Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/437f22b9-f1b0-382d-bc48-2ab326fce0cd.roa
File: 437f22b9-f1b0-382d-bc48-2ab326fce0cd.roa (raw, json)
Hash identifier: Y1JYuyzvmvCVRl0b5iH3aEJfNV2XjcniI/OhcQveIMk=
Subject key identifier: 18:44:4B:93:94:26:E6:25:DE:CE:C3:35:A4:17:E8:60:51:3B:9F:69
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D816109539675FCF739E4BDA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/437f22b9-f1b0-382d-bc48-2ab326fce0cd.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 100.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:61:09:53:96:75:fc:f7:39:e4:bd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=569c6744-eb8d-4728-ae00-45cb5b230b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:1a:37:49:ff:b7:58:53:77:c5:55:5b:aa:
8a:65:ed:ba:9e:3d:f4:43:64:44:7b:7b:3c:5d:06:
10:ce:bc:65:2d:7d:50:1e:35:b4:c3:64:cb:21:05:
0b:83:b7:c7:63:74:53:68:c7:64:50:12:a6:ba:2d:
35:40:83:47:ba:79:b2:d9:bf:f8:ce:08:1c:5f:23:
05:b7:0f:a8:77:6e:ca:cc:03:96:cb:36:dc:4f:5f:
df:1c:6e:63:fa:08:c1:97:c2:9c:e2:33:ff:8b:17:
f7:b3:35:53:cb:8a:ec:26:10:45:ed:41:4c:a9:17:
b5:32:de:d1:ad:3a:f8:b9:2a:0e:4d:5c:9f:47:21:
79:1c:78:4e:fa:c4:cf:8c:26:af:ce:77:3e:60:4a:
c4:1a:00:21:f4:b9:32:1f:bb:b9:52:a3:08:7f:ad:
77:b9:e5:68:91:70:8b:f1:a0:d3:30:7c:5f:a7:88:
6a:c9:a5:77:09:5c:80:5a:58:19:43:61:ab:c6:78:
5d:d7:25:21:51:4d:05:96:6c:ca:b8:4d:b2:cc:a3:
52:a6:54:3f:73:54:21:31:31:12:10:2d:47:65:bc:
54:3d:05:0a:25:77:f7:99:2c:ef:e3:5a:8b:d5:a0:
4e:29:0f:a0:46:a5:9f:3d:1a:a4:86:70:9c:01:85:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:44:4B:93:94:26:E6:25:DE:CE:C3:35:A4:17:E8:60:51:3B:9F:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/437f22b9-f1b0-382d-bc48-2ab326fce0cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.24.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:1b:53:75:dd:e0:ef:42:ab:2c:51:be:e2:2b:fe:2f:bc:be:
e2:5a:4f:f8:6e:01:bc:ff:c5:d6:a8:32:cc:7f:24:02:50:52:
54:87:0e:30:a9:2a:43:a4:f1:0c:a1:55:02:e3:98:a7:70:ab:
f5:8f:b8:f9:a3:03:5e:e0:9d:37:65:69:af:f3:14:42:d0:01:
fa:b0:fc:ab:30:2d:e5:f3:f9:27:5b:3e:b1:46:7d:4a:8b:7f:
e8:ed:40:41:4a:96:f4:10:f7:4c:2a:a2:98:71:50:ad:03:ff:
c3:2d:00:08:0e:da:11:24:27:ba:ad:1e:77:aa:09:ee:78:03:
6f:d8:75:a4:b2:b0:fb:c6:27:25:4c:c7:01:98:29:90:90:1b:
1d:c5:8b:ee:64:66:dc:55:4f:b7:fb:74:f8:a8:b2:9c:5b:90:
75:e1:c7:da:68:37:eb:08:f7:62:48:47:59:f7:5d:ab:7b:03:
b0:c6:17:76:d6:1e:61:ff:75:1c:3a:46:63:dd:c9:a4:e5:e9:
c2:55:b7:5e:af:73:5c:b7:ce:ae:33:60:a8:5a:2c:e9:3f:86:
93:bd:4a:a0:5f:d9:f1:e4:28:78:b3:b6:4e:c0:ba:a9:5f:44:
22:74:fd:78:ba:23:c0:4e:7f:ee:59:a4:4a:4d:fb:b8:6b:51:
fa:9b:78:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:26:58 2025 by rpki-client