Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/208bed6a-7922-3490-a750-be2337b6eb00.roa
File: 208bed6a-7922-3490-a750-be2337b6eb00.roa (raw, json)
Hash identifier: nfv+X+ptxe02WPfXZVIqT773WPtJOJbYwuvQViOOS1w=
Subject key identifier: 92:1E:53:34:CF:50:71:36:17:FE:68:24:6E:0E:6A:9C:C8:B7:2E:C7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F839C08E948616C1660BABF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/208bed6a-7922-3490-a750-be2337b6eb00.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:83:9c:08:e9:48:61:6c:16:60:ba:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=28504a8e-a376-4ba1-8d34-35ad557df981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:47:95:d5:e2:45:33:24:3f:c4:3c:3d:6b:
dc:73:91:00:85:a5:81:2c:45:66:d6:f0:37:6e:f2:
15:f1:a9:ca:19:de:9a:e8:de:c9:a5:7c:69:b0:dd:
84:ea:0d:94:98:c7:98:e7:50:2b:cb:3a:d6:7c:cf:
49:4d:49:ab:27:5f:0b:c2:9b:38:7e:6f:e2:2c:b4:
10:4a:b9:67:f7:7a:ee:15:a8:81:56:dc:39:73:92:
0e:6f:06:ea:0e:09:27:48:1f:3a:71:46:0d:74:b9:
1c:6b:e3:4d:86:e6:68:fc:2a:9e:55:2a:1d:6c:29:
9d:3d:a4:2a:d7:f2:90:28:80:14:e4:82:42:31:7a:
fd:2a:f2:e5:32:40:ca:c7:b2:22:0b:5d:df:f1:c4:
a9:be:a8:0f:1c:09:a7:51:3b:b8:bf:37:03:23:28:
3e:cd:38:b5:13:40:69:ea:2a:83:c4:36:d6:2d:da:
a2:f1:dd:63:e8:d9:b9:56:95:fd:50:b3:7c:36:99:
ab:a2:73:20:cf:e0:27:c8:e7:6e:07:61:51:50:2d:
0d:36:e7:72:65:95:ac:53:08:82:9a:cb:39:28:84:
9b:a6:94:f3:5c:be:38:34:fd:3e:5f:86:86:a3:74:
59:5b:b5:09:4a:c7:a0:b5:20:64:a7:15:1c:25:46:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1E:53:34:CF:50:71:36:17:FE:68:24:6E:0E:6A:9C:C8:B7:2E:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/208bed6a-7922-3490-a750-be2337b6eb00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:da:ed:b9:0a:3e:f8:ce:d4:fc:ba:10:ea:ef:58:07:5b:09:
ce:36:5f:d3:24:4c:31:67:c3:fa:f5:4f:2a:0d:44:c5:0a:75:
e6:fc:62:74:69:27:f5:12:9c:e9:2b:05:30:58:34:e3:f4:e9:
9e:51:ee:c2:4d:69:33:e4:0d:72:37:f8:1e:3f:ca:8c:a4:c4:
5e:53:68:dc:78:bb:ea:37:26:d0:48:28:de:22:19:a6:c4:3c:
36:cb:1e:7f:4a:07:46:3c:66:ea:54:53:5d:4e:84:9e:c5:13:
aa:14:0a:43:66:40:0c:c6:37:b6:b2:bc:b3:f5:92:18:4f:39:
36:de:fc:03:94:21:c3:8e:23:63:41:36:7c:67:b7:3a:ef:a4:
63:4a:98:7e:7a:0c:13:25:05:60:33:4b:bc:4b:f1:1d:12:66:
78:22:93:b8:0f:c6:7f:cc:73:13:c8:76:04:43:7f:2d:7e:34:
d2:01:92:ee:d9:86:c3:3d:88:62:3a:46:1c:d9:0a:7e:8a:16:
30:57:08:40:59:8f:93:61:7a:c2:2a:a5:ff:13:7b:dc:fd:07:
13:5e:58:49:55:d0:85:cf:3f:81:2f:41:d3:92:0c:9e:ca:40:
b1:8c:b5:b9:99:dd:49:7e:60:ce:c0:24:10:f9:1a:86:a6:db:
a5:45:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:39 2025 by rpki-client