Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd32267e-df26-3aab-b8bd-3874ee5af815.roa
File: dd32267e-df26-3aab-b8bd-3874ee5af815.roa (raw, json)
Hash identifier: BgiQy9b+VENc3j7c1jhrrwK2ZnNyciBlahr7DMsF8sE=
Subject key identifier: D3:84:BD:36:26:F0:32:7F:2B:10:8E:27:62:5A:27:A3:77:B2:1D:20
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D444F3B3845BDF88A1012AF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd32267e-df26-3aab-b8bd-3874ee5af815.roa
Signing time: Thu 17 Mar 2022 04:00:00 +0000
ROA not before: Thu 17 Mar 2022 04:00:00 +0000
ROA not after: Thu 21 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 157.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:44:4f:3b:38:45:bd:f8:8a:10:12:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 17 04:00:00 2022 GMT
Not After : Apr 21 04:00:00 2022 GMT
Subject: CN=b8bb7425-88fb-4a6d-b558-ce1bfb7852ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:a6:01:f1:24:43:10:b3:8a:c1:4e:5f:9c:
93:6a:e5:be:89:e2:0b:04:fe:34:ef:1b:86:e0:ff:
23:4f:5d:2d:bc:54:00:58:6c:20:e7:c2:5d:39:02:
95:ec:2a:65:20:7f:8b:2d:a1:4d:48:d3:bb:cb:29:
b2:b5:5e:fb:8c:dc:a2:16:06:ab:a2:b6:0b:7a:f7:
c7:c3:9b:f5:fb:c3:16:44:d8:de:93:2c:95:c9:18:
a0:23:25:d3:69:16:8e:aa:d5:bf:0b:c6:56:38:64:
0f:12:2b:e9:0e:19:13:46:20:c7:aa:88:f9:0b:2b:
65:0b:af:78:96:49:ee:1c:24:53:28:74:32:61:65:
f9:bb:6b:bc:4f:4f:25:3a:58:3d:f0:f1:d8:d2:ec:
ef:c2:a8:95:60:5a:37:e1:05:b0:08:5b:30:c5:3f:
66:57:dd:d7:26:52:5d:fa:d5:1f:30:2c:1b:d0:d8:
c6:f3:bd:9e:12:ee:60:86:61:1e:ec:96:56:62:e9:
64:5a:d8:94:f8:06:b4:01:0f:b8:51:71:fe:da:6e:
82:23:be:ce:bc:0e:b9:b5:36:e0:79:e2:e7:ad:8a:
f6:b8:63:c3:b6:c7:0f:40:df:5a:3e:47:ba:f6:ea:
11:7a:90:64:bb:db:4c:e2:f1:9c:54:cd:57:de:49:
e6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:84:BD:36:26:F0:32:7F:2B:10:8E:27:62:5A:27:A3:77:B2:1D:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd32267e-df26-3aab-b8bd-3874ee5af815.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:64:de:eb:cb:d7:c0:9b:1f:9b:8e:b4:bb:96:63:d0:ac:54:
e0:96:98:bf:81:a7:e2:1e:c3:d4:71:40:89:6a:d1:0c:6e:85:
8a:d7:2a:77:cd:62:89:12:1d:a0:69:2e:5c:98:c4:3c:06:b1:
04:55:3b:7a:7e:e6:1e:d7:0b:a9:af:eb:c6:5f:d1:59:95:19:
29:88:c0:0d:d0:ff:ef:51:6e:f7:6c:4a:f9:b8:2f:01:78:72:
96:38:0c:1f:fe:e0:9f:4d:ee:7e:58:11:8c:ba:3c:a2:a8:82:
c5:14:6e:ee:d7:c4:07:f2:55:7d:3a:c4:31:f5:d7:86:27:e2:
8f:fb:50:dc:d0:8b:16:95:04:6f:17:17:3a:99:95:0b:af:13:
5d:c1:2d:0e:8e:6b:db:31:24:5e:ae:87:a9:ce:ed:38:6f:47:
93:f3:78:f5:04:78:e5:97:35:e4:1d:12:c5:c6:6d:32:b7:de:
e1:d3:aa:b3:69:cc:a7:49:18:01:f6:fe:12:a9:87:43:c5:b6:
61:4a:87:b8:27:0d:43:d0:54:2e:ac:6a:b5:53:b1:d8:ba:2d:
74:df:09:9d:0b:5b:8b:8d:8c:4b:8c:1a:d8:64:5d:5b:d1:34:
65:bb:0f:cb:d4:09:36:53:59:9a:1f:3e:2f:47:45:6e:f9:96:
08:fc:3e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:16 2025 by rpki-client