Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd57aafe-8b80-3e56-bb09-ca345872d6c2.roa
File: dd57aafe-8b80-3e56-bb09-ca345872d6c2.roa (raw, json)
Hash identifier: c3tqew4nVSnSSc7/+xu0F7dSS59ez8sWJxLhDg1bgJY=
Subject key identifier: FE:4F:6C:93:55:90:BB:24:5F:22:56:42:5E:2B:75:87:D8:71:B2:D8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584042EE3563F1B3380976856C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd57aafe-8b80-3e56-bb09-ca345872d6c2.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 71.152.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:42:ee:35:63:f1:b3:38:09:76:85:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=84b13035-6801-4a12-948b-426acce8230f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:80:b1:08:7a:41:02:25:61:a0:e1:7f:28:ac:
d2:2c:01:df:5a:67:35:80:fb:60:98:6c:e3:68:54:
eb:76:c0:ad:36:6c:5e:f3:c7:d6:8c:ad:ed:62:86:
08:77:e4:0b:43:82:d8:88:d4:b3:97:57:c1:43:c8:
54:38:c4:4b:36:15:01:dd:bf:3f:c7:f6:51:bf:e3:
84:99:9e:38:ad:03:c8:b7:45:da:e4:eb:14:fa:7c:
c3:5d:5e:9a:84:a2:9f:8b:f6:62:cc:32:30:eb:c5:
27:4c:5d:a0:cf:9f:e8:28:af:d7:26:e5:ab:ec:59:
87:4a:52:4b:b5:77:55:a4:fe:29:f0:12:75:00:a5:
45:b6:17:1b:8e:19:fc:f6:2e:a2:95:bd:b5:80:dc:
77:3e:85:a0:bf:3a:1a:ee:00:33:cc:0a:f5:95:5c:
cf:8e:49:16:2d:86:b3:9f:cb:52:08:99:7b:97:ec:
42:3a:ec:55:b7:b5:39:7c:65:b2:f5:e8:9f:35:77:
b7:2b:e2:bc:e1:91:dd:02:27:40:65:94:61:f0:71:
a3:f2:7c:92:08:c6:7b:55:ee:1e:51:63:81:6f:56:
3e:5a:4d:7e:8a:4a:82:c0:93:2d:22:18:9d:5f:1f:
19:8c:27:c7:47:9e:2f:e6:3d:3e:c8:2b:d9:54:c6:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4F:6C:93:55:90:BB:24:5F:22:56:42:5E:2B:75:87:D8:71:B2:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd57aafe-8b80-3e56-bb09-ca345872d6c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.152.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:c6:9d:f6:72:ff:08:f3:84:e2:9b:e6:db:b4:91:5c:67:f2:
b6:2f:2e:6e:25:a8:65:5e:33:d8:49:5b:71:ab:b5:70:38:7f:
34:96:6a:5c:05:ee:1a:e9:e1:82:25:46:6b:02:bc:12:98:ba:
12:7a:68:c2:bc:42:50:6e:76:7f:46:59:5c:ac:f5:26:b4:b9:
1a:56:88:37:1d:4e:f0:cf:05:13:5c:02:42:0d:bf:b1:15:74:
c0:32:aa:1f:b6:ad:fa:67:8a:04:ec:cd:5a:6e:56:5c:1b:5c:
27:b6:3b:d4:fb:7c:75:6d:c8:79:dc:e8:be:bd:f9:b1:fb:f8:
d7:3f:20:7e:7b:6c:13:9c:c1:f9:15:e8:85:60:66:e7:3e:07:
9a:ac:0f:f8:54:d2:83:d1:85:c8:7e:33:d5:38:a0:cd:a6:17:
fb:a5:cf:0f:43:0f:b5:24:38:57:9a:ac:1b:47:86:07:65:5a:
ac:14:8f:e2:e5:e6:50:06:27:84:5b:35:ad:07:e7:75:ea:1e:
be:65:36:28:da:e2:44:69:c1:8d:22:7f:2d:6b:32:85:db:5e:
69:0e:71:8a:d0:c1:f1:29:6f:d2:6f:94:e0:70:5a:ab:c6:75:
41:a7:06:de:dc:27:5c:a0:ae:53:2a:9c:a2:ce:6a:71:e9:49:
8c:d8:19:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:36 2025 by rpki-client