Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d6a91b8f-3ebb-3ca0-a01f-55d4797c7b69.roa
File: d6a91b8f-3ebb-3ca0-a01f-55d4797c7b69.roa (raw, json)
Hash identifier: id6V8tOODYCeVsCDxbGNtoje68adzgqO7ptDGgoFlFw=
Subject key identifier: A2:02:A4:C6:DC:8A:2D:8B:F6:E9:D8:94:B3:14:4D:0F:F8:7E:20:76
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D81B36665A4BE51C9E694D980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d6a91b8f-3ebb-3ca0-a01f-55d4797c7b69.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 162.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:b3:66:65:a4:be:51:c9:e6:94:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=79f3ffd5-a346-4377-939b-ab079a0a8dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bd:91:7a:ff:6b:50:df:dc:25:5e:11:f6:05:
c5:fd:93:dd:90:64:18:99:ce:bf:47:b1:c1:6d:f1:
7c:99:55:a9:6f:5b:04:c0:18:1d:53:cc:ac:cf:d1:
0a:c0:41:32:b3:35:06:29:1a:a0:23:c1:59:a4:c0:
07:84:77:b5:fe:51:79:dd:0a:72:06:91:fa:43:ae:
37:a1:a1:f5:c0:65:e3:e4:85:a5:3f:0c:0e:58:f9:
a3:ae:81:c8:30:36:99:17:15:d1:cc:1b:cd:3a:d6:
cb:dd:23:34:02:c4:28:68:38:a4:ef:ee:2a:3b:f4:
60:56:da:3b:15:4d:ba:fa:b3:9d:11:1c:83:df:63:
d0:d6:74:cd:22:ca:35:58:60:ad:f8:9c:bb:41:e8:
de:cd:c0:f0:32:c7:13:71:45:2c:8c:4a:f8:a5:8a:
80:ac:94:f9:db:f7:6a:a0:28:4d:64:20:55:fe:74:
67:6c:b1:71:8a:2d:45:65:ce:b8:84:1a:5c:9b:67:
08:50:0e:89:ac:4a:53:3b:6a:b6:b0:81:5d:61:bb:
e6:ca:aa:58:26:24:54:0b:bc:5b:7b:70:53:e8:32:
80:a5:18:e4:ac:96:41:cc:be:2f:5a:bb:c7:f4:5e:
b7:3e:46:52:f6:be:dc:80:33:bb:65:f8:c6:0d:3b:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:02:A4:C6:DC:8A:2D:8B:F6:E9:D8:94:B3:14:4D:0F:F8:7E:20:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d6a91b8f-3ebb-3ca0-a01f-55d4797c7b69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.85.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:8e:90:82:5e:4f:e0:9b:3b:93:2b:42:aa:d3:b0:8a:0f:d2:
7b:98:9b:be:ab:14:20:b0:57:3f:41:01:b3:c3:8c:9f:f9:0b:
c4:7f:bd:33:9a:fb:de:19:c2:a5:08:91:0c:fb:23:d7:1b:8e:
53:41:1b:84:d9:43:46:e1:28:12:97:10:f3:e7:c4:7c:3b:32:
e6:03:f7:e7:b9:53:5f:68:eb:1c:02:1d:bf:a9:48:15:ab:dd:
43:73:d2:a8:c0:e4:9d:d3:bf:b4:58:a2:6d:a9:5f:b5:52:f9:
03:59:1a:92:fe:d4:62:0e:b3:fd:0b:e4:80:f8:2a:42:c0:f0:
61:19:88:75:65:4b:8f:b9:38:53:72:30:84:de:b1:f4:6a:d9:
24:03:48:76:78:12:13:02:f0:5f:0f:37:54:69:90:58:d1:34:
d0:7c:f0:d0:31:14:ea:5e:f7:77:b0:5a:58:04:4d:29:84:06:
2a:39:a2:b6:8c:9d:a4:6b:37:a3:53:f6:06:2d:97:5f:36:ad:
cf:4b:17:80:0e:d7:eb:31:62:6a:1c:48:e1:68:f8:ba:71:ef:
64:18:64:3e:da:85:de:47:fb:0d:0a:c8:ee:c5:13:9d:0c:f7:
76:01:67:80:50:d9:e8:ab:bc:71:65:8c:dd:d4:27:03:80:cf:
fa:73:67:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:57 2025 by rpki-client