Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/09e48a43-518d-31c6-8104-596fbc3138a1.roa
File: 09e48a43-518d-31c6-8104-596fbc3138a1.roa (raw, json)
Hash identifier: J0N56OcADctYx0D+kEpnq/GMSKKUGVKhCjdCquFfUAI=
Subject key identifier: 06:EC:76:E4:44:DA:5F:ED:41:B4:A3:39:1F:A2:9E:B5:F5:7E:3D:76
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D32EB9AE3386C6C6E0074CAB0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/09e48a43-518d-31c6-8104-596fbc3138a1.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 71.145.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:eb:9a:e3:38:6c:6c:6e:00:74:ca:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=95c86723-1362-4296-8037-9aa3e3819846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:78:c9:e2:cc:6f:30:20:28:9f:34:4a:27:
8b:b8:87:e2:d2:74:f8:e9:50:2f:fd:1a:b5:c3:86:
c9:05:27:37:1f:b6:af:18:f6:fe:50:4f:1b:37:df:
3f:9e:29:91:36:5c:40:81:55:08:5a:be:a0:4d:97:
04:5f:4a:65:c1:82:3e:b0:07:9c:ae:bc:b0:b5:50:
98:0c:f2:32:0e:58:ea:30:9f:7c:0b:15:ba:a3:32:
64:75:d8:8d:fe:fe:e6:3f:b2:ea:cf:1e:16:35:e4:
21:55:8a:60:59:fc:94:92:80:36:00:5b:25:a0:6a:
4a:2f:bb:57:0a:65:47:63:2a:57:8d:1a:1e:db:78:
bf:14:eb:f5:e3:d3:f2:d8:af:8a:8e:90:e3:15:1f:
34:30:35:2f:f4:b7:9a:52:32:58:e7:36:ab:69:da:
79:6a:6c:4f:4d:3c:3a:a0:ba:b9:28:71:95:8a:f7:
8d:6c:c3:b1:1a:50:22:00:57:7a:78:8d:49:41:ca:
43:62:83:ae:7d:c1:94:03:19:de:32:34:02:61:0e:
99:d0:f9:2f:7c:02:be:eb:17:c2:0a:e9:e6:bf:7d:
0f:66:29:e2:e0:9b:bd:fe:1a:d2:ad:f3:db:50:c1:
68:50:db:32:5f:b1:0c:39:56:f2:74:c4:9b:a2:ff:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EC:76:E4:44:DA:5F:ED:41:B4:A3:39:1F:A2:9E:B5:F5:7E:3D:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/09e48a43-518d-31c6-8104-596fbc3138a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.145.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:90:1b:51:74:41:34:7d:e1:55:c5:40:c5:6a:1d:8a:7b:b0:
eb:a6:2e:d2:25:fc:fc:d2:f9:35:f2:be:95:7a:35:59:25:9d:
f7:79:e6:65:f6:0a:ca:87:16:3e:e4:b5:3f:da:d9:a4:53:e4:
03:0a:7f:1c:54:5f:72:85:1c:b1:eb:d1:66:dd:1e:da:3e:43:
f0:90:8c:18:89:be:50:67:08:9c:42:c4:f1:d1:35:a0:6e:16:
1a:97:76:d0:04:3c:27:c5:35:06:c4:00:28:33:df:a2:24:9c:
69:57:08:d6:48:76:71:57:c1:9d:ab:d9:2a:dc:d7:e3:da:d4:
16:1f:c7:d2:16:0a:45:ba:58:0b:1d:a5:b5:a4:91:4a:17:fb:
03:a1:8d:f7:65:da:4d:65:7d:de:27:72:63:21:71:db:b7:fd:
fb:43:37:87:9b:d6:7e:f6:a6:5e:89:e0:f5:14:10:10:74:cb:
b6:6a:3f:71:68:d7:5d:71:af:5c:75:63:0e:12:92:e5:b0:5e:
bf:d5:4a:94:53:22:ab:cd:a2:47:bb:a3:70:fb:09:5c:9e:29:
1c:44:67:2e:64:57:12:34:04:1a:4a:73:2d:95:ee:9c:d8:1e:
6e:67:10:a8:d9:a6:3a:55:cb:ca:b1:f7:ee:fe:39:a7:51:d3:
57:2d:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:18:30 2025 by rpki-client