Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/248f0e58-7993-39d5-8f6f-3a7d8ae60037.roa
File: 248f0e58-7993-39d5-8f6f-3a7d8ae60037.roa (raw, json)
Hash identifier: umxW3SpvE1HlhWof1XtRhq/kTnexqgVcvNk3JFiri1A=
Subject key identifier: 8D:58:89:AD:1F:37:96:22:EB:DD:75:1C:36:14:94:93:D6:13:C0:E8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6C431AC28F6DD2ADBC804700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/248f0e58-7993-39d5-8f6f-3a7d8ae60037.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 100.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6c:43:1a:c2:8f:6d:d2:ad:bc:80:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=e06f07ee-1806-40ac-8643-281ea071462b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:7b:d4:07:40:51:68:f4:c0:42:d7:1c:a4:
07:0c:0d:da:36:7b:a1:8c:08:09:da:17:9f:c1:7f:
cf:12:82:5c:42:31:c4:ae:66:83:20:e2:71:f9:bc:
8b:83:86:ee:40:60:4d:ed:4b:7d:35:85:27:0a:92:
62:fb:c5:4f:f4:09:6c:4a:3d:09:7f:7d:7c:e8:61:
1e:c0:5b:37:7a:1a:41:04:3a:02:c9:21:c5:5e:1e:
a7:b8:5b:12:e8:92:0c:61:eb:02:ab:10:a0:81:d0:
b4:d7:95:81:7f:dd:27:b6:dd:47:bb:20:e0:e4:28:
5e:e9:a5:cc:ce:1f:f3:1d:f9:ed:06:26:17:53:b1:
b4:eb:bb:9e:a1:0a:37:a2:49:8e:ea:48:52:e6:7c:
67:09:4c:16:9e:9c:a7:62:ce:12:4b:7e:b6:50:4c:
45:34:2d:87:f3:78:fe:dd:cf:49:c5:46:a1:03:fc:
96:75:aa:db:58:e8:0d:f4:7a:0d:b4:fc:ee:32:b5:
af:01:38:aa:76:42:19:3a:85:f7:63:3a:f3:d0:b0:
9e:49:19:84:92:d8:c3:c8:41:d2:d1:a7:10:a0:d6:
4a:b0:ef:59:1c:8c:66:52:33:e4:54:ab:69:8e:0e:
00:8a:ec:64:33:77:9f:62:1f:b8:92:dd:db:ee:8c:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:58:89:AD:1F:37:96:22:EB:DD:75:1C:36:14:94:93:D6:13:C0:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/248f0e58-7993-39d5-8f6f-3a7d8ae60037.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.24.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:da:ab:cf:1a:30:78:9f:aa:c5:ac:4f:0f:92:81:90:d6:20:
0f:48:e8:5a:21:55:4a:f2:07:3b:2f:3c:30:61:a2:86:0a:6b:
17:a2:0a:46:26:df:da:1e:b0:98:30:34:08:67:3d:71:d7:fa:
2e:bf:7e:b6:ae:d6:4f:7b:98:52:c8:53:88:ec:d0:c5:aa:55:
a7:e1:c2:08:f6:2a:29:bc:f4:48:f6:24:cf:e3:61:32:4c:07:
e0:b3:69:a0:75:8f:0a:d9:f3:32:5d:5c:c4:07:73:17:c3:e8:
67:00:09:ec:26:76:68:a4:92:4f:5a:f5:44:cb:aa:10:88:90:
cc:9a:0f:01:7a:cd:74:cf:ab:fb:3a:c4:24:c5:59:65:61:e0:
54:61:22:e6:7d:19:22:39:1a:94:93:d4:3e:44:99:38:aa:f5:
74:55:47:68:20:fd:12:a7:3d:ac:94:bf:e9:39:7f:d1:3c:ea:
b8:5e:7e:cf:66:e9:2c:43:df:6c:a3:29:27:2a:c6:82:81:02:
52:90:d5:0a:f4:bc:9e:80:b3:ce:83:5b:8d:1d:51:2b:bb:2e:
e6:43:46:51:06:82:66:00:28:97:52:52:b9:38:b7:b3:e0:f1:
d0:fe:bd:cc:e2:6f:90:d9:5e:8f:48:0e:f6:c5:90:7f:b4:bc:
7b:96:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:59 2025 by rpki-client