Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31e52613-51ab-31c8-8da4-3fca239484ee.roa
File: 31e52613-51ab-31c8-8da4-3fca239484ee.roa (raw, json)
Hash identifier: Ka+glK+S3VKU0qmgR2OeYetbKPRmX7VQ1vDvlhyufJw=
Subject key identifier: 0F:E3:BD:54:7A:6C:A5:04:0F:36:45:11:A0:87:04:54:F5:DD:8D:5B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FE89059EF90EBEB77F595CF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31e52613-51ab-31c8-8da4-3fca239484ee.roa
Signing time: Sun 13 Nov 2022 12:00:00 +0000
ROA not before: Sun 13 Nov 2022 12:00:00 +0000
ROA not after: Mon 19 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 206.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:e8:90:59:ef:90:eb:eb:77:f5:95:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 13 12:00:00 2022 GMT
Not After : Dec 19 05:00:00 2022 GMT
Subject: CN=08b4dc43-4e5c-45a6-a30a-08268683b5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b2:05:cb:74:f3:33:78:d5:c0:b7:55:54:43:
b8:64:71:12:1a:84:fe:cd:f7:89:3b:17:b0:bc:5f:
e5:6d:ce:42:f1:a5:0f:aa:ba:47:85:1a:91:20:f7:
ce:ec:7a:ac:81:c9:12:14:2f:9b:5d:3a:64:3b:6c:
e1:16:7d:f3:ea:f4:e0:02:a8:da:32:5f:69:de:a8:
07:34:ea:52:cc:9e:3f:b1:32:a9:e0:ee:39:83:27:
59:ad:72:fa:be:a5:52:ac:57:11:43:8d:65:72:ab:
72:40:b9:b1:88:6f:d6:28:77:9e:8b:c2:8e:5a:68:
a8:00:1a:47:ad:b4:e5:75:d8:7f:27:5f:d2:8a:dc:
ef:dc:76:c6:10:e2:56:f2:c2:3f:19:ff:97:bf:8b:
b1:a3:4b:41:c2:ee:47:1d:3a:3e:66:cf:76:b2:36:
f4:20:a8:d1:46:8b:c9:d6:09:d0:4e:39:ca:13:96:
94:59:17:98:29:60:55:05:ef:db:f1:79:82:e2:19:
5e:c4:9e:fe:0f:65:22:f9:cd:eb:b8:ba:c2:6f:c5:
61:ad:cc:e3:8d:f6:2a:68:b4:e0:c0:5d:b7:d4:c6:
31:d7:c5:fc:8f:25:77:ea:7c:e7:1c:11:f5:b0:fb:
42:b1:4d:89:62:5f:eb:ed:04:46:28:5f:45:19:9e:
12:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E3:BD:54:7A:6C:A5:04:0F:36:45:11:A0:87:04:54:F5:DD:8D:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31e52613-51ab-31c8-8da4-3fca239484ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
206.134.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:41:4b:a1:b9:c5:42:1b:52:d2:ab:2b:f4:81:66:88:ce:73:
8b:de:79:ee:20:b5:0d:13:c5:20:8a:39:26:5e:9f:c5:c8:47:
b2:c0:9a:d8:a8:6f:4e:11:5e:9f:ec:b2:5a:9d:bd:9f:5e:cc:
7b:9e:50:49:f1:d4:ba:7d:98:a2:6a:27:d5:11:20:86:e5:5e:
82:7d:d7:e7:26:9c:c7:1b:27:b7:30:45:39:1c:dd:6f:a7:a2:
d9:9c:69:a5:d2:b2:50:4b:13:96:40:02:34:d3:9d:7f:32:ab:
80:11:94:f3:f8:d6:17:96:b4:08:77:6c:56:cc:7f:c1:93:8f:
63:1b:51:1a:43:c0:da:6b:41:87:74:bb:e5:e9:16:63:ea:0e:
91:76:6c:d4:85:06:c7:a7:32:4e:f0:ef:e1:b4:40:26:a9:5f:
ec:96:cd:b7:d5:69:00:56:3a:17:49:0b:ed:0f:db:d0:3a:83:
54:65:18:16:02:e9:80:56:86:c7:1f:6c:67:ca:c0:54:b0:8d:
9c:3d:0e:15:73:25:5a:ef:b1:30:50:57:49:64:fe:e3:64:1b:
b4:f4:a2:48:9c:bc:f2:d4:d2:55:56:19:73:af:4d:f4:62:32:
bf:b6:ba:9d:d0:c3:be:7b:f2:b2:5e:bd:ff:30:91:d3:77:b3:
9e:2c:a4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:16:17 2025 by rpki-client