Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4d6aa30-cba9-37ee-8cca-83c427faaec2.roa
File: d4d6aa30-cba9-37ee-8cca-83c427faaec2.roa (raw, json)
Hash identifier: iPUYKiW6oXydDcAu8PmlR6aEwqt0QgeKiVTeI6pDSLk=
Subject key identifier: 98:26:76:94:9D:0B:44:76:EC:FB:47:71:69:CF:7F:0C:94:49:35:13
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840745CFBE582C8B995D6D97380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4d6aa30-cba9-37ee-8cca-83c427faaec2.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 149.190.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:74:5c:fb:e5:82:c8:b9:95:d6:d9:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=b96b30d3-af66-4e5c-afeb-9c755306d384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ef:26:8e:2c:fe:04:b1:52:27:a8:2c:41:35:
1f:32:d7:8d:1a:17:7a:9e:d8:c1:b6:0f:60:c8:d8:
89:2a:0e:e4:81:6d:48:a6:6c:4f:67:57:a0:87:a3:
4d:af:14:2a:59:2f:75:6a:96:ad:59:d8:ad:91:94:
52:08:c2:10:ed:9c:23:dd:18:b3:03:c9:d9:a5:94:
d2:50:b1:0d:b4:35:e7:f2:10:84:47:14:fb:0e:04:
91:21:b5:01:d4:6d:ee:d3:1d:76:30:bc:44:48:f0:
50:0c:26:a8:81:52:52:5f:b7:91:f6:3a:0d:0a:f1:
27:eb:f5:3f:29:ab:d5:86:fa:e8:1c:9a:55:06:e8:
79:d0:a4:d6:c3:e2:62:b8:9f:25:93:d0:46:2d:48:
bd:f3:4d:42:30:c8:77:74:06:2c:4b:78:b1:bc:72:
f7:32:ae:55:d9:94:87:7b:a3:f3:1a:6d:ad:e4:2a:
88:72:3c:90:0d:83:59:25:f6:b9:6a:1d:f5:f5:41:
de:37:28:a0:c2:2d:36:85:13:33:63:a8:98:1b:ac:
9b:39:61:39:c3:78:2c:8c:c2:a4:02:2f:5d:96:14:
be:d4:91:c9:1c:56:ca:94:0c:e5:5d:ac:5d:a1:40:
aa:db:0d:29:63:89:0c:dc:2f:62:41:09:b6:fb:d3:
89:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:26:76:94:9D:0B:44:76:EC:FB:47:71:69:CF:7F:0C:94:49:35:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4d6aa30-cba9-37ee-8cca-83c427faaec2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
149.190.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:c6:d0:28:8d:19:ec:83:6a:9f:f7:b7:f2:78:bd:6b:3d:f4:
c2:3b:66:f8:71:b5:99:1a:fe:3c:ac:5e:42:4b:67:65:7a:2a:
0d:c4:31:8d:44:0f:5b:2a:40:e2:82:36:6e:10:cb:b7:c7:cc:
94:8b:3a:d5:b3:67:ae:5b:d8:36:d3:0a:49:c1:9c:1f:ce:61:
fe:a0:e7:71:c1:80:70:34:66:ac:06:63:64:b9:6d:fa:94:d4:
cd:9a:2a:89:b6:9c:03:66:95:13:45:4a:7b:25:7c:39:31:c4:
62:1a:3f:ab:16:45:49:9d:78:9e:cb:7c:5c:09:88:ca:dd:cf:
ea:05:bf:5b:82:d6:ca:54:8c:03:9f:ae:6f:c5:5b:7b:eb:18:
0b:b4:87:31:ba:bf:df:d8:74:eb:44:4b:c2:b6:70:8f:64:ac:
60:cb:bc:45:f8:59:cc:02:25:84:da:03:48:89:79:c0:bd:fc:
4f:0a:44:76:b5:12:1e:70:53:5e:fd:3a:1d:ab:1d:63:56:90:
c2:dd:9e:41:45:a1:95:46:f4:9b:b2:a1:81:11:fe:23:4a:3e:
1e:78:35:50:e4:7b:0a:95:e0:07:1e:5d:a6:83:6c:39:c9:75:
9f:04:92:c1:93:89:79:79:0a:c1:b5:d3:79:66:28:41:88:8e:
b5:f9:15:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:54 2025 by rpki-client