Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bd1a534-e8c6-3996-9ae5-0b8b1a157372.roa
File: 3bd1a534-e8c6-3996-9ae5-0b8b1a157372.roa (raw, json)
Hash identifier: ftk0Iq3h5YDJpncQzCqRNgGtZPeXD38piANOPD4SS8A=
Subject key identifier: B3:C4:1D:2A:AA:5F:A1:DC:3F:7D:15:A3:A8:15:5D:CB:BD:1D:BC:D0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A8E7CD74E41F378290CA580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bd1a534-e8c6-3996-9ae5-0b8b1a157372.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 192.189.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:8e:7c:d7:4e:41:f3:78:29:0c:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=669bb43f-42f1-4a07-9a91-84ff1739d859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:3d:0a:a7:d6:88:52:45:2b:d9:d1:94:05:
ce:78:14:5f:4b:84:28:69:ed:29:23:51:13:e3:a9:
a8:6c:f9:4d:39:0c:b2:e6:88:34:18:95:e3:c2:e1:
0d:44:36:1c:fd:e4:af:ca:64:90:45:d6:6f:a9:80:
a5:4e:65:dc:67:52:e5:b4:49:a1:8b:27:bf:a1:83:
5b:37:21:ec:66:9d:e1:0e:a3:f5:cd:cc:23:d6:3f:
38:44:3b:ea:08:2e:fb:74:1a:7e:6f:a7:c6:55:e5:
a2:ab:72:96:af:d6:fb:5c:f2:c1:1e:ae:dc:d3:8b:
c0:ee:76:54:75:64:08:0e:bd:44:9f:25:7b:20:90:
80:ac:18:74:38:10:d6:5a:c5:bc:e2:f8:9b:ad:bc:
4c:4a:8a:9c:78:72:78:e9:b3:c9:af:4e:6b:71:7c:
bb:29:7c:98:63:d2:0a:ec:7b:f9:e7:a0:4e:69:74:
7c:2b:fd:d5:e8:21:e0:bc:e4:bf:7e:a6:6a:04:c7:
2a:45:19:69:13:a6:16:af:02:9d:c0:19:6a:a7:15:
9e:be:4f:cd:bb:22:bd:26:4d:43:5b:1f:90:de:e3:
51:10:30:ca:2b:43:2e:d7:c5:93:6d:cc:d9:d8:63:
7a:96:2b:d6:3b:16:ec:f8:7e:c7:46:6d:64:67:a9:
23:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C4:1D:2A:AA:5F:A1:DC:3F:7D:15:A3:A8:15:5D:CB:BD:1D:BC:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bd1a534-e8c6-3996-9ae5-0b8b1a157372.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:d3:ae:e9:d3:64:ed:a5:99:ba:d1:6f:75:59:46:33:2a:95:
1b:19:66:c1:f6:5c:0b:d7:4c:8e:23:88:a5:c4:ad:95:c6:5c:
76:ad:de:bc:75:77:83:78:ed:71:1d:9a:c7:f9:24:ad:1c:cc:
df:a6:33:04:b4:7d:e0:0d:59:fe:66:dd:79:e4:15:b3:5c:7f:
63:0a:e0:bb:2f:75:8e:db:bf:bb:9d:8c:56:05:79:cd:d8:71:
08:00:58:21:e8:79:1b:28:07:19:4a:28:24:af:17:52:d9:9f:
49:51:4f:5a:3f:fa:3f:d3:61:39:25:16:95:7c:fb:67:90:18:
ff:14:75:42:d2:ba:bc:f0:85:8d:b9:11:1a:f3:43:d2:06:5e:
a6:37:9f:5c:3e:f5:80:4d:c6:d3:6e:92:e5:e3:8e:2f:c2:f6:
22:df:84:a3:15:f4:b3:bf:b9:93:2e:5e:72:34:2f:9a:22:b2:
e3:c0:f7:64:58:e5:68:c2:83:24:d6:86:c9:05:74:ca:4e:9f:
f7:5c:4c:fb:21:cd:81:1b:08:a0:19:12:62:ca:49:55:ac:04:
88:71:ed:58:98:4b:83:37:de:7c:54:eb:94:fb:0a:23:d1:66:
e8:55:05:e5:b9:f7:01:ca:de:b7:63:db:89:10:0b:67:fe:f2:
3c:8e:7c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:24 2025 by rpki-client