Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3121beed-f04c-3a27-bffe-ddfe2247e05d.roa
File: 3121beed-f04c-3a27-bffe-ddfe2247e05d.roa (raw, json)
Hash identifier: w8Sjtlk3ZMDbwHfvUwKt4IqrbtSqoEm8/kctEv7vzD4=
Subject key identifier: B1:86:56:FD:39:96:17:3C:FC:91:53:B5:18:CC:E2:B5:70:01:55:3B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0BD61C474DE18A4D059F0980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3121beed-f04c-3a27-bffe-ddfe2247e05d.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 70.132.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:d6:1c:47:4d:e1:8a:4d:05:9f:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=0ace38a5-9b12-4b21-81cf-b9a538a9d74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5e:0e:69:25:e7:96:65:a6:7c:e3:59:ee:1f:
5a:27:c9:08:21:da:0e:75:2f:1f:c5:96:12:95:0f:
eb:06:7a:33:33:40:8c:14:65:55:cf:28:10:08:75:
6f:3d:f5:3d:b2:9d:24:c3:cf:eb:28:38:a5:ec:aa:
34:3e:8a:21:8d:07:2e:cd:81:13:76:44:18:1f:97:
02:4e:d1:b3:52:3f:73:1e:4a:39:10:5b:0c:5b:89:
65:58:c1:d2:0f:60:d8:fd:14:3e:f0:ca:ef:29:55:
06:1f:69:a6:ee:99:1f:b7:09:f2:7a:5c:af:6d:ef:
c5:38:97:9c:23:47:54:8a:f4:25:55:f9:f2:5e:13:
f9:3e:fa:4a:d2:ed:6d:79:3d:b6:d0:07:44:35:11:
d9:d9:e5:62:0e:96:f1:0f:f2:21:5c:50:d1:1d:18:
6d:94:bb:ab:98:6f:ac:32:36:63:a0:e8:f1:b1:7a:
82:d5:d6:db:d5:9b:dc:51:45:0e:71:08:41:1d:8e:
fb:c4:b3:3b:87:a7:f1:27:cc:63:72:bf:33:08:b7:
89:18:68:3d:82:0a:8f:0d:2c:aa:9d:d5:b1:e5:79:
3a:0e:11:ba:9f:99:bc:fd:f9:70:ba:ef:38:f9:80:
ae:79:f3:95:2d:3a:5e:aa:ea:a7:5f:68:26:4f:fe:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:86:56:FD:39:96:17:3C:FC:91:53:B5:18:CC:E2:B5:70:01:55:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3121beed-f04c-3a27-bffe-ddfe2247e05d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
70.132.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:08:c1:57:c4:a4:96:c1:c1:80:03:fb:ca:f2:58:e9:28:f5:
89:01:b5:3e:66:b1:f9:16:a1:29:7f:a2:35:7f:bd:3b:f4:c4:
14:e2:89:dd:df:33:ff:1e:be:77:d4:ed:19:10:a3:62:33:bf:
e2:19:e9:78:cd:98:45:41:df:2f:5f:05:20:9a:f8:16:87:b9:
fa:e6:21:29:22:4e:b7:ba:c2:e5:fd:b7:6a:fa:cf:18:7c:f5:
05:16:75:88:c2:4d:b6:04:2e:9f:61:bc:bc:0b:cc:a8:8c:97:
37:aa:43:5d:01:bd:dd:1c:f1:6a:7f:9e:bc:88:2f:d0:c0:2f:
ac:9e:d3:01:a9:47:ae:8c:ca:0f:53:34:f9:2c:20:af:d8:93:
67:67:65:94:7b:35:b2:00:75:0f:a6:8d:34:9f:b7:d8:09:7a:
b5:b6:6f:35:07:0d:9b:f9:ed:d0:2f:7c:92:f6:d8:02:2f:cc:
6e:43:be:81:5b:d7:7d:56:21:e3:f9:0a:56:15:38:fd:a7:25:
22:0f:e7:f6:a1:08:6d:ef:92:ea:4f:ec:1e:42:e4:99:4f:69:
db:b6:84:00:0d:a1:f7:67:00:1b:96:e1:9e:50:45:65:fb:06:
b9:e7:5f:b1:11:58:4a:2b:0d:22:4d:84:ca:56:8b:22:1d:dc:
4d:ba:8e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:37:21 2025 by rpki-client