Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed987c9a-5b59-3252-8bd1-8faf8f253519.roa
File: ed987c9a-5b59-3252-8bd1-8faf8f253519.roa (raw, json)
Hash identifier: 0O+Z3KQaGdShF8Tt2ZkMbqErfPhP9wEWB+k092LWZVI=
Subject key identifier: C3:BD:2C:9E:B9:8D:A9:06:E5:7E:1C:78:ED:0E:84:10:82:31:E5:69
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EA45BE4D7C77496D320E8DE50
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed987c9a-5b59-3252-8bd1-8faf8f253519.roa
Signing time: Wed 20 Jul 2022 12:00:00 +0000
ROA not before: Wed 20 Jul 2022 12:00:00 +0000
ROA not after: Thu 25 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 157.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:a4:5b:e4:d7:c7:74:96:d3:20:e8:de:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 20 12:00:00 2022 GMT
Not After : Aug 25 04:00:00 2022 GMT
Subject: CN=43d91564-1368-4d79-9a07-ec9fdec2a53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:d5:17:23:b2:f3:7d:d5:22:88:4d:69:29:
b1:a5:33:48:ce:30:9b:0b:e5:04:24:ec:78:56:dd:
1f:81:f7:51:59:a2:3c:1e:5e:11:22:78:e8:e5:ef:
af:4d:40:cc:da:93:70:38:27:c7:df:66:13:af:c7:
3d:b4:14:ab:c9:04:4f:7a:f3:c1:82:69:97:cf:11:
2d:dc:54:ad:d7:2c:07:d3:45:f1:11:c4:b1:87:1e:
f9:96:80:6f:41:13:41:ee:c5:b7:14:3f:78:6d:bf:
74:a2:f5:0c:0f:70:63:a9:9a:5f:d8:6b:c2:56:91:
bc:47:96:d7:e4:68:ea:eb:fa:01:85:00:e1:13:89:
51:d9:70:2b:d5:6f:84:6e:44:8d:cb:a7:b8:e6:e0:
ea:aa:9e:5f:58:5b:98:08:d1:49:49:59:63:60:2a:
49:0b:bf:7b:38:72:ec:5f:66:ba:33:a5:7c:01:66:
e5:ac:be:f2:c8:d1:3c:10:67:01:57:26:38:c2:f3:
b9:5f:08:41:87:91:a8:8c:b7:9a:6f:3c:a3:75:35:
23:b4:82:b4:bd:08:e6:aa:a0:21:7b:51:ab:36:b0:
c4:b5:fe:61:c4:6e:8d:b4:bc:72:c2:ce:38:f8:2d:
81:3c:15:f5:1e:7e:42:28:0a:be:dd:0e:94:a0:a6:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BD:2C:9E:B9:8D:A9:06:E5:7E:1C:78:ED:0E:84:10:82:31:E5:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed987c9a-5b59-3252-8bd1-8faf8f253519.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:7c:13:31:e6:8b:3b:5e:8e:3a:c4:16:4a:88:f7:3e:24:53:
20:ea:17:85:54:34:8b:91:ed:ce:ab:e4:ee:60:62:1b:98:86:
cb:b0:ee:e4:cf:2d:c4:fe:7e:8e:04:54:57:c1:43:c7:bc:1d:
eb:91:f9:0c:e1:7b:79:14:96:b6:bb:7b:14:0b:c6:a5:f1:a6:
08:31:96:cd:16:e6:8e:ca:0c:be:16:47:82:38:3c:3b:79:47:
88:bc:ee:14:40:77:06:f9:70:1f:5d:4d:57:6a:33:05:49:d1:
5b:f9:8b:ce:52:c7:d7:45:8f:05:96:ef:ce:3c:b2:bf:57:f5:
1c:cf:a8:61:29:92:12:ba:7e:bd:88:93:51:6b:1c:7d:79:05:
34:04:4e:32:be:67:49:90:24:81:99:43:05:83:2f:e4:50:13:
db:a1:e1:86:09:c3:84:36:a7:62:2d:b6:1b:e8:2c:60:f3:39:
37:e0:20:b7:39:17:91:87:eb:df:8e:a7:eb:a1:f6:c6:08:d4:
93:c8:bb:a6:84:57:67:be:84:d9:d3:bf:29:5e:89:9f:45:4b:
5e:c0:df:2b:bd:94:3b:df:71:09:ee:8f:7b:7e:5a:c6:56:e7:
ed:75:1e:aa:b0:2e:02:fa:30:e7:a2:36:b7:f8:ec:4e:e5:94:
0b:ba:6d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:07 2025 by rpki-client