Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d3da455-7f6e-3ee8-a1f4-0280373661f6.roa
File: 2d3da455-7f6e-3ee8-a1f4-0280373661f6.roa (raw, json)
Hash identifier: 7N88CwpoARwbs/R1wCYIegHFOh13qLJUjTXyA24e3f8=
Subject key identifier: D7:3E:39:EF:E6:C1:BF:F0:8E:C7:91:81:20:C7:51:48:6E:58:67:6D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840392E6FD40DAACA45C96F7480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d3da455-7f6e-3ee8-a1f4-0280373661f6.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 129.30.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:39:2e:6f:d4:0d:aa:ca:45:c9:6f:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=9118f27f-3f05-46ee-b30d-19a9b85f22e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4f:ff:8c:0a:25:27:7c:27:4b:f8:0e:12:00:
b7:19:1c:ab:09:36:66:5b:a0:05:f6:b6:1f:72:0c:
e6:40:52:d1:84:3e:35:24:f8:30:86:bd:0a:4a:7f:
08:2b:8a:4f:ff:83:59:ea:13:7d:f4:4f:d9:84:10:
5a:e2:f3:ec:70:ec:98:83:72:df:70:af:d5:a9:3d:
0c:57:ad:0d:da:66:59:73:37:36:a8:c0:e6:d6:14:
05:f2:83:e0:5a:81:e0:a6:a0:a4:ef:e0:26:2f:e3:
9e:d6:16:b8:9d:fd:89:ae:67:d1:3c:ab:86:5c:f0:
a9:ed:de:ac:59:3d:81:a0:3f:4b:82:98:08:53:fb:
8e:49:59:6f:c5:18:fd:61:17:17:c9:cb:62:90:13:
2d:98:47:85:81:40:d4:55:e0:6f:2e:15:6a:1c:d9:
1e:fc:cd:02:4a:dd:14:3f:39:f4:42:d7:6b:2d:c1:
66:66:a3:ad:d4:f9:c6:ed:05:5e:61:17:dd:e6:ba:
11:b4:eb:de:54:c4:3f:b3:82:94:f0:7c:03:c7:1b:
f9:1b:f5:be:7c:ab:da:69:66:31:9a:01:d7:58:db:
53:20:2c:ea:eb:49:9f:79:da:a9:3f:e3:b6:5b:6b:
55:0c:0d:cc:f8:3a:ce:c1:0e:87:06:77:90:b9:be:
f8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3E:39:EF:E6:C1:BF:F0:8E:C7:91:81:20:C7:51:48:6E:58:67:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d3da455-7f6e-3ee8-a1f4-0280373661f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
129.30.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:7e:5c:ba:a4:f8:71:dd:a5:03:45:1c:72:3c:9b:3f:64:87:
de:d3:66:92:80:db:a6:80:2e:5f:bc:04:21:a8:6c:99:57:b5:
e1:dc:24:c7:b2:a7:d8:72:9e:d7:ab:dd:d6:87:f8:15:bf:18:
37:22:48:c5:78:b1:ae:a3:22:8c:61:a8:9b:5c:64:2f:00:3d:
d8:2f:25:f3:6f:ba:34:ad:60:a0:38:02:0d:83:39:01:59:00:
2e:58:ff:db:85:5a:a6:99:02:57:fa:b8:cc:1a:fd:4d:57:89:
5e:a5:d8:06:61:41:fb:b7:5d:99:6b:a2:58:85:50:e0:31:3c:
05:74:a1:e8:7f:87:a1:96:ac:4d:dd:ea:f4:09:6f:83:f8:7d:
fd:73:2c:1b:5d:7e:26:c3:38:07:7b:98:b8:e0:af:37:50:a4:
a6:2d:b0:7f:92:a1:4a:13:a1:42:df:2c:93:8b:38:06:0f:8e:
ea:54:37:8f:5f:8b:6e:8c:47:bf:1c:73:2c:0e:d0:cf:e5:5d:
a9:ad:dd:38:2e:85:41:e4:43:db:5c:ba:44:40:a5:bf:95:c8:
d3:33:47:6c:57:e5:08:b6:38:79:56:ac:c0:1b:f7:54:59:d2:
7a:fa:1c:25:4d:e3:89:d1:a6:45:4e:84:66:5c:cb:55:76:57:
21:33:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:34:50 2025 by rpki-client