Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4e31b30-d92a-3e97-89f7-3c1b0347578a.roa
File: d4e31b30-d92a-3e97-89f7-3c1b0347578a.roa (raw, json)
Hash identifier: AsCdxyMNNvx4B02GGMkx3WkJIyu6MBadL1XV1fAlaMM=
Subject key identifier: 73:8D:8F:11:70:BD:A0:40:2F:CA:27:36:AA:45:08:0A:CA:0A:52:0E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FEA3C5CEFAA9DFB9542372F20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4e31b30-d92a-3e97-89f7-3c1b0347578a.roa
Signing time: Mon 14 Nov 2022 12:00:00 +0000
ROA not before: Mon 14 Nov 2022 12:00:00 +0000
ROA not after: Tue 20 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 151.148.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ea:3c:5c:ef:aa:9d:fb:95:42:37:2f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 14 12:00:00 2022 GMT
Not After : Dec 20 05:00:00 2022 GMT
Subject: CN=987fdc9f-f5d9-475e-8c9b-2b1b56076841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:80:1d:a3:24:5e:8b:52:a6:1b:cc:bb:08:34:
42:5e:61:a9:82:d6:d0:6e:06:aa:4a:c4:98:94:cf:
34:18:ac:75:59:e3:63:b5:cd:32:2f:1c:9d:e3:fd:
35:d6:32:a3:08:54:2a:41:45:c4:09:e1:ed:54:0f:
22:2b:c6:86:bc:80:02:a5:d2:e0:70:b2:aa:3b:d4:
74:67:fe:d8:56:7b:aa:6b:35:72:ee:43:af:2f:92:
ec:58:43:c2:85:bc:40:09:f7:32:eb:6f:e3:13:cf:
00:33:df:85:cd:8d:eb:c9:be:1d:95:ae:76:35:cc:
87:8d:79:d7:49:70:2c:fa:50:8a:04:99:c3:0e:f2:
9b:ae:94:e1:31:73:13:4a:33:47:8b:7d:9e:ec:f4:
1a:b2:f5:e3:ce:65:eb:dc:68:f0:b6:9a:b0:a3:a3:
da:0a:50:db:7c:7b:9b:71:2d:21:a1:8c:a0:a1:49:
34:da:49:f2:73:73:83:40:69:28:85:7e:0c:ea:b3:
38:5c:f7:d0:9f:44:9f:ff:0e:4a:cf:06:02:2b:89:
21:54:a7:56:0f:43:2b:fc:fb:f3:da:9d:dd:c5:47:
81:d0:da:bd:e6:14:74:a7:86:9e:66:57:bb:d7:5f:
26:4d:24:e8:c4:2e:d1:35:a5:f9:10:43:23:1c:d9:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8D:8F:11:70:BD:A0:40:2F:CA:27:36:AA:45:08:0A:CA:0A:52:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4e31b30-d92a-3e97-89f7-3c1b0347578a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
151.148.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:43:da:ed:a8:d4:7c:f8:1e:cf:a4:65:3b:97:c4:6f:19:fb:
f9:18:c0:3a:73:5c:af:f7:9e:5d:9c:cd:10:51:2c:f4:48:7c:
8c:26:42:61:74:70:e0:df:8a:62:7b:6f:db:26:97:b1:a2:85:
52:fb:26:0f:ab:2f:28:20:a6:73:e7:ad:10:5b:63:73:95:0d:
a9:c1:e8:47:74:a3:15:35:72:ba:2e:a8:ab:a0:32:82:4f:27:
06:c5:98:e9:17:36:3f:52:29:77:47:61:ed:f9:e9:28:35:37:
e9:c3:5a:09:51:50:a8:84:d2:cc:6f:15:df:4b:44:58:7c:f5:
5b:20:97:26:1a:97:2e:ed:26:f8:8d:67:66:bc:b8:7c:22:e0:
db:51:42:13:e7:81:ee:d0:af:32:e3:71:bb:ea:c2:d9:43:81:
10:ff:5a:14:7c:6f:f4:a3:a3:de:70:70:6e:42:e8:65:bc:56:
78:0f:04:cd:d1:52:16:86:e8:32:75:d7:7e:38:c8:11:f0:6c:
65:9e:07:6d:b6:12:a5:a8:73:1a:5e:69:f4:6d:e7:3e:66:c0:
20:2d:33:cb:84:e1:95:9e:fb:14:83:fe:4f:3f:24:97:d1:e2:
e8:5b:4e:49:e0:2e:fc:38:a7:69:7e:f8:91:e9:10:38:7f:2e:
f0:d8:ce:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:59 2025 by rpki-client