Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a3f499e-783e-3d46-b33d-0be0db0ca928.roa
File: 0a3f499e-783e-3d46-b33d-0be0db0ca928.roa (raw, json)
Hash identifier: aD4zd2HIkxEFfo5HRmg5NwWNTDccjmSldc+ubx1WzGo=
Subject key identifier: FD:F5:A3:5F:8B:CB:88:8F:DD:03:B9:47:4A:D9:13:CF:5F:E8:4F:AE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF955FF6E20367FCA0D6C5300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a3f499e-783e-3d46-b33d-0be0db0ca928.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 64.187.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f9:55:ff:6e:20:36:7f:ca:0d:6c:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=8b73d0a1-14e2-4475-92f6-c5b3d1edae77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:49:1d:d8:84:9f:ac:17:e7:30:a2:4c:ca:
f7:e1:13:75:63:04:37:2b:43:b5:57:4e:98:05:aa:
f4:c8:11:0c:49:e9:77:85:a6:7d:ea:75:59:f0:52:
05:1e:bf:fe:3e:47:b1:a4:31:96:1e:4f:14:f1:41:
a3:01:74:d6:fe:4d:c2:79:1e:01:8e:ae:b9:a6:8d:
fc:8d:3d:80:18:9f:76:49:87:e4:b0:7d:21:6d:ed:
db:c9:f4:ab:3b:78:5a:0e:e8:1c:8b:e2:39:d1:8a:
d5:61:04:5e:e8:0b:03:4b:60:89:35:8b:61:17:cb:
a5:2a:20:91:af:21:fd:5b:12:fc:c1:f8:3a:68:74:
67:a5:ff:f2:64:67:73:2f:f1:58:07:08:42:58:79:
a2:e3:74:7e:88:cd:a7:61:63:11:3a:fa:2a:bc:ed:
a3:1c:b9:14:84:d4:db:a9:4b:77:10:9f:ef:22:98:
5d:94:e1:b1:b2:df:08:4b:81:11:5e:7e:65:15:dc:
ec:1d:84:42:ee:50:13:a7:c0:0d:3c:bf:2e:07:52:
9d:aa:e4:3c:03:08:06:f2:9e:23:67:f3:da:02:28:
ca:7f:c4:99:b9:8d:dc:5e:55:c8:ce:2b:94:89:4d:
e2:88:72:32:aa:d8:8e:43:33:32:67:5d:50:3b:aa:
f2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F5:A3:5F:8B:CB:88:8F:DD:03:B9:47:4A:D9:13:CF:5F:E8:4F:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a3f499e-783e-3d46-b33d-0be0db0ca928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.187.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:d4:5b:be:8a:c3:a3:e4:cb:b9:28:1d:91:64:cd:73:34:61:
c1:75:3d:46:0a:64:f5:cf:d7:d3:cc:90:eb:ba:3c:ca:a4:38:
e2:71:10:1a:5f:a3:38:96:dd:4f:f9:45:29:a2:7d:ec:81:87:
ab:8a:6b:8c:da:59:1c:91:73:42:bc:5a:3e:ed:7f:f0:0f:93:
ff:5c:3b:d2:f4:fd:29:74:68:5d:e1:2d:70:e2:23:6f:21:6c:
5e:74:e5:0b:4f:82:0d:54:43:e6:d6:55:1d:e1:42:de:f0:0b:
19:cb:bb:4c:a0:e7:95:11:f4:42:83:8d:e6:12:29:ea:61:03:
87:ae:19:cd:72:1a:3f:da:2c:a0:b6:a8:92:c0:25:0c:a7:20:
d5:74:44:33:07:e4:29:cc:79:e7:3f:30:8e:44:34:a1:ec:78:
ef:f9:8a:cc:53:3b:51:d6:1c:6a:32:74:ef:11:30:a9:c1:98:
c2:21:a5:fb:98:80:c3:4a:50:8c:15:9c:30:46:c7:45:1b:17:
0e:ca:db:9f:5c:1e:65:64:75:06:18:b3:ce:86:fd:ce:1a:d1:
54:d3:ba:5a:33:b7:3a:cc:6e:9c:40:9f:6a:f8:18:81:67:14:
a0:51:c1:8e:72:51:5e:12:30:ca:33:f4:e1:1d:27:a8:a3:7c:
35:e9:b5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:58:27 2025 by rpki-client