Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc96108f-96aa-347a-ba78-85f1524d6ca6.roa
File: dc96108f-96aa-347a-ba78-85f1524d6ca6.roa (raw, json)
Hash identifier: B21Y0JwDp+EROzmnJXTxF3Iw5JyMaFPE/XYdKiWpFeU=
Subject key identifier: 5E:AF:F3:60:C1:72:1D:32:DE:EF:79:5E:3F:B1:0F:3C:83:7C:68:33
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CC9B481C79F3820FA40764A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc96108f-96aa-347a-ba78-85f1524d6ca6.roa
Signing time: Tue 01 Feb 2022 05:00:00 +0000
ROA not before: Tue 01 Feb 2022 05:00:00 +0000
ROA not after: Tue 08 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 164.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:c9:b4:81:c7:9f:38:20:fa:40:76:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 05:00:00 2022 GMT
Not After : Mar 8 05:00:00 2022 GMT
Subject: CN=d4eff21c-de7e-44b2-b07c-23de82c30e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:4c:42:53:cf:af:54:02:98:b6:78:92:f2:
1b:24:f0:98:09:6e:20:58:c1:f9:3e:aa:56:b3:ac:
b5:18:33:48:f4:f2:d5:e6:eb:9a:b6:85:27:6a:c8:
b2:f1:25:c8:6b:cb:ad:15:4a:bc:e6:81:7c:ba:d7:
7b:89:14:6a:2b:ef:f8:47:de:94:5b:41:0f:23:08:
db:14:0d:14:2d:49:21:7a:92:37:97:d2:66:de:d3:
da:2f:fe:74:1b:3a:26:42:bd:26:fe:0b:b7:b5:5a:
ca:86:5b:a6:29:d3:0a:62:e5:bb:30:43:61:de:b8:
11:bd:3c:19:65:85:d1:ff:dd:1a:8a:11:88:84:91:
44:68:23:a4:a5:06:27:f4:d9:08:14:33:68:03:97:
88:61:7b:e9:fb:93:9b:68:f6:ab:8a:fe:e2:11:ce:
ea:12:50:8c:e1:e8:34:dc:6b:22:27:72:dd:27:0e:
7c:b2:cf:28:14:fc:61:6b:df:84:97:92:27:32:80:
a9:ec:f8:1a:84:58:f6:fa:47:7f:76:4d:5b:48:27:
e7:6b:4c:12:9c:ff:7d:72:b2:db:15:90:0b:7b:3f:
11:c5:43:56:dd:8e:c7:eb:a1:78:7d:05:13:c7:05:
1e:1a:c3:ca:f7:37:5d:79:fd:34:08:b6:6e:52:2c:
90:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AF:F3:60:C1:72:1D:32:DE:EF:79:5E:3F:B1:0F:3C:83:7C:68:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc96108f-96aa-347a-ba78-85f1524d6ca6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
164.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:4f:88:ff:2f:9d:f6:4c:15:b9:f0:2a:f8:01:de:88:74:62:
92:7b:5c:b9:2c:c0:ca:3c:65:76:31:a6:63:86:9c:ed:a8:fd:
2e:33:ef:18:1d:2e:7c:ff:7d:33:a9:e7:2f:53:75:ad:c6:e0:
b0:3a:82:24:3a:e8:29:b9:0e:a9:63:c6:39:05:dd:06:9c:06:
e0:2b:05:ba:3b:5f:f3:b6:4a:f3:ac:41:65:bb:13:cd:94:f9:
c0:77:c8:55:59:5d:79:a6:c7:67:d9:f0:a0:ef:07:66:da:d4:
48:98:2e:72:2d:1f:d8:3e:c1:74:2f:e5:f1:ad:2d:e9:0f:89:
c2:34:41:43:88:31:35:d1:80:ca:30:5f:07:ce:f6:b0:0a:59:
78:4f:2b:ec:3b:b1:88:b1:aa:58:ac:13:33:8d:a6:eb:7d:ae:
76:ac:d7:d5:43:8b:53:f0:43:26:8b:fa:b6:ba:a2:b4:be:d4:
1a:39:75:d0:eb:c7:d9:6e:ed:cf:87:8c:fc:1c:a7:64:15:bb:
5a:f0:d2:1f:c9:c0:22:65:27:7d:30:55:fb:74:44:ef:de:22:
be:eb:79:ce:c8:c8:7c:af:3e:a9:96:c6:29:6f:ea:04:cd:5d:
94:78:0a:08:ba:0b:f1:e0:3f:12:b5:f1:6f:a6:0b:45:23:1b:
26:3d:3c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:26 2025 by rpki-client