Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e7553c2-ce07-3225-86e1-33e7067ae66e.roa
File: 3e7553c2-ce07-3225-86e1-33e7067ae66e.roa (raw, json)
Hash identifier: rqZbfKNaO43JI8zba8VOSKL++7oak68gALOrh6C5SN8=
Subject key identifier: 48:C3:20:FD:1B:52:FB:23:9E:26:00:D3:CC:21:30:65:D2:10:A5:EA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F62CE785A0F8807523576A580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e7553c2-ce07-3225-86e1-33e7067ae66e.roa
Signing time: Tue 27 Sep 2022 17:27:07 +0000
ROA not before: Tue 27 Sep 2022 17:27:07 +0000
ROA not after: Tue 01 Nov 2022 04:00:00 +0000
asID: 14618
IP address blocks: 198.13.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:62:ce:78:5a:0f:88:07:52:35:76:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 27 17:27:07 2022 GMT
Not After : Nov 1 04:00:00 2022 GMT
Subject: CN=845390cc-a7ae-4495-8f22-00da0b8a0703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:ee:7e:9b:1f:0e:f8:08:04:37:3e:8b:8b:
b3:25:bb:8e:14:9e:5d:b6:72:54:0a:82:26:38:35:
29:3c:a3:86:29:f4:08:93:82:47:8d:a4:85:21:93:
a1:69:e9:53:d7:fc:38:82:da:26:38:64:ce:98:59:
99:78:27:46:52:eb:4d:c5:5a:e2:e3:ff:79:91:5e:
b0:37:d9:88:5a:76:5c:20:1e:29:e4:a0:6b:45:c3:
a3:18:20:40:31:ca:bd:8c:6a:94:48:bd:f7:69:0b:
0a:61:64:8c:f7:39:1f:3f:1e:86:b6:a9:81:6c:52:
54:c4:3b:0a:71:fc:bf:c4:2c:b0:e7:e9:8a:80:34:
00:5f:84:e7:95:a6:80:9d:84:dd:ce:97:d1:e8:f5:
ea:40:2e:e5:85:39:5b:48:8d:65:6e:ca:81:fb:fa:
3f:a2:32:7c:7b:b5:f6:21:87:48:db:63:0c:1f:64:
0d:94:b2:b6:ff:ef:8d:58:4f:c9:14:5c:e7:ff:f8:
43:82:12:bc:6c:bf:e8:ec:a5:6d:72:a8:ce:6f:55:
e2:1f:7c:27:eb:73:e5:e5:c4:b2:6d:fe:96:4c:f1:
ca:e1:7b:e0:ac:15:33:ed:46:d5:e6:d2:3a:57:1b:
40:1a:fe:46:af:5f:b0:39:8b:05:eb:09:e5:e4:fa:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C3:20:FD:1B:52:FB:23:9E:26:00:D3:CC:21:30:65:D2:10:A5:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e7553c2-ce07-3225-86e1-33e7067ae66e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.13.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:62:d7:31:73:de:56:13:8a:94:f8:a6:53:52:11:be:a3:b6:
7e:10:dc:1a:6f:03:f7:5e:86:a6:97:04:3a:e7:3b:d5:32:5a:
ce:ea:5c:71:28:51:bc:8f:1b:dd:2c:2d:9a:a8:a4:c4:99:a8:
f6:8a:88:65:51:6e:4b:5d:ef:ac:cc:d6:4b:eb:79:64:10:6f:
a4:ae:80:27:27:85:38:41:67:9e:c3:49:70:2d:4d:d7:1f:03:
59:4f:04:06:fa:ca:39:97:53:31:a7:25:54:d1:e4:48:cd:76:
8e:aa:49:0f:77:38:c2:75:bb:bb:0c:39:59:43:89:5a:f4:f7:
16:52:f4:38:32:01:2e:4d:91:dc:47:ac:83:9d:8b:01:44:04:
6b:3e:64:56:01:44:10:89:3d:2a:b4:e9:8d:ce:ce:17:86:d6:
da:07:04:9b:02:22:7b:21:e0:00:29:3e:e9:cb:d7:8a:62:cf:
63:ec:7f:50:83:a8:9d:28:20:d6:7e:ff:cb:74:c3:be:4e:2c:
f1:82:ef:9a:ec:da:41:07:4c:02:10:9f:26:98:b3:5a:e7:5c:
73:6e:16:6e:a0:1e:d0:2f:fe:fc:a2:d1:8b:d3:06:3d:34:49:
ef:a2:99:7e:40:e0:fc:1f:ed:86:11:0a:96:fb:8a:8b:cf:23:
89:4f:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:03 2025 by rpki-client