c9:0f:27:f3:1a:1f:79:4f:cb:6b:31:56:42:7a:
30:38:b1:a9:0a:4e:e9:e2:ec:d0:89:94:b4:cc:d5:a4:0d:53:
1b:05:8e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:46 2025 by rpki-client