Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d9eccf1-8249-3836-aa69-9ce21f407e63.roa
File: 3d9eccf1-8249-3836-aa69-9ce21f407e63.roa (raw, json)
Hash identifier: Mi8k5ORCKE5URod8HjXSFnEKAGrddX3+HmYGX4wTAVU=
Subject key identifier: 0A:C7:BD:C2:1F:82:50:8A:4F:81:18:D7:98:56:06:43:D4:11:67:3E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E94BDD96A7255C1743EC7C940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d9eccf1-8249-3836-aa69-9ce21f407e63.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 198.200.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:94:bd:d9:6a:72:55:c1:74:3e:c7:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=518ea28d-69bb-481c-a4d5-fddabbe5878a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:3c:d3:fd:14:6c:dd:ee:39:bc:a9:98:0e:
d7:7c:d0:1f:06:89:70:c2:42:3b:63:a7:e1:09:b6:
27:cd:24:db:9d:52:03:b2:ee:0a:ec:cf:cb:be:d9:
19:97:6e:12:75:dd:c4:39:cb:8a:66:e2:86:af:2b:
8b:06:d5:79:69:32:e0:78:9c:9d:a8:a9:5d:5f:56:
2d:fb:41:f5:a6:8d:9d:5a:74:58:40:f8:d8:e6:ac:
44:9d:fc:c9:b6:80:c8:45:fc:f2:f0:26:c1:e3:85:
94:a0:a8:b4:97:9e:15:63:08:14:99:72:40:18:78:
e6:20:3b:22:41:64:84:56:34:22:c0:c3:80:de:46:
97:41:ae:ab:76:21:ba:7c:15:40:a6:ed:7c:d7:ae:
c1:33:5b:de:af:04:e0:7d:19:f3:ff:9c:f8:76:2d:
f2:0c:94:fd:76:37:62:9d:be:0e:0a:bb:9c:87:ad:
43:9a:75:1e:4c:db:32:00:57:51:5b:2c:e9:0a:8a:
25:0d:d6:64:57:f4:9e:9a:04:2a:75:55:83:28:8e:
5d:52:94:32:a8:f8:b9:88:d3:32:1d:fb:18:b1:32:
61:82:66:c8:e9:39:ef:56:a2:cc:ae:3e:2e:86:16:
93:91:63:4d:d5:e8:9c:54:7f:47:c5:31:84:35:8d:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C7:BD:C2:1F:82:50:8A:4F:81:18:D7:98:56:06:43:D4:11:67:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d9eccf1-8249-3836-aa69-9ce21f407e63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.200.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:ad:56:4f:3e:d5:f6:76:77:7e:43:11:5f:93:99:ff:71:b0:
0a:90:d2:d8:b2:c2:eb:2d:95:00:3e:75:3f:da:6d:90:23:79:
96:18:f4:d2:af:b2:b3:89:8f:d5:43:30:ed:13:7e:1f:5d:fb:
6f:30:db:02:8a:a7:85:aa:9b:36:96:03:ee:8c:82:a3:00:0f:
9e:15:98:09:30:1a:ae:0a:9e:af:fe:2e:25:bf:f7:23:f2:66:
c4:09:14:ef:5d:f3:71:f1:17:2b:08:e7:7d:27:05:d3:00:85:
ee:ff:47:30:63:a9:4a:4b:23:33:0d:cc:d0:f7:8c:c7:1b:35:
9c:a0:e9:b5:7c:af:00:e9:86:32:06:7c:b4:4d:99:27:61:1c:
9a:2d:9c:4a:e4:6b:fe:44:3d:b1:54:db:d2:9d:df:71:f1:d3:
0b:56:83:f6:4f:db:df:34:9e:d6:39:e5:f3:42:da:f4:39:07:
01:1e:5c:99:95:19:9d:84:f7:a8:17:32:be:63:7f:e6:f1:00:
db:8d:f3:90:5e:ba:9e:97:43:64:5b:ff:bf:fd:4c:96:1a:6a:
71:d2:1f:8a:c8:46:ab:ee:24:a4:7a:7c:c8:ac:9e:f7:78:59:
7e:4f:4e:eb:a4:f9:22:7f:6c:34:f5:f4:32:4f:72:12:9b:f5:
05:5e:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:20 2025 by rpki-client