Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fa73e15-8d0e-35dc-8fee-5df5a7f61f7e.roa
File: 3fa73e15-8d0e-35dc-8fee-5df5a7f61f7e.roa (raw, json)
Hash identifier: 4ao4D5TqUl/KTYmcDuxbAchmPjXjx2/hEMLDMDMJX+o=
Subject key identifier: 08:41:EB:1F:2D:E5:CF:81:B4:1B:A3:FC:35:97:32:63:65:FB:D7:AA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6F70BC8D978BDBF2A30E9300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fa73e15-8d0e-35dc-8fee-5df5a7f61f7e.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 96.0.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:70:bc:8d:97:8b:db:f2:a3:0e:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=7d34f572-fdfd-4128-a187-1985a3665c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:ca:82:92:1a:d9:8d:33:b2:91:82:e6:07:
fd:7e:15:e3:a2:1b:c1:32:0e:3b:7a:7e:59:9e:10:
dc:2e:e2:4b:27:84:97:4a:cf:9f:42:58:17:09:65:
ed:05:0e:e4:6d:2a:6c:e1:2c:fe:40:ed:9e:58:90:
60:8b:b7:eb:61:dc:b3:ba:d7:47:c9:8c:6f:8e:6b:
c8:70:a4:5e:29:cd:10:c3:29:60:f7:12:c9:32:27:
62:92:fe:72:78:3c:14:b2:90:76:28:ef:ce:31:84:
f5:2d:9b:c9:fe:69:ab:25:c8:d1:dd:cd:e4:25:2e:
98:d4:85:75:4c:43:ae:cc:6b:bc:4d:89:be:89:85:
69:86:20:bc:ac:9b:ca:be:de:5d:e0:5c:fb:27:80:
ea:0d:41:c2:1c:27:bd:08:c0:51:d3:b7:2f:9c:a4:
78:e6:7a:43:cd:90:c8:6f:03:1e:24:59:ce:a3:14:
ff:62:8c:a6:4d:00:89:2f:2a:a3:b8:fe:0d:51:2c:
9a:4e:ac:cc:c3:90:2a:62:96:cb:1f:bc:8e:b5:1a:
9a:25:b5:6b:e7:94:ab:1d:82:33:5e:a2:de:65:aa:
e3:ce:25:2b:23:61:d2:96:01:0f:46:e2:3b:ff:ab:
b2:3c:16:8e:8b:fd:cf:a2:18:51:de:58:04:e1:ee:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:41:EB:1F:2D:E5:CF:81:B4:1B:A3:FC:35:97:32:63:65:FB:D7:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fa73e15-8d0e-35dc-8fee-5df5a7f61f7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
96.0.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:13:5f:b7:91:28:a0:f1:d3:82:24:93:fd:65:29:fa:4e:0b:
22:dd:26:b9:a0:b1:2f:c5:a6:88:a4:33:4b:9e:45:47:d5:ba:
9e:47:59:1a:99:d3:00:c6:25:ad:de:4d:ed:f3:06:54:82:ed:
5e:6b:c9:7f:71:d5:d3:39:d2:4e:28:58:00:03:aa:72:e7:6e:
bf:d5:7a:65:89:06:76:dc:43:98:53:ad:18:d4:7b:ad:19:04:
99:06:fb:8b:70:5c:6c:fa:ca:b3:18:4b:90:a1:d2:a0:0e:c1:
a4:7f:6d:43:a2:ff:fa:bc:19:20:9b:cc:35:7f:43:0a:6e:61:
97:02:b3:9b:e0:72:c5:ff:73:5f:27:71:bd:00:94:5e:82:f0:
2c:34:fb:95:d0:51:90:19:3d:21:69:40:5d:52:62:58:2d:4d:
8d:0c:bc:77:df:00:f5:02:ff:57:2d:bf:c4:b8:2f:a1:2d:b5:
2e:43:d3:a1:82:02:34:f8:be:6a:19:b8:e0:36:63:bd:25:ff:
3e:e7:6a:f3:93:76:ff:6c:3a:bb:ff:27:c3:23:e3:17:4a:17:
70:42:24:d2:46:07:3d:7d:d8:7a:69:21:3f:cd:eb:4c:56:83:
a5:a7:a4:04:d9:1a:90:c5:9a:9e:e9:85:b1:1a:e0:53:11:ea:
67:34:99:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:41 2025 by rpki-client