Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41db584c-0652-3d7e-b6f4-8ceb0ceecec2.roa
File: 41db584c-0652-3d7e-b6f4-8ceb0ceecec2.roa (raw, json)
Hash identifier: jMQpa7vswoL9/Bd7VZHPGNybjSesJ6j754izD86aVw4=
Subject key identifier: 88:07:F1:C0:AC:70:BF:98:E5:4E:B6:3E:83:F0:38:89:8F:2F:08:D1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E207A70F9F74DB0EF96DB5800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41db584c-0652-3d7e-b6f4-8ceb0ceecec2.roa
Signing time: Fri 03 Jun 2022 20:03:08 +0000
ROA not before: Fri 03 Jun 2022 20:03:08 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 72.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:20:7a:70:f9:f7:4d:b0:ef:96:db:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 3 20:03:08 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=51260e0f-e41d-4d63-9154-d05ec8855350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:fb:43:d3:ec:23:dc:ee:6d:2f:22:61:9b:
cb:85:48:f0:32:86:b0:40:d4:3a:62:f8:d4:5c:b2:
a1:54:6d:fb:0e:ef:36:9e:45:57:6e:d3:f3:e1:c5:
50:2a:08:fb:33:df:52:dd:60:5a:ce:21:2d:07:52:
d4:4f:db:ff:68:0a:ae:3a:dc:46:fb:6b:1c:ac:7f:
1d:a4:31:0e:66:2b:14:fa:ed:85:19:6c:a3:88:bb:
18:5c:3c:ea:ce:81:9c:0e:94:e5:58:3e:ee:15:2b:
79:30:9a:dd:9a:f8:95:62:df:c6:84:23:b7:ec:59:
84:28:36:19:b7:4f:fc:e0:e4:ca:c1:b9:8f:23:a9:
b4:ea:dc:b0:45:02:18:8a:c2:22:3d:bc:c4:10:a7:
94:03:dc:3b:46:46:2f:54:b2:0b:9a:86:13:44:97:
56:91:7a:f6:04:10:10:c4:6a:f3:14:73:95:51:70:
9f:66:cb:7a:c7:1c:ec:4f:df:e2:77:40:9a:6e:7c:
d0:33:cd:e2:37:3c:50:ee:f7:d1:d6:fc:97:ef:27:
1f:ed:09:1f:e4:22:c3:2e:27:80:0c:fb:f3:ad:17:
30:99:ec:5d:24:44:f6:88:ca:f9:a1:cb:f3:9e:aa:
7a:e0:60:a4:74:b5:0c:cc:79:53:7c:c5:93:2e:1c:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:07:F1:C0:AC:70:BF:98:E5:4E:B6:3E:83:F0:38:89:8F:2F:08:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41db584c-0652-3d7e-b6f4-8ceb0ceecec2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
72.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:c7:ef:5f:d7:71:0b:e7:9a:68:61:9b:3f:a9:4f:fd:a9:f4:
ca:0f:bb:4a:00:35:92:76:56:02:40:1c:1e:6d:e7:01:14:12:
ff:71:e2:a8:47:77:5d:c5:91:c2:21:a9:4f:d4:4d:4e:55:70:
da:21:6e:f9:4e:d8:53:d0:d3:cf:9e:47:da:a2:17:ac:cd:ce:
4a:90:5b:6d:25:c5:3a:47:80:75:c0:5f:7c:88:80:7a:60:6b:
90:a7:b9:85:56:eb:a4:6e:2e:c7:0e:ae:2a:1b:9a:70:01:8d:
11:4e:6a:2b:ae:d3:00:2e:43:a8:53:ee:72:94:e9:2b:72:64:
f3:b8:2b:e4:f5:3f:fd:a9:77:0e:e3:10:74:a5:55:62:fd:23:
04:6c:f6:74:e1:e4:18:f0:59:b4:e1:f4:b9:69:bc:08:60:23:
50:ed:19:f3:25:ae:a4:38:92:49:9e:f9:d2:57:97:61:b3:e1:
e0:34:0b:49:87:e6:b4:eb:fb:27:8f:45:c8:c0:4f:8c:39:90:
7c:2c:a2:85:36:62:0b:3c:cf:24:d7:5a:d6:8c:5f:b3:42:b0:
72:95:5e:14:97:8f:5e:b1:5d:06:25:78:fb:a6:b0:5d:5e:07:
52:90:94:69:74:b5:16:7e:0c:25:d8:73:8d:70:43:90:69:8d:
54:64:1d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:45 2025 by rpki-client