Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38533eb6-a58e-3046-a60f-8ea6bcc620af.roa
File: 38533eb6-a58e-3046-a60f-8ea6bcc620af.roa (raw, json)
Hash identifier: thRlwuXocFURznMzUm1dMccVba+H0zDUnUO/333q+lQ=
Subject key identifier: 7D:15:8C:E5:80:37:F3:91:C7:01:40:66:D2:FC:D9:3E:C3:E2:FC:04
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E955A417A84DF2A271DF04B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38533eb6-a58e-3046-a60f-8ea6bcc620af.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 99.78.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:95:5a:41:7a:84:df:2a:27:1d:f0:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=4dda807a-e557-4f01-93e9-aa963fbf6161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:79:36:fa:03:69:e1:04:de:df:b4:a4:b1:32:
ca:c2:c4:b3:af:e6:c0:50:a5:50:0b:76:21:7c:01:
3d:8f:cb:3f:47:d7:6a:94:da:4a:fa:6e:55:3e:27:
aa:22:00:16:ce:79:f0:38:fd:e3:83:b0:de:90:7b:
44:a9:9f:20:81:8c:9c:73:bb:8d:68:51:d0:5e:7e:
df:65:8c:28:b7:38:4d:0f:ac:77:1e:09:ad:f2:d9:
64:08:c6:3f:8c:34:4a:da:ac:15:27:4d:36:55:a0:
67:b8:22:0c:1d:25:04:a0:06:0e:89:b2:3f:54:31:
4b:67:17:f2:e6:a9:f4:ee:1b:fa:64:91:1c:1a:0a:
2b:7a:d8:07:60:03:1d:f8:c2:3e:71:22:6b:90:c3:
17:bb:bd:4b:a8:6e:5a:16:aa:24:e0:ec:b8:09:46:
f4:41:37:59:f9:bb:1e:75:49:8a:56:54:6c:f9:0d:
03:f7:91:52:eb:83:37:49:90:71:f7:02:3c:a7:c8:
ef:fe:89:bb:28:55:26:44:6f:41:97:d1:34:3a:d3:
27:18:6b:5a:d6:31:ed:cc:e8:8e:11:dc:66:88:9f:
16:1b:a3:ce:03:b8:93:9f:37:1f:5a:5a:a7:1a:8a:
76:33:4e:a0:bc:9d:5b:77:3c:e9:a7:db:7b:9b:d5:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:15:8C:E5:80:37:F3:91:C7:01:40:66:D2:FC:D9:3E:C3:E2:FC:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38533eb6-a58e-3046-a60f-8ea6bcc620af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.78.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:9c:02:6b:4b:8a:ce:fd:6a:67:d2:3f:a9:5e:26:e2:bc:f3:
b9:62:a6:dd:91:b6:9c:67:af:45:2e:72:ee:9e:09:47:80:1d:
1e:d4:c5:ed:14:26:0c:e8:69:e7:0b:e1:89:de:7c:d3:f0:51:
d4:de:eb:38:26:ee:18:30:6f:a4:86:4a:5c:17:f4:f5:b2:f6:
1d:74:f8:de:3f:a4:d1:a6:c7:2a:47:af:bb:e6:d7:0a:ba:62:
71:62:6d:f2:f5:4e:2f:0b:57:c6:aa:8e:eb:fa:25:77:4b:be:
6a:d9:53:02:c6:4a:fb:25:3f:50:49:a0:fd:b4:76:58:3f:47:
eb:ed:a7:ce:f6:17:a6:fd:29:37:6a:b1:00:ac:c7:cb:16:45:
37:f9:f6:da:41:27:7c:c0:55:17:6d:e8:40:e9:a6:eb:8f:91:
94:37:58:38:c5:19:45:78:5a:99:b0:8e:e6:fc:bf:2a:7b:43:
4d:43:ed:c6:b0:cb:06:73:52:d6:a1:35:2f:3c:1c:3b:48:a2:
b7:91:31:a7:60:a1:b3:e3:a1:c2:45:17:db:75:a3:2c:d3:f3:
89:a7:8b:73:6f:11:dc:e8:f9:0f:22:31:69:83:15:39:bd:0e:
71:69:7f:f0:a4:8c:75:a4:d7:77:48:d3:59:21:b1:1e:4f:02:
21:dd:97:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:05:44 2025 by rpki-client