Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e59406a2-e5ef-3c0c-8f4b-502a5a45c996.roa
File: e59406a2-e5ef-3c0c-8f4b-502a5a45c996.roa (raw, json)
Hash identifier: mvl0/NlKy2S8v+ShikwCktzaDDFRs1yE5dsg9H/4n+E=
Subject key identifier: DC:BB:BC:3C:D2:C8:58:67:98:D0:9C:5D:85:3D:F0:D7:48:19:E7:74
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC581C83A6797F0F8E082B720
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e59406a2-e5ef-3c0c-8f4b-502a5a45c996.roa
Signing time: Tue 01 Nov 2022 12:00:00 +0000
ROA not before: Tue 01 Nov 2022 12:00:00 +0000
ROA not after: Wed 07 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 146.167.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c5:81:c8:3a:67:97:f0:f8:e0:82:b7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 1 12:00:00 2022 GMT
Not After : Dec 7 05:00:00 2022 GMT
Subject: CN=ad7a14f6-7543-4283-8957-5223a78ddca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fa:5c:09:cb:de:3a:44:66:47:a4:c8:77:9a:
39:0d:73:d1:35:a5:57:c1:df:bf:5e:eb:67:ad:89:
66:eb:9f:f5:0e:d3:70:ed:7a:57:d1:6d:3a:72:e5:
ce:42:a5:14:a7:8a:bd:fb:6b:61:30:40:84:67:fe:
d6:9d:e9:fe:99:9e:e3:68:8a:e7:d9:2f:ea:52:da:
ec:73:1f:9d:21:ff:fd:b7:12:4f:17:06:d6:d0:87:
f5:88:3c:3a:29:41:e2:55:f4:3f:15:f2:31:e7:1d:
ec:f2:df:29:36:43:be:e7:10:be:38:f7:2d:91:16:
7e:84:99:91:f2:bf:f8:42:e5:2b:6c:44:aa:8f:5c:
52:e6:6f:fd:6f:34:7d:fa:fe:ed:ed:eb:00:7b:43:
74:35:2d:fb:49:86:1f:a7:a4:15:a6:d5:c7:ed:b9:
20:26:24:38:01:01:15:d3:3a:08:d6:a4:78:10:55:
50:82:2f:62:3e:fc:a2:6c:97:4b:b4:0d:1e:80:7c:
58:01:e6:df:7d:75:c7:a0:a9:4a:29:cd:5d:8d:76:
8a:3e:72:d3:33:a9:6a:58:06:cc:78:14:e6:f9:df:
55:e0:94:46:65:2d:5f:70:59:e6:bf:e7:e5:d7:88:
f9:b3:9c:6a:26:f3:d0:86:96:35:5f:64:3d:d5:be:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BB:BC:3C:D2:C8:58:67:98:D0:9C:5D:85:3D:F0:D7:48:19:E7:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e59406a2-e5ef-3c0c-8f4b-502a5a45c996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
146.167.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:81:7f:9a:ea:e4:76:a3:df:7e:c5:55:75:76:03:7f:3e:54:
bc:30:14:4f:05:09:a2:19:55:f2:15:7f:ed:ff:1e:7d:03:a5:
30:7f:f0:90:78:f9:61:cf:8e:69:0c:03:c5:a5:da:5d:67:62:
f1:81:ac:67:c8:d5:a7:cb:45:57:2e:28:fe:10:5e:45:d7:8f:
24:47:3e:48:68:34:43:d8:b7:dd:a2:7f:e4:ac:93:6c:49:b2:
7a:30:e0:db:cd:ba:aa:6c:de:78:5c:bc:6b:7d:37:37:95:cb:
8a:21:6b:a4:19:7f:88:71:5c:7c:10:5d:72:81:04:2c:b1:d8:
80:f6:7b:5f:b7:7a:dc:67:6f:79:87:8c:b1:b0:62:dd:5f:8d:
ef:f7:59:7e:35:0a:34:03:67:2d:0e:eb:8f:67:30:0c:66:2d:
17:01:fa:04:01:e4:53:78:f5:ec:f6:2a:8c:7e:6f:b1:b6:58:
60:01:5c:e3:8d:dd:10:5b:a0:c8:73:1f:9a:1b:94:26:fb:24:
04:39:d5:b4:73:23:86:9e:f8:4b:e7:c8:ef:1e:64:10:88:d0:
84:ba:fa:a0:83:ca:43:33:b5:01:d1:c1:70:96:07:2b:10:87:
7e:d4:c0:50:b3:96:57:2d:db:67:d3:0b:9a:c1:da:e0:94:d5:
16:fa:f5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:22 2025 by rpki-client