Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/40cfcbeb-28f2-3238-9261-d06783503eb4.roa
File: 40cfcbeb-28f2-3238-9261-d06783503eb4.roa (raw, json)
Hash identifier: eW5tmaucJlY61IyNMxEfk/+BnOCQp4K0JyrIAnYDHZM=
Subject key identifier: 25:60:53:5E:A2:F3:8E:56:92:F5:E6:01:1B:CD:D4:9F:D8:C7:2E:63
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401A9130E06C8C9D347C12C880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/40cfcbeb-28f2-3238-9261-d06783503eb4.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 99.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:91:30:e0:6c:8c:9d:34:7c:12:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=795d3885-0b1d-403d-9f10-711553b90d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ee:2b:23:6d:e6:4a:ee:81:e9:77:a3:21:22:
92:27:50:4a:69:31:8c:7e:06:e1:35:31:e1:93:49:
f7:66:08:7b:d9:92:99:b8:67:6d:99:a1:53:e1:60:
3b:72:c5:d8:94:3e:af:2e:ff:6c:53:e7:7d:18:69:
01:b1:ee:cc:45:08:c6:0d:39:c3:a4:62:60:a5:29:
41:aa:cd:32:4b:b4:49:52:e7:a6:ba:3b:5e:2e:d0:
9d:1d:8f:a3:d0:e6:54:2c:5b:7c:ad:ac:68:ce:92:
b2:3d:93:3a:86:8c:fc:6f:fe:2d:b5:1a:58:4d:3b:
77:11:39:9a:39:04:0e:60:d9:d8:1c:71:e6:93:67:
9c:02:05:88:70:19:c4:92:ff:4f:4d:df:24:9e:c8:
16:12:fd:8f:fe:ac:95:28:96:d6:18:6e:81:63:fd:
60:63:5a:64:fd:5f:2a:05:96:5d:84:a9:3a:95:bd:
75:c4:d4:a7:39:a9:f3:b4:37:56:37:53:82:db:4e:
ff:ae:87:f3:d2:5d:99:2b:4a:72:77:cd:6e:80:9b:
ee:e0:1f:ed:c8:49:d1:ec:0a:db:45:fb:36:ce:58:
db:b3:8f:06:8d:46:e3:ce:35:ab:f8:69:c6:b0:33:
4e:16:eb:ba:31:25:4b:8d:88:7d:d3:68:32:0d:69:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:60:53:5E:A2:F3:8E:56:92:F5:E6:01:1B:CD:D4:9F:D8:C7:2E:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/40cfcbeb-28f2-3238-9261-d06783503eb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:64:92:3c:58:66:ac:39:f5:5b:f9:18:b7:16:83:2b:66:42:
55:db:c9:b3:68:01:a8:62:ce:24:81:7e:06:95:aa:21:1e:7e:
7c:54:41:64:93:99:27:71:41:bb:2b:f2:fd:93:cb:85:54:75:
40:bd:5a:b0:3c:2f:f7:e3:cf:4b:c7:ec:14:30:b1:fa:d5:70:
85:29:0b:97:69:08:85:da:fb:e9:e4:be:d4:9b:ff:50:ae:be:
37:30:71:5d:21:f4:0c:6e:e2:21:96:b2:fd:a6:0d:b4:a5:a1:
8a:63:42:73:5e:d7:c7:de:a9:77:90:34:84:52:04:5a:c5:86:
49:72:da:78:f7:65:b3:c7:1e:ea:bc:65:5d:d3:0f:1f:62:98:
8b:19:3b:91:ac:24:2e:7d:63:51:db:5f:88:b4:e2:74:5a:bf:
d1:e2:15:52:d4:50:be:e7:93:ae:d8:43:72:0d:64:f5:29:a1:
3e:dd:a7:37:f7:93:9a:1f:61:5f:75:d5:48:4d:8b:db:f7:0f:
62:d6:bb:ee:d3:31:30:c0:82:79:d7:d0:97:84:57:70:d9:fd:
19:57:6d:81:9f:32:0b:8d:5f:26:7f:68:ac:b8:57:cf:92:62:
37:41:64:72:21:a3:db:cc:f9:e6:71:25:6d:ed:74:73:7e:72:
9d:26:36:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:28 2025 by rpki-client