Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed954ef7-9da5-3ddf-b9e8-1d5c0e6f7e69.roa
File: ed954ef7-9da5-3ddf-b9e8-1d5c0e6f7e69.roa (raw, json)
Hash identifier: A6X98dXxAqwecxx8G01Ckk4rPgwNFv7hHpQXOGYPwOw=
Subject key identifier: 89:83:7D:72:C2:BF:47:F4:5E:13:32:78:52:02:DE:4F:E8:34:D5:3F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC89E31B2B60EE2B387DD7440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed954ef7-9da5-3ddf-b9e8-1d5c0e6f7e69.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 57.248.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c8:9e:31:b2:b6:0e:e2:b3:87:dd:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=02335176-3520-4346-a614-f4fbba7704cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:45:59:20:94:bd:27:96:57:84:38:d0:88:
73:0b:fa:60:92:1b:79:fd:e3:19:79:3e:8d:2b:d6:
d8:c8:21:0c:3c:d6:98:9b:d2:9e:11:43:41:36:a3:
22:87:e8:2e:e7:50:af:1f:bf:0a:61:2c:e7:f1:b5:
4b:f8:96:f9:8a:d8:d3:58:17:2a:85:0f:a4:e5:34:
db:30:fb:41:70:13:bd:f1:84:77:f2:23:02:2f:12:
1d:95:3e:28:02:d6:60:1d:ca:bd:75:91:bd:81:d6:
d7:02:9b:af:d6:48:f3:8c:fa:19:64:c3:9b:e5:c2:
1f:7f:0f:1a:68:8f:00:e0:5c:d8:60:87:f0:80:50:
fc:82:fe:bb:f0:1d:f9:b8:17:8d:ec:55:76:5b:ca:
dc:47:5a:b9:79:1f:fc:94:e9:e8:f3:c9:e3:14:f3:
15:a8:1a:8c:02:27:92:da:33:0b:2d:c4:f2:73:61:
ef:8f:c6:dd:97:58:2f:45:b1:ad:5a:32:70:5d:2c:
da:36:0c:0b:7d:2d:f8:ba:50:4c:bd:40:35:2e:59:
d8:a7:36:c4:cf:c3:43:1f:d8:a3:bc:a5:34:41:cb:
99:8e:46:b1:cc:9a:cf:bf:0d:ca:01:36:e1:8f:76:
ad:bc:00:99:91:67:5a:92:5b:9c:b6:88:13:76:7c:
f8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:83:7D:72:C2:BF:47:F4:5E:13:32:78:52:02:DE:4F:E8:34:D5:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed954ef7-9da5-3ddf-b9e8-1d5c0e6f7e69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
57.248.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:c7:5e:39:21:7b:ea:cc:67:9b:23:cc:39:41:66:2f:9b:41:
25:f3:48:6f:80:dd:1a:5a:17:a3:50:f4:b6:9e:b1:27:c4:5a:
15:3e:39:d8:1c:52:29:0c:8e:b1:a6:42:9c:de:6c:14:f4:55:
21:e2:23:93:29:26:30:7c:b4:9a:54:6e:46:3b:d4:be:1e:6c:
2b:23:2e:a7:42:37:9a:d3:8b:7a:4d:ad:98:43:fd:19:c0:cc:
23:7c:10:95:13:89:88:5b:83:e8:20:90:a9:91:8d:7f:8d:76:
f0:02:54:8c:3e:91:25:83:e7:e4:82:9a:71:a9:95:d8:7a:7f:
bb:fd:04:c5:bb:aa:49:a3:57:6c:65:4a:d4:43:bf:be:a9:13:
12:d6:db:5d:ff:d6:04:9c:41:65:39:b8:2a:d6:f5:3f:5f:39:
f5:5e:16:7b:3a:a0:e2:c0:95:d7:f2:7d:6c:bb:43:09:8f:a1:
46:98:a1:e3:4b:b3:6b:27:2f:f2:7b:d9:50:59:61:2a:24:78:
19:01:c7:62:6a:96:f3:83:ad:01:cc:1b:02:df:33:d8:f1:50:
28:f2:c6:b0:e6:d6:00:08:24:d6:f8:40:f9:ec:fc:92:dc:c6:
3f:23:10:ee:3c:e4:77:c8:3e:d1:9b:52:f5:5e:21:86:ce:8f:
0f:1f:64:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:42 2025 by rpki-client