Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23b495e6-6628-3be0-b092-d4c771e873e6.roa
File: 23b495e6-6628-3be0-b092-d4c771e873e6.roa (raw, json)
Hash identifier: SlfO8pxvfV68jemoWsqlv7kuAJUoEyqym7BSIMmYI1Y=
Subject key identifier: C8:1D:AC:70:8F:1B:43:5C:CC:91:21:0A:0C:F3:21:09:BB:16:14:26
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D331F338AEEAA34EE0AC9DDC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23b495e6-6628-3be0-b092-d4c771e873e6.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 99.141.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:1f:33:8a:ee:aa:34:ee:0a:c9:dd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=5891c082-2d9c-482e-a50e-d4ac2bd077f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:22:30:22:18:e2:63:cb:67:89:65:cc:b4:
b6:29:d3:fa:84:5a:e0:9b:58:23:ed:fe:f6:20:5a:
27:0a:19:d6:23:fb:10:97:52:c2:49:2e:07:e9:b5:
87:cf:49:cd:be:35:6f:fd:23:b4:fa:4f:7b:81:59:
75:be:39:bb:23:db:8c:b3:a9:23:79:b2:17:7d:22:
0b:48:a6:4e:fd:0c:40:55:85:86:20:50:3a:32:2b:
ab:f5:67:fd:c0:b6:45:57:ee:b9:ba:6b:34:90:b8:
d6:ae:c9:37:76:65:fa:12:28:d9:31:ff:09:8a:2b:
76:fc:28:ae:8d:9c:cf:b9:63:d5:a0:d2:82:1b:95:
df:0d:67:04:ab:a0:84:26:9a:ef:9f:54:c1:6e:4e:
ce:2e:68:98:1c:31:5a:37:2c:3c:9a:46:59:01:ef:
ac:dd:4d:73:41:dc:3a:57:f3:1e:f6:90:5e:09:d0:
72:77:cb:2a:56:a8:9b:36:98:fc:c2:a8:84:61:b8:
5d:5d:ac:c1:0e:63:92:39:bc:86:fa:70:59:90:aa:
bb:6b:f8:39:c4:8d:15:f4:56:08:ee:06:73:33:8a:
c4:ff:5a:31:d3:64:51:98:ef:e1:21:69:37:36:b3:
b5:53:6f:0c:15:0c:fe:f2:67:d3:33:ac:58:cf:17:
78:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1D:AC:70:8F:1B:43:5C:CC:91:21:0A:0C:F3:21:09:BB:16:14:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23b495e6-6628-3be0-b092-d4c771e873e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.141.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:6c:19:86:84:cc:27:0e:88:be:cf:ac:65:42:79:ee:54:de:
3d:6d:bf:13:a2:61:28:2b:51:e8:7e:65:cc:e9:2f:58:e8:ed:
8a:f4:d1:55:7c:66:1b:44:fc:58:78:d7:13:a4:71:b9:55:2d:
11:31:a8:e3:77:f8:37:f0:62:2e:b5:e7:f3:80:14:6d:80:1d:
bd:f7:fc:37:3a:ae:a5:0a:3c:d1:d2:d2:13:fc:fd:dc:3d:be:
16:22:17:13:57:f9:25:dc:e4:61:a4:e4:25:a5:8a:65:6c:e9:
8a:d8:5b:e8:ec:41:7e:61:63:a6:4f:29:af:f7:9c:7e:3a:f2:
93:5a:10:ab:1b:81:75:89:1b:07:30:d1:05:a3:b5:69:39:68:
44:df:d2:2c:7d:66:ca:f4:a4:bd:c4:2f:cb:d4:06:f9:b3:e4:
57:f5:fa:25:cf:34:86:d7:3e:6a:6b:d6:4f:c3:9a:1c:40:78:
a3:83:2e:b3:94:17:56:87:22:68:2b:63:8b:24:cd:5c:12:cd:
cd:f5:02:90:b8:01:0d:32:7b:ea:a7:a8:63:12:24:34:46:29:
18:df:1e:cf:45:96:4a:e5:d7:19:c5:ca:55:e6:62:a5:2f:0a:
11:98:60:ad:d7:a0:0d:df:0a:60:dd:0e:7c:3e:e4:37:fe:ce:
13:e8:f7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:28 2025 by rpki-client