Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8a951cf-ad8f-3d4b-8dfb-79e3a77f22e4.roa
File: d8a951cf-ad8f-3d4b-8dfb-79e3a77f22e4.roa (raw, json)
Hash identifier: GmqdIYdRdYGzo3UFYQPHFeHJCrxcbMx1rKUD2RPfJv0=
Subject key identifier: 10:0A:B2:CB:C3:E4:D3:E7:62:82:B6:1D:14:A7:17:B6:7D:E2:E0:98
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840862A5E4B4CEB6FC4D81C4C40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8a951cf-ad8f-3d4b-8dfb-79e3a77f22e4.roa
Signing time: Mon 09 Jan 2023 12:00:00 +0000
ROA not before: Mon 09 Jan 2023 12:00:00 +0000
ROA not after: Tue 14 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 158.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:86:2a:5e:4b:4c:eb:6f:c4:d8:1c:4c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 9 12:00:00 2023 GMT
Not After : Feb 14 05:00:00 2023 GMT
Subject: CN=0710f45e-2481-41d7-89a5-7764881cb7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4f:16:e7:25:0c:59:4f:9c:20:fd:09:86:16:
2c:1d:3a:4e:92:60:0b:8f:2d:a8:c1:ca:e9:04:56:
61:6f:40:60:63:f8:d8:db:9f:4c:d2:6e:70:1c:da:
fc:49:b1:96:83:91:67:b4:7a:53:be:4c:91:45:70:
4e:1f:fe:ef:0a:76:c1:76:e8:c8:84:11:b8:b5:1f:
cf:d7:04:7c:6c:7f:d3:11:44:8b:86:94:b6:20:16:
84:f8:b4:06:5a:12:76:a8:0b:00:89:96:4a:4f:6b:
73:d4:3f:a9:fc:14:64:88:9e:32:fa:a3:35:53:a7:
13:76:a6:e2:06:65:60:59:12:76:88:4c:36:af:be:
31:fd:d4:5f:fb:c2:57:fa:66:05:5c:f1:7e:6b:50:
e8:fa:a3:f7:a9:ed:ae:28:ef:b0:c8:7e:ac:88:fd:
d9:34:78:31:d4:c1:ab:0a:47:1f:d9:9d:44:9d:bd:
a7:e2:e0:3b:ac:af:44:3f:bb:4f:1f:76:6e:ef:6b:
04:1f:f9:00:9a:06:c9:18:15:06:fe:8c:f1:e8:8e:
a5:e9:3a:07:1b:b6:bd:6c:92:ac:55:cd:26:e8:fc:
ad:16:ac:11:e8:f6:9f:df:2c:db:69:ae:06:9c:cd:
ba:7b:b2:e0:b5:96:37:de:79:1e:07:f5:ec:45:b0:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0A:B2:CB:C3:E4:D3:E7:62:82:B6:1D:14:A7:17:B6:7D:E2:E0:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8a951cf-ad8f-3d4b-8dfb-79e3a77f22e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:ad:fd:be:65:64:49:b0:52:61:4e:2d:7a:a9:1c:56:7b:8d:
f9:fd:6c:aa:4d:d1:cf:b3:10:d3:d5:aa:d8:d2:49:d4:ef:e5:
8b:db:94:e9:64:cc:0f:6a:96:e4:fd:97:dc:bc:f6:d0:f3:70:
8b:f6:bb:60:dc:4d:01:0e:1a:64:6f:57:ee:e7:e7:3c:6a:8f:
c5:09:ee:82:57:34:d7:a5:ec:85:b7:bf:3a:83:41:28:d1:e6:
69:ea:e3:75:5a:3f:20:36:7b:04:d8:1a:6e:34:af:d0:e5:14:
36:e6:81:13:aa:28:16:c2:6d:fb:69:7e:86:23:50:b7:03:c0:
ec:a2:6e:3c:d3:7d:25:0e:4f:9b:2c:45:b3:f8:fe:a6:1d:0a:
4f:46:75:70:2c:97:3d:3a:43:ad:05:c0:3b:b8:0d:38:5d:53:
09:eb:72:95:a3:a9:5f:40:76:56:31:6b:88:84:ad:77:1e:56:
c5:67:8e:8d:a8:62:c4:af:e7:9c:8e:70:d2:ab:aa:31:51:09:
5e:09:ff:11:34:88:e3:6e:a0:3f:cc:54:4a:ca:6e:ae:7c:31:
85:6d:1d:7d:3a:cf:2d:50:45:da:da:1e:c5:e8:c2:ac:72:2d:
c6:b3:dd:6b:d2:6d:49:c1:64:9e:43:62:ec:73:aa:b3:49:d6:
52:ce:71:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:28:42 2023 by rpki-client on console-fra.rpki-client.org