Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4b9c0c7b-2280-3f58-b03d-cbd8d00c9938.roa
File: 4b9c0c7b-2280-3f58-b03d-cbd8d00c9938.roa (raw, json)
Hash identifier: 4B6MaoAGge5DkGxzfYCCAwrsE3L5CY0oY9E8f05W/Gg=
Subject key identifier: DF:21:1B:18:B2:03:3E:14:1C:75:81:0E:AD:73:F5:A7:27:8C:75:49
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F15EAE5A977588A66692A24B0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4b9c0c7b-2280-3f58-b03d-cbd8d00c9938.roa
Signing time: Tue 30 Aug 2022 20:45:07 +0000
ROA not before: Tue 30 Aug 2022 20:45:07 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 128.81.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:15:ea:e5:a9:77:58:8a:66:69:2a:24:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 30 20:45:07 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=35f49ad8-0106-4800-ac53-8a35370569a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:dd:e6:6b:77:a9:9f:2f:49:3c:ff:0d:cf:
0c:9f:22:5a:8c:5f:65:8a:8f:2b:bc:15:48:77:55:
ab:1f:ea:00:f8:37:2e:a7:48:11:fb:ce:cf:e7:93:
84:7a:1c:01:c5:b8:ea:f8:f5:b7:29:0f:fa:44:c4:
3a:12:ba:b6:55:65:2f:7c:19:dd:bf:42:84:2c:1f:
c3:ca:40:18:ad:a4:be:fd:a7:b5:cb:80:59:5f:b4:
75:aa:f2:db:21:e7:dc:19:4c:e2:f9:ce:37:ba:91:
34:10:cf:79:c1:3c:b6:9a:32:8e:07:f2:d8:2d:4a:
a8:47:eb:71:8c:0a:e0:54:e5:1e:d2:dd:45:82:16:
46:4f:1e:6e:52:6b:b5:02:92:49:24:9d:f9:b1:17:
44:8e:43:59:92:dd:4d:88:90:5c:1d:70:c6:27:e2:
76:eb:0a:ff:7d:eb:94:ef:cd:1c:c8:c9:75:32:52:
50:91:99:d3:86:5c:e3:62:a9:86:7d:72:26:78:9c:
d1:dc:48:35:eb:c0:5f:b4:30:71:08:46:e3:51:1a:
af:ee:53:94:9c:a2:e3:df:49:b7:11:56:9a:af:97:
8a:80:88:24:c5:77:66:a9:19:bf:d9:12:23:07:52:
56:85:92:25:25:9c:37:d3:69:d7:23:e2:39:54:fc:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:21:1B:18:B2:03:3E:14:1C:75:81:0E:AD:73:F5:A7:27:8C:75:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4b9c0c7b-2280-3f58-b03d-cbd8d00c9938.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.81.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:5f:6a:a4:7f:05:d2:63:2f:70:94:79:54:24:c2:85:ee:87:
fc:91:c6:2c:17:c5:78:4f:ab:6c:22:00:a2:e1:21:2c:73:e2:
36:7f:0f:e5:c1:a6:cc:a1:27:97:cc:55:25:f7:d2:cd:3e:ed:
ba:da:bc:8f:3b:dd:3b:02:1c:54:41:ab:be:e2:c7:f6:60:42:
b4:93:8a:df:fd:8f:79:ba:2a:49:58:43:cb:4e:05:84:c6:7d:
2e:c0:0b:b5:09:8b:cb:12:27:81:5f:39:0c:d8:26:5f:d0:2e:
b7:21:a0:f4:67:66:17:ef:2b:7d:5f:ea:63:55:ea:d2:29:e0:
36:72:d1:77:eb:19:2d:cb:c6:ef:2f:57:c8:06:0e:ca:65:eb:
88:39:b9:63:cd:b5:06:31:58:05:cb:06:a2:5d:c2:b0:3a:bc:
25:84:be:61:ec:75:90:8a:60:d9:4d:fd:a3:8a:a8:51:ff:3f:
b6:6a:db:3e:0c:df:ac:64:41:0e:91:4a:52:da:cc:53:61:e6:
23:c3:37:a4:2a:e0:6b:a4:c1:f4:e9:e0:3f:9e:38:e1:58:b0:
78:50:2a:f1:76:cd:df:9d:d7:7f:7c:30:99:53:c3:82:2d:8a:
89:75:0a:6c:e5:75:37:4b:91:7e:b6:4a:67:64:90:cb:3e:04:
dc:a7:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:32 2025 by rpki-client