Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e48a765-67f3-3e99-b6f7-9045fc2c9b3e.roa
File: 3e48a765-67f3-3e99-b6f7-9045fc2c9b3e.roa (raw, json)
Hash identifier: aiuQ5+xMWRLFE6/+xR11nYba1GZSd4rW7tqG1v2KEuA=
Subject key identifier: BE:C8:F7:17:D6:00:4E:F1:DC:F1:64:26:A8:ED:DB:1D:8F:D3:27:AF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400363BAD2AE9649A0884B3A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e48a765-67f3-3e99-b6f7-9045fc2c9b3e.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 128.212.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:63:ba:d2:ae:96:49:a0:88:4b:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=6e29ec31-3f8c-4069-a3ff-f220075bdef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bc:10:cc:9f:ae:13:1c:38:7f:cc:20:99:78:
48:e2:d8:ae:71:45:9c:ec:dc:3f:12:60:b9:f3:54:
19:cb:9b:70:bb:ac:2e:90:3f:c5:ba:11:0e:e1:f3:
13:59:32:45:65:af:33:fd:d0:52:ca:0e:13:66:a0:
fd:06:b7:33:05:9b:cb:53:12:82:8a:b9:cf:6b:38:
55:55:ed:17:a3:3a:f8:1d:a2:68:d0:87:77:20:ba:
a5:ab:a1:22:3a:9e:dd:8e:02:6c:f3:ab:24:15:b7:
36:24:7b:6c:f5:91:15:2c:1b:97:a4:31:62:86:58:
07:43:08:d1:0b:7f:30:3b:f4:cd:d0:ef:3d:0c:b7:
9d:e0:b9:f0:72:9d:ea:32:d1:a3:ad:58:26:6f:d3:
7f:dc:ff:5c:26:f3:23:3c:16:02:8b:0d:4f:be:d1:
58:97:50:5e:1e:c1:45:e1:81:a3:2f:63:eb:d8:b7:
05:76:3c:7f:f0:f4:45:cb:5c:67:8f:91:71:ae:c8:
aa:00:2c:42:43:77:10:4c:4a:5a:b7:2c:e1:8c:14:
f4:fe:25:19:bc:10:81:7d:a0:3e:e7:5d:6c:cd:47:
2a:74:52:d7:91:10:40:2c:40:0e:9f:2b:74:0c:83:
17:50:25:d5:21:92:74:3f:3a:ae:92:92:e1:f6:cb:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C8:F7:17:D6:00:4E:F1:DC:F1:64:26:A8:ED:DB:1D:8F:D3:27:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e48a765-67f3-3e99-b6f7-9045fc2c9b3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.212.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:16:7f:51:7c:a9:22:e9:fd:4f:c2:d1:f2:29:82:5c:82:57:
a6:83:c7:30:bd:49:6d:37:bb:9b:d7:93:0f:cb:f8:bf:49:36:
c3:f3:ae:39:22:cc:bb:09:70:ea:eb:8d:d6:9f:dd:0c:68:24:
4b:07:e6:b6:6e:af:b4:da:9a:c9:18:f2:ba:5d:ae:01:fd:d8:
e8:e8:09:5c:0b:4b:01:bd:75:f1:30:3a:9a:ca:b7:26:71:08:
48:f6:f6:73:27:ca:b6:36:8b:34:b2:26:7e:da:d5:6e:1b:e2:
9f:c5:77:dc:91:f1:ee:14:1c:f2:91:ca:f8:df:e6:9b:76:ec:
25:df:22:22:74:30:67:0b:bd:45:27:c1:19:27:ec:c4:5f:12:
6d:3c:7d:ed:f4:f6:54:a0:d0:65:19:e4:0d:1a:4b:f0:17:d7:
4d:8a:71:47:fe:1d:b1:e7:59:85:4f:12:59:4e:04:ea:4b:d2:
e3:2d:53:2e:80:c9:5f:e5:98:09:f0:d4:c6:af:af:cf:9f:1d:
38:8d:c5:f3:64:8d:a0:d3:88:24:fd:1d:12:08:04:d3:10:d9:
e6:42:09:b0:8f:8a:94:3f:4b:4a:fc:3e:9c:18:b2:94:a2:b0:
b3:37:74:23:23:4d:2c:72:ab:45:b2:e0:7a:43:93:3a:33:fa:
6c:0c:cf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:52 2025 by rpki-client