Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c624d8b-ea65-356d-93a9-9a02c20e68f4.roa
File: 1c624d8b-ea65-356d-93a9-9a02c20e68f4.roa (raw, json)
Hash identifier: H54ckZtoPynoJ1V+aZlm+Q3tExGaz1fOSp/pe0kHvCA=
Subject key identifier: 9D:DA:6F:0C:70:3F:D6:86:9C:50:EB:B0:0C:86:87:E1:A4:1F:5B:EA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C633811B69F31702211D9400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c624d8b-ea65-356d-93a9-9a02c20e68f4.roa
Signing time: Wed 01 Feb 2023 12:00:00 +0000
ROA not before: Wed 01 Feb 2023 12:00:00 +0000
ROA not after: Thu 09 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 134.251.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c6:33:81:1b:69:f3:17:02:21:1d:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 12:00:00 2023 GMT
Not After : Mar 9 05:00:00 2023 GMT
Subject: CN=929dd785-caec-42b3-8a1c-70d1123fcde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:26:b7:ff:94:73:2a:54:7a:82:2a:fc:bd:9c:
1d:ac:2c:6c:56:e2:a7:b9:ef:2d:dd:7f:27:19:f8:
a7:4d:3a:c5:cf:d2:f8:43:78:31:4d:45:71:38:a1:
d7:51:ac:64:7c:7f:53:a1:20:95:11:a0:f7:f8:59:
9d:d3:5b:35:e3:29:27:d5:47:9b:f1:57:af:13:05:
92:95:66:e1:59:b5:e2:02:2c:ed:84:4e:da:84:73:
00:ea:f3:d9:b4:37:5e:5d:3b:95:14:7e:b3:30:f7:
d3:9a:07:e3:61:f8:12:f7:66:4e:5f:4d:3f:b3:53:
e2:39:88:f0:57:55:3f:59:6f:6c:c0:0b:9f:08:c1:
d3:4b:1a:53:0b:05:09:59:4a:84:e0:25:e9:d8:69:
c5:b9:fd:77:23:da:7d:f9:68:34:48:d5:a6:bb:a0:
00:29:5f:08:f1:ba:ef:9d:5f:cb:1e:7f:3d:db:db:
1c:c2:ed:30:d2:4d:59:a8:95:00:dc:30:63:bf:b8:
a6:f6:13:54:f1:1e:8e:b2:14:20:60:44:7b:3f:d0:
08:aa:7c:54:be:ff:8d:68:4a:a4:dd:a5:36:b5:09:
a5:40:b7:b7:8e:9c:1c:75:c6:12:ca:44:f6:a9:d0:
0b:35:a6:74:2c:38:6f:13:09:c4:6f:d3:89:66:f3:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DA:6F:0C:70:3F:D6:86:9C:50:EB:B0:0C:86:87:E1:A4:1F:5B:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c624d8b-ea65-356d-93a9-9a02c20e68f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
134.251.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:3c:c1:f5:11:df:b1:e9:6a:b3:3c:53:2d:9f:cf:4e:72:94:
5b:96:99:d2:bd:c7:99:e0:10:46:e5:04:72:5d:f8:98:f8:53:
3e:91:34:31:01:7e:fb:85:81:1f:1a:18:d1:4f:76:32:08:ed:
48:69:2e:39:22:cb:aa:dc:98:a4:44:d5:ef:fc:d8:f0:76:0c:
66:60:2e:2b:ad:7e:62:34:b1:53:ce:08:ac:fc:82:d5:04:91:
46:dc:8b:7a:36:31:d8:a0:26:dc:9b:57:bb:2d:ec:6e:25:db:
0f:7b:c8:5d:88:18:93:aa:17:68:d2:c8:66:15:02:7e:e3:0e:
99:1a:c2:7c:3f:9b:78:9b:7e:34:de:b5:25:f4:64:d3:46:97:
dd:ee:9f:6d:74:d0:b1:86:55:2b:d6:eb:63:7c:e4:1d:69:bb:
fe:89:78:2c:d5:dc:9d:1e:24:a4:64:10:2b:57:bb:71:f2:11:
16:39:04:aa:ae:5b:81:a8:9a:ea:d0:cd:69:e3:0a:32:02:94:
9a:d8:80:a4:b1:ee:d0:4f:49:da:1a:be:58:55:56:f8:0e:27:
ec:8e:eb:24:18:e5:7c:40:00:b2:01:d9:7b:5c:0b:a3:00:1f:
6f:c2:12:e2:7c:0e:22:ac:1e:20:f2:50:bd:bb:ac:51:cf:d0:
d5:21:5a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:48 2025 by rpki-client