Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a6be88e-d890-38eb-8075-da544e80ca6e.roa
File: 1a6be88e-d890-38eb-8075-da544e80ca6e.roa (raw, json)
Hash identifier: s+8Vnl/EUYZxYTAe3OoiT+I9Ns7Qe3FphrlE8w1cA6E=
Subject key identifier: AA:E6:D2:F9:0C:44:A7:F1:A7:57:3A:FE:A0:9D:66:0D:C3:2F:64:AC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F7CC6A13790D0D697C9F026C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a6be88e-d890-38eb-8075-da544e80ca6e.roa
Signing time: Thu 06 Oct 2022 12:00:00 +0000
ROA not before: Thu 06 Oct 2022 12:00:00 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7c:c6:a1:37:90:d0:d6:97:c9:f0:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 6 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=432a3c0b-d615-4467-8b38-6c17b8d02d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:71:c4:f7:a2:ab:75:a7:92:df:f5:29:55:
3c:2a:c9:8f:da:1e:3f:a7:36:6b:2a:59:18:ef:4b:
db:de:e3:c1:8a:94:c0:db:b8:54:ac:5e:1f:fc:70:
3e:7f:d6:4c:78:2c:ac:18:4d:d7:49:e5:61:77:41:
06:1e:58:a5:d0:e4:cf:ab:4c:f0:fe:4e:55:76:48:
18:1b:60:ae:7c:e8:f3:5b:4d:7a:ca:0a:2b:b7:64:
4b:7a:85:8b:05:9e:28:92:04:59:52:13:54:58:2c:
ca:cb:d1:9c:69:71:74:ee:f8:48:0d:6f:53:66:88:
3f:fa:96:12:4f:27:18:7d:e3:fe:38:ef:51:4e:17:
3d:db:2c:e5:86:28:53:bc:9b:68:68:46:4f:2f:6f:
47:54:cc:35:0e:b3:bb:3a:43:c2:1b:b4:9b:7b:21:
f2:b5:3f:1c:c5:0d:c4:9b:73:47:78:93:a8:69:95:
de:3e:31:7a:a0:e7:1c:39:79:61:74:d2:2c:dc:3a:
9d:05:03:52:a8:68:69:23:17:ec:c8:28:30:cd:bb:
98:9f:d5:4a:9a:99:16:40:32:1e:f7:72:94:91:99:
94:c3:2e:5c:0d:43:10:5e:e8:68:cf:ce:c4:b7:00:
64:41:91:24:b6:3b:90:60:53:f4:a7:3d:05:05:c2:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E6:D2:F9:0C:44:A7:F1:A7:57:3A:FE:A0:9D:66:0D:C3:2F:64:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a6be88e-d890-38eb-8075-da544e80ca6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:a3:58:22:7a:74:ba:37:ba:54:24:aa:e4:60:e6:8a:a2:9d:
e3:82:84:52:93:5a:9e:22:24:4a:c2:5b:ac:65:5b:d6:41:4b:
04:e0:76:8d:98:df:2e:b7:c5:7a:c5:12:3e:0a:14:28:b3:6e:
c1:95:97:f3:66:7e:62:67:d5:db:a6:81:2c:51:4c:d7:5c:19:
52:54:f0:8a:4e:c1:1d:dc:6e:2c:02:ea:e4:3d:7f:94:65:b9:
83:38:50:60:3f:eb:d0:90:43:5c:29:d9:ae:76:20:6c:dc:70:
e3:62:5a:e0:ac:78:b1:f2:78:1c:a6:3e:ef:b5:ca:c2:8a:b6:
07:15:7b:a2:05:9b:a6:98:1c:09:79:b3:d5:fd:a1:c4:01:53:
42:54:64:8f:f2:97:b8:0c:b7:41:af:6a:b3:e8:98:d4:b7:88:
2e:a7:e7:1f:d0:1b:c4:b6:67:d6:f3:4f:4c:98:dd:49:37:9f:
38:97:bb:25:48:3d:ba:c8:87:26:af:43:e7:1c:05:b6:c4:40:
1a:01:8f:5b:94:a8:34:30:c8:a0:02:8f:c1:e2:37:b1:ae:c9:
72:71:1b:d2:a8:2b:54:0d:6c:2e:11:ae:d1:24:ec:aa:39:76:
cd:a4:85:3b:ea:54:6c:49:08:7d:a9:78:d8:b5:3a:9b:8d:b5:
ef:56:6c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:53:18 2025 by rpki-client