Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32b019bd-c38e-3ff4-93fe-d933290011fc.roa
File: 32b019bd-c38e-3ff4-93fe-d933290011fc.roa (raw, json)
Hash identifier: FQG5HXvNZaPX4fLud6QmUayJyg9rPCjE0C/CLxhWNNQ=
Subject key identifier: B7:A0:0F:C3:CD:7E:EB:81:2E:A1:61:E8:21:83:8F:E2:ED:17:4A:4A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C905592AB68C422EE18F1444
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32b019bd-c38e-3ff4-93fe-d933290011fc.roa
Signing time: Thu 02 Feb 2023 12:00:00 +0000
ROA not before: Thu 02 Feb 2023 12:00:00 +0000
ROA not after: Fri 10 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 134.127.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c9:05:59:2a:b6:8c:42:2e:e1:8f:14:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 2 12:00:00 2023 GMT
Not After : Mar 10 05:00:00 2023 GMT
Subject: CN=31ebf4d5-7297-40aa-ad5d-1d0db3f19a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:52:35:18:72:3e:88:a8:b2:0c:32:6b:f0:
f2:d7:1d:d1:f0:f9:26:a8:5d:0f:2c:6f:80:5e:cd:
74:c3:1f:25:5f:fa:a2:97:d9:5e:af:18:76:ff:eb:
43:26:a4:9f:50:f1:35:ce:6f:da:cc:21:06:7b:ab:
df:81:5e:82:4d:3c:33:dc:a6:cf:fe:b1:57:81:f5:
1a:3e:55:f3:de:73:37:9b:d7:0b:8d:86:a1:46:39:
2c:b7:71:3f:06:0a:59:89:76:fa:68:ce:36:92:dd:
a1:68:2f:cb:3d:51:38:d1:ae:6e:fd:6a:8c:59:a6:
4a:e2:82:2d:65:25:65:9b:69:b9:f0:f8:62:42:08:
8d:74:c0:90:29:b3:3a:00:62:e1:d8:49:9e:a4:75:
9f:91:4d:4a:17:34:a6:57:d2:46:66:69:e1:28:56:
97:a0:62:52:e8:fc:76:1a:28:4e:5d:54:6d:c6:6d:
ec:90:6f:f8:56:19:70:5f:f3:64:5f:fa:84:d2:d1:
f3:5e:c0:d3:89:75:b2:87:f5:26:c9:b3:c1:d4:17:
16:34:a1:1c:d9:83:0f:00:0f:19:40:77:a9:82:69:
f5:8b:ed:33:a9:e5:d3:76:e0:9f:7a:ef:fd:5d:b1:
0b:81:ac:0e:8c:83:1e:2f:7c:33:9c:da:ec:b2:13:
e4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A0:0F:C3:CD:7E:EB:81:2E:A1:61:E8:21:83:8F:E2:ED:17:4A:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32b019bd-c38e-3ff4-93fe-d933290011fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
134.127.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:d3:70:b8:72:d6:9e:9a:0c:1e:38:42:b9:d0:41:1b:5a:ee:
f2:5d:87:1c:85:a1:7d:35:e9:31:34:09:d5:58:6c:f9:e7:55:
5a:7e:72:32:ca:63:fa:6c:b7:7c:26:e6:91:e8:28:41:d6:2d:
df:12:a7:cc:6a:0e:db:2a:7f:c2:91:4b:a3:c5:23:17:b1:ea:
63:36:61:2d:1c:0d:72:80:d9:4b:49:e9:81:41:b9:eb:18:2a:
9d:03:bd:51:36:52:72:68:92:93:09:db:11:81:b0:e0:a6:a2:
4f:14:af:b2:0d:b1:d3:14:df:b6:25:43:ee:a1:ce:2c:74:ba:
a3:0b:2f:47:20:d9:16:2c:d2:e3:a1:3e:ef:5b:6b:da:61:92:
a7:ff:dd:aa:64:8e:ee:24:67:a7:95:83:0b:45:20:9e:4d:94:
99:1f:39:20:ae:36:7c:d4:96:c2:c4:d9:cd:c0:5c:6f:72:f4:
59:e9:19:f0:3d:f9:b3:f3:be:fa:0b:68:95:a0:58:67:db:a1:
df:44:7c:a7:a8:8d:64:ef:09:dc:20:07:57:b9:c3:c1:bd:60:
f8:6b:aa:33:6c:84:6d:5d:83:26:6b:15:1a:39:82:b3:54:74:
58:ab:f9:80:1c:bc:54:55:ce:20:89:fe:f8:27:b1:c1:24:45:
de:fe:d7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:57 2025 by rpki-client