Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38890d1c-1aa1-3ac2-ae59-24cccb1ad5e2.roa
File: 38890d1c-1aa1-3ac2-ae59-24cccb1ad5e2.roa (raw, json)
Hash identifier: U3ajVlo3fWzoK2Rwa8nWZ+BirSQax3MpaSe39Ia9muA=
Subject key identifier: 3A:18:B9:4B:15:5B:27:DB:27:99:59:B9:D3:8C:DA:3A:A2:C9:D0:8C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C9695717412EC1DE366B6D840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38890d1c-1aa1-3ac2-ae59-24cccb1ad5e2.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 99.78.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:95:71:74:12:ec:1d:e3:66:b6:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=f894adbd-efac-4bf5-91cb-5f6940ac10ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:3d:19:3c:1f:83:a3:d2:47:e9:39:7e:c8:
05:9d:93:b3:f9:f2:c6:46:03:02:a2:47:99:4d:00:
b3:07:2e:86:87:8b:98:d0:bf:6b:18:4d:3a:3e:56:
48:c1:07:0d:84:13:7a:03:6d:3d:05:20:f6:29:07:
aa:13:95:f7:e0:8b:8d:82:8d:a4:2c:a7:a2:76:ba:
b3:37:06:5d:8c:9e:ae:38:e1:0f:54:61:ce:75:58:
81:d3:34:f7:2c:4c:02:01:02:f5:9c:29:a7:5f:1e:
14:09:21:e1:b9:fa:1e:9a:fd:3b:99:4a:87:f7:c2:
51:4b:c4:1f:5f:71:f0:06:63:c5:53:ae:89:c1:eb:
ec:d7:32:00:95:8e:be:80:e9:0e:c6:8f:19:ef:20:
8e:1e:f3:ed:47:49:52:7f:cf:81:a5:6d:f5:2e:4d:
84:97:5f:ea:e6:c7:81:a6:61:2b:72:0f:30:82:89:
c2:34:66:5b:a9:56:35:ea:51:b6:12:fd:f0:6f:f3:
f0:22:f2:a5:c1:08:c5:7f:12:ce:97:73:26:d1:e3:
08:f3:25:a6:2a:80:72:de:70:a1:39:44:1c:a2:db:
0d:d9:44:8b:25:ed:c1:8a:29:7a:f7:a3:06:bb:68:
cc:dc:35:21:42:99:85:41:d1:2a:70:84:8e:5f:b4:
0a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:18:B9:4B:15:5B:27:DB:27:99:59:B9:D3:8C:DA:3A:A2:C9:D0:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38890d1c-1aa1-3ac2-ae59-24cccb1ad5e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.78.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:d7:2d:a2:a9:bd:fb:f2:78:65:af:ed:6e:53:d2:43:1c:aa:
b8:95:c5:5c:3c:3d:a1:1a:47:cb:64:d6:99:07:64:7c:e4:97:
62:18:f6:2f:09:ec:28:3d:b7:4f:a3:6a:8e:a5:c9:44:78:fa:
24:fd:a1:d0:77:a8:3d:83:ae:c1:b0:82:ce:ef:2f:b6:72:7e:
16:de:6a:a9:ca:ef:e5:5d:a6:ca:87:05:f7:8a:5e:a1:3e:9d:
30:ec:3d:e5:27:dc:67:a4:87:a5:a0:c9:3a:67:8d:94:2f:1b:
24:cd:1a:2d:13:7e:e3:cc:35:cd:88:91:e9:86:07:5d:25:20:
f1:50:d3:70:ba:87:eb:2c:32:59:d2:83:a4:a3:49:76:72:34:
e7:2d:e0:82:12:40:58:35:77:50:7e:3e:9b:5d:23:04:67:62:
f2:59:9e:26:6e:3e:c0:21:e7:08:e0:f7:ce:16:d2:27:c9:99:
e2:33:16:94:4f:07:dd:20:ed:f8:a4:53:84:a5:ee:c1:26:f2:
a5:d6:61:0e:9d:42:1d:e9:9b:9f:c0:c3:59:fb:73:0c:91:f1:
48:6e:bd:cc:04:39:4c:03:1a:24:7d:95:9c:58:f3:33:01:4f:
44:69:d7:1e:3b:0c:55:51:13:80:b8:bc:51:8c:28:47:93:7a:
78:ae:eb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:35 2025 by rpki-client