Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38c6eead-39a9-3170-acd4-2dfaf5da758f.roa
File: 38c6eead-39a9-3170-acd4-2dfaf5da758f.roa (raw, json)
Hash identifier: vpmUIfNMNMZ17+cHkQSyfA9twQpf/9Z0etTZKNe2MGc=
Subject key identifier: 28:4B:DE:66:C2:E6:F3:14:46:5E:F2:32:53:47:10:59:4C:72:0D:08
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EEDBA5CE7A34BAA874717C900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38c6eead-39a9-3170-acd4-2dfaf5da758f.roa
Signing time: Mon 15 Aug 2022 12:00:00 +0000
ROA not before: Mon 15 Aug 2022 12:00:00 +0000
ROA not after: Tue 20 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 198.14.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:ed:ba:5c:e7:a3:4b:aa:87:47:17:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 15 12:00:00 2022 GMT
Not After : Sep 20 04:00:00 2022 GMT
Subject: CN=5e2498a2-d8c1-4fe5-956f-db22c56ea78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:57:63:f3:6d:6f:27:bb:dd:0e:3a:5f:fc:
fa:9b:fc:98:a1:02:a7:7e:42:6c:ec:6c:44:8d:8a:
2a:04:47:52:fa:1e:1b:14:78:59:ab:6a:dd:aa:74:
04:3f:3f:7f:57:d2:64:45:f9:17:2a:2c:17:ac:6d:
96:e9:7a:cf:2d:79:a1:b1:d9:25:05:3d:7b:a7:a3:
db:8b:e7:cc:48:20:36:ff:64:0e:35:0b:e2:11:c4:
58:00:8d:29:fc:13:0b:86:78:cd:b0:d2:59:d1:9e:
02:f6:cd:57:75:02:21:0f:b7:f7:a0:d0:db:fe:d1:
44:48:17:b0:ee:a1:7d:72:76:50:c6:ea:42:39:9e:
c5:f2:f0:f1:94:d7:f5:ad:ed:b6:15:17:c5:b3:b4:
0e:a7:ef:b7:ac:dd:de:29:d3:ab:6e:ba:86:78:a9:
41:ca:a9:45:26:12:2f:9e:59:b3:8d:6d:de:7b:82:
e1:84:9a:a5:eb:79:dc:a4:e5:65:c3:81:f3:c4:b7:
a6:ab:7d:40:ab:bf:96:b2:7f:5d:98:6d:ff:76:9f:
94:92:f7:1b:8c:f7:a7:0b:9c:80:fd:b1:d0:e5:db:
7d:37:2c:85:8b:cb:f4:7b:5e:b8:68:d2:21:f3:f8:
e8:65:3e:c6:dd:f1:e4:19:42:a6:ba:a8:01:7c:d4:
bc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4B:DE:66:C2:E6:F3:14:46:5E:F2:32:53:47:10:59:4C:72:0D:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38c6eead-39a9-3170-acd4-2dfaf5da758f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.14.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:23:b5:22:de:6d:c6:54:51:d8:52:8b:2b:3e:36:50:bb:bf:
e8:03:fe:db:bc:b1:d3:d4:48:9f:86:ca:67:1b:6d:92:1f:e5:
9e:29:70:a1:4e:35:c5:0e:d9:f3:07:3d:4a:bc:bc:b9:71:58:
d4:aa:b0:a5:b3:5d:f3:3f:ff:85:b3:87:b4:1c:8d:2b:72:d0:
ae:06:3e:a9:c9:58:aa:a0:ec:23:41:b0:55:c3:9a:6a:71:f9:
86:56:d3:8d:c1:42:70:e9:a5:ce:8a:5e:38:96:c6:67:08:09:
9a:d5:fb:82:9e:1c:7c:df:23:9e:31:e4:e4:fd:ab:42:f0:95:
03:ca:59:fd:cf:d6:ba:23:4a:3e:14:89:e7:bf:f9:36:dd:57:
ec:4d:7b:54:29:f1:25:70:47:40:b6:22:a0:ea:d3:88:68:a8:
20:a3:ec:e9:f1:66:2b:91:ad:a9:d6:50:3d:da:61:e1:0a:e9:
9b:55:eb:27:80:28:a7:a4:9c:b4:06:b2:9f:df:a0:de:7c:e2:
22:aa:cb:76:47:6e:8d:72:34:e5:6d:d5:79:d6:4f:7c:25:dd:
d1:f3:1d:b9:6e:f6:3a:4d:4f:04:7c:c5:af:8f:db:38:97:72:
76:ae:d5:f5:c2:f8:7e:6e:90:d7:92:9d:46:1c:a7:af:3f:a8:
2b:9c:e0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:25 2025 by rpki-client