Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33393ccd-0678-3f12-87db-07dafa167f65.roa
File: 33393ccd-0678-3f12-87db-07dafa167f65.roa (raw, json)
Hash identifier: neiIvPTAr2T+ZnLjSHAFZgqVO3uvvBMsf0g4FYGGDoo=
Subject key identifier: 4A:E7:E6:40:F6:C7:48:13:BD:64:A8:A7:5D:B9:C9:FF:27:C3:BF:28
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D718A4CF3AE605843B3E1D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33393ccd-0678-3f12-87db-07dafa167f65.roa
Signing time: Tue 07 Feb 2023 12:00:00 +0000
ROA not before: Tue 07 Feb 2023 12:00:00 +0000
ROA not after: Wed 15 Mar 2023 04:00:00 +0000
asID: 16509
IP address blocks: 129.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d7:18:a4:cf:3a:e6:05:84:3b:3e:1d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 7 12:00:00 2023 GMT
Not After : Mar 15 04:00:00 2023 GMT
Subject: CN=551d95cb-cbfa-4096-9103-48b1e61be167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:fa:df:74:99:e5:30:b2:f8:c8:4c:ec:c2:
96:13:4b:50:56:d7:8d:4d:c1:bf:bf:09:18:93:4a:
2b:9c:65:1d:92:5f:4c:f2:e8:76:df:55:ae:51:32:
22:24:00:a7:66:08:7e:1a:6d:83:d6:69:1a:80:1a:
93:f0:f6:ed:59:f5:d5:61:3a:9d:42:5e:75:9c:2c:
9a:76:b8:6b:6d:3e:e1:ad:f5:81:5d:5d:94:7e:06:
94:cb:e2:6d:78:b6:05:a7:93:e5:23:84:2b:15:c7:
9e:21:16:ff:96:b5:18:25:d4:d9:25:c1:50:14:4a:
37:20:64:d6:0c:45:6a:d5:2e:7d:61:c4:78:87:b6:
1c:9e:c8:26:cf:0c:c7:8e:e6:3e:54:68:87:f6:1e:
b4:04:bc:4a:95:d4:3a:88:94:ac:68:de:5c:f6:2e:
ea:5d:82:d9:92:f3:9b:ac:35:c9:b3:cb:8c:ea:2f:
06:26:cd:8e:14:a9:46:84:ac:c7:f5:9f:c3:6e:5e:
99:6d:e5:d6:d0:f1:b9:17:62:cc:de:b7:7b:63:3c:
e7:94:c8:f3:8f:59:e6:7f:58:46:bc:bb:ba:29:f6:
27:c0:53:b5:c8:04:0a:86:87:7e:04:fe:7d:ae:ec:
43:5e:d5:22:f6:f2:61:24:be:2b:44:88:88:76:fa:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E7:E6:40:F6:C7:48:13:BD:64:A8:A7:5D:B9:C9:FF:27:C3:BF:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33393ccd-0678-3f12-87db-07dafa167f65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
129.239.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:05:3a:81:45:4c:5b:a5:5b:f0:4a:9a:b4:b8:49:1a:d4:aa:
5d:e4:f5:9f:9f:cf:e3:89:f6:6a:91:9a:a5:72:5b:bd:87:88:
9c:cd:f4:a3:80:2a:1e:3d:9e:9a:14:72:ed:c1:92:59:ba:0b:
1b:fb:fa:22:6e:9e:a3:4f:d9:f7:5f:54:94:83:dc:43:27:01:
8c:ea:42:e3:88:a9:89:9a:a3:de:04:63:68:08:be:33:3c:58:
46:1a:a8:7b:6b:94:db:9c:02:45:94:b0:53:ae:46:63:69:4f:
42:f9:fc:ac:3d:0c:ce:39:4b:16:02:99:52:70:9b:88:72:b3:
3d:32:54:55:cf:3c:db:28:fd:08:97:90:10:68:74:d1:47:d4:
f3:93:f5:7c:dd:72:15:37:a9:31:e9:37:d6:90:61:56:58:35:
b9:3a:62:3c:f7:c3:4e:d7:0f:28:62:ce:0f:94:ec:a4:8b:44:
09:c6:23:11:24:54:c0:d4:3c:1f:bd:5c:81:fb:80:a7:1c:52:
05:a4:e1:ba:c8:50:36:df:93:01:93:c5:6b:de:58:de:41:91:
3f:79:ca:af:91:b1:5f:ec:ed:f4:2f:d7:3e:f6:12:00:8d:b2:
33:c0:d8:c7:a2:94:49:75:ef:e8:eb:a1:00:e3:00:ec:42:e5:
f1:05:78:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:07 2025 by rpki-client