Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/311775e9-ae61-3f4e-be46-4b43ccd28abf.roa
File: 311775e9-ae61-3f4e-be46-4b43ccd28abf.roa (raw, json)
Hash identifier: mqivwmZl2ta3DRnJ/wKfN1rKQZSN+ebvYVnkS5GezLc=
Subject key identifier: FA:9F:61:D5:C3:01:84:21:6D:0D:57:23:A2:F6:E4:26:63:57:A5:5C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6EAD17A54C3F5ECF3C54AA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/311775e9-ae61-3f4e-be46-4b43ccd28abf.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 64.187.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6e:ad:17:a5:4c:3f:5e:cf:3c:54:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=55a97188-bdb3-42ac-8270-40fea8a29ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:04:80:92:96:e0:86:b1:f7:4a:43:c7:b1:42:
4c:64:44:5a:70:d5:dd:7f:f1:26:88:4a:37:c5:90:
41:d7:92:1b:1e:a9:ac:df:91:97:3b:73:1e:c0:be:
ca:1e:cd:c6:1c:bf:0b:8b:1e:86:9f:f8:d4:28:3b:
b1:be:12:b1:90:29:e0:06:20:0a:35:d2:e8:c6:c8:
2a:c5:d4:03:74:f9:b3:d4:fb:8e:55:27:c5:3f:a5:
54:ad:b1:a0:83:16:4d:24:c6:a6:9b:a4:64:61:81:
16:9f:8a:51:f9:e2:11:b2:c4:97:7d:a7:e7:61:f7:
f7:16:ac:6b:32:fb:0c:bb:b8:4c:d0:2d:6d:a6:0c:
3f:8b:78:cd:af:ac:44:a2:6d:e1:30:68:17:aa:c6:
82:89:49:0c:7c:fd:9d:b5:a8:01:ea:13:92:a6:ef:
91:b5:a5:e2:4d:e9:fc:02:d5:88:59:08:09:17:8b:
97:b4:5d:54:76:72:f3:fb:d9:23:1e:38:45:e6:5d:
0b:19:09:3b:be:4f:ef:a8:61:b9:94:64:d6:10:35:
97:ff:39:22:d0:bf:d7:ba:65:ab:af:d5:20:72:be:
bb:49:3b:a6:89:5f:0b:db:b8:f7:b0:9a:20:72:59:
53:fd:f1:06:76:36:c5:cc:fc:b7:5d:5b:01:12:86:
8a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9F:61:D5:C3:01:84:21:6D:0D:57:23:A2:F6:E4:26:63:57:A5:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/311775e9-ae61-3f4e-be46-4b43ccd28abf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.187.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:4f:c0:75:18:6d:6b:b9:3e:79:7e:0b:38:09:46:5f:14:37:
3f:19:ad:f5:0e:55:30:e6:d0:f6:70:e2:9d:cf:7b:f8:f3:34:
77:7a:fa:71:1d:59:0f:c1:5a:6d:4b:11:45:44:2b:2c:88:63:
45:1e:8b:1c:e9:a5:88:95:45:e7:68:65:6e:40:aa:0c:00:10:
ba:a7:41:25:1f:05:f0:4f:c2:f6:fd:9a:ab:a4:6f:e1:05:22:
69:71:98:a5:89:c0:27:33:0a:27:9d:59:4b:d8:c4:ed:ec:aa:
54:2b:83:56:29:69:66:38:82:11:13:8a:ff:86:1f:17:84:76:
d2:6b:12:42:5e:57:f2:f2:a2:8f:34:00:b1:39:65:14:50:33:
53:d2:4d:a3:07:f3:8c:ae:b5:38:08:9b:23:24:10:59:f0:33:
3d:77:10:47:cb:00:9a:04:98:65:71:01:6d:a6:b6:44:6f:a9:
33:c3:de:1e:e3:f8:8c:5f:00:1a:7a:f3:83:c2:9a:88:83:18:
c5:4e:5f:b4:12:3d:4c:4f:eb:9e:a2:e6:cf:88:b7:68:e3:48:
df:09:ed:98:93:08:be:c7:a2:e1:6d:86:1b:cc:f1:1d:ea:f2:
23:09:a7:99:c1:f4:0d:a2:a8:32:5c:22:9e:b0:26:39:dd:90:
d9:57:ce:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:11 2025 by rpki-client