Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d1857882-13b4-3c4e-8605-07003dbd2785.roa
File: d1857882-13b4-3c4e-8605-07003dbd2785.roa (raw, json)
Hash identifier: srAhGVSeDgJviUT2ZyIJZF/ROXJXr4HhSPvvd4g1uYk=
Subject key identifier: FE:25:B3:E6:FE:5E:FA:FF:6C:90:3C:42:81:0F:B1:D9:4C:08:F5:F1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403E473FD03D08E6136B27A880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d1857882-13b4-3c4e-8605-07003dbd2785.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 57.198.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:47:3f:d0:3d:08:e6:13:6b:27:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=f73ad6bb-3c1e-4291-80b0-9eb0faf23973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:be:49:42:fb:65:3f:a6:36:6d:e0:d6:9c:
02:75:06:16:1a:62:18:bc:95:68:c0:f6:6f:10:bc:
95:ad:f1:1b:70:bd:a1:7c:5d:d5:0f:8b:45:18:7b:
22:ff:db:34:0f:9b:fa:8d:17:3a:75:09:29:02:79:
1d:12:2e:e0:fb:85:b6:60:93:d5:65:3e:c1:7d:7a:
83:b0:94:04:0d:b3:a5:bd:0f:00:db:14:28:11:54:
c1:1f:79:1c:d2:fc:a7:ec:f1:8b:fb:de:05:8a:78:
3f:5b:63:65:ab:87:a0:f3:37:91:33:36:ad:bd:38:
44:59:da:de:a3:2c:20:93:89:73:1d:27:be:bc:a9:
ed:a0:89:89:bd:94:a8:cc:61:22:06:45:9b:54:7a:
b2:ea:ac:3f:fc:f5:21:5b:10:25:02:38:43:1a:90:
ed:b9:6d:19:14:8f:86:39:5c:14:58:35:7a:24:bb:
21:c1:3c:bc:94:34:e1:fa:9c:5d:68:f5:6a:17:be:
06:cc:30:13:30:16:c7:ee:e6:63:c6:8d:c5:fe:46:
22:ef:01:d7:dc:a4:ad:2f:1e:8a:97:db:cc:a6:03:
54:0c:ba:2b:3b:7f:0a:44:64:be:18:42:0f:5e:f0:
78:2f:12:45:5e:41:a9:91:c6:07:a5:1d:c3:2a:e7:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:25:B3:E6:FE:5E:FA:FF:6C:90:3C:42:81:0F:B1:D9:4C:08:F5:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d1857882-13b4-3c4e-8605-07003dbd2785.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
57.198.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:0d:d3:31:29:5b:6e:82:d8:86:a9:8f:c5:0f:ad:a1:6b:51:
18:53:fa:aa:d7:0d:cd:b9:44:eb:55:55:08:20:24:f2:cc:6b:
21:c4:3b:27:aa:5a:f3:6b:bb:98:63:fc:9a:3e:30:2d:51:59:
07:89:25:35:bb:d3:1a:45:82:ae:ca:d7:75:26:a7:fb:48:48:
d8:6f:fe:c2:5a:ec:7f:ef:f6:8d:64:e6:ce:47:f9:ca:fa:a6:
2f:6e:6e:d1:63:f1:4e:3d:ee:64:df:f4:79:2c:92:f3:b6:31:
ef:fb:29:3e:0e:40:4d:17:b6:da:3b:8f:23:d1:5b:99:62:dc:
c1:e7:83:18:ef:01:ee:7b:60:9d:dd:5d:ed:85:bd:f5:bc:34:
bb:08:51:ee:fe:b4:cf:0a:65:f7:1b:42:57:00:42:e4:cb:16:
f9:3d:bf:14:45:52:c1:db:52:9a:7a:65:3c:65:c7:a0:91:db:
0a:4f:aa:b1:36:bd:ac:da:25:40:c1:73:f8:d0:03:a9:51:54:
38:17:8a:d2:4a:9d:98:06:02:cc:4d:38:4f:c3:80:a3:81:4c:
44:34:de:9e:f3:2a:c5:ad:e7:fa:8b:9d:21:b1:e0:02:4f:c4:
97:a3:30:76:f2:4c:1e:fe:2c:e4:67:94:c6:64:cc:08:cb:06:
99:9e:c2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:48 2025 by rpki-client