Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c8674e0-f59f-3626-8d0c-9d9fbc6d0a27.roa
File: 4c8674e0-f59f-3626-8d0c-9d9fbc6d0a27.roa (raw, json)
Hash identifier: sW/kduaDPS9+TI9v5594+bxPF9D0wOTkPzmlyG3mzGs=
Subject key identifier: D6:B3:9D:66:02:6C:EA:5E:AA:12:3F:FD:81:99:9B:11:E1:BD:0A:B1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DD13434AC2E631D735BCA2388
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c8674e0-f59f-3626-8d0c-9d9fbc6d0a27.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d1:34:34:ac:2e:63:1d:73:5b:ca:23:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=dc126cef-1379-421a-beb0-0b3e02c9965b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:df:b7:f5:87:a9:7c:dd:f9:0d:32:7a:67:aa:
a3:ba:6a:e2:c3:64:27:bc:f5:8c:3e:04:6b:6f:9c:
a4:30:89:48:1d:8c:27:c6:a9:65:69:d6:f0:f7:97:
b2:fc:25:ad:b6:6f:20:bd:4e:0b:68:eb:1d:ee:07:
3e:83:23:94:8e:61:29:27:98:2e:1b:c7:32:e9:11:
39:12:b9:bf:46:f1:ef:76:64:ff:11:4e:43:3b:ff:
a7:ae:82:18:f6:5f:3a:b5:ab:6c:20:a8:1b:5a:20:
86:48:b9:bc:0d:26:a1:1e:cb:3d:4c:59:22:67:13:
98:d8:32:17:13:68:27:2c:27:e4:09:9d:4a:9c:e7:
ac:f1:67:6c:ae:ef:b8:a8:c2:5d:47:7c:bc:f6:d7:
25:3c:bf:0f:21:63:a2:a6:57:b9:2d:8e:7f:0c:fd:
44:30:5c:37:dd:ff:ee:0b:78:38:0d:88:91:9b:7f:
17:25:bd:58:7f:0c:ce:15:33:2f:a9:0f:af:0b:6d:
1c:54:ad:6a:e5:23:df:1e:ae:81:88:4d:e5:37:51:
7d:55:a2:2d:30:a6:c5:b9:0a:e2:e8:9b:d9:bd:e7:
9d:b6:85:5a:cd:67:3e:9f:2b:2f:37:ab:10:92:d7:
ba:10:4e:71:10:24:53:8f:7e:0f:2c:6f:3e:83:11:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B3:9D:66:02:6C:EA:5E:AA:12:3F:FD:81:99:9B:11:E1:BD:0A:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c8674e0-f59f-3626-8d0c-9d9fbc6d0a27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:c3:6c:a9:44:8c:66:21:e0:5c:d0:14:c0:15:30:f9:db:94:
6c:bf:fd:f2:02:43:d0:36:c6:c4:e0:10:be:e9:c5:b0:50:11:
dc:a1:02:a0:80:d2:1a:48:34:36:47:c5:8b:58:ab:7d:09:37:
74:74:f5:51:98:0b:2b:f7:23:9b:31:bf:b2:71:71:26:fd:4a:
01:b0:57:0f:8c:71:1e:e6:af:ca:6e:ba:00:97:66:ff:a2:f4:
97:e8:99:09:19:c6:1e:be:9e:51:5a:4f:78:ca:7c:03:23:e8:
7f:2f:30:ee:33:57:8f:2a:dc:76:fe:55:69:ec:05:40:78:79:
98:c1:b4:aa:e6:20:11:9e:6e:a0:9b:42:ab:7d:11:26:b2:b2:
82:55:2c:2b:3d:97:45:5c:a2:ff:6a:82:d8:ca:84:b0:2e:e9:
a1:dd:5c:33:d0:df:9d:a0:ec:12:8b:99:4b:4d:26:df:b5:26:
1f:1a:f7:e8:9c:16:56:bd:da:68:0a:4c:04:5f:09:2a:ea:d3:
2a:12:e0:5d:58:48:aa:7b:b3:05:38:03:82:b7:e6:fc:a7:3e:
54:14:c9:39:8d:9f:0c:cc:4a:0c:cc:cb:0e:b9:99:08:c7:8c:
a5:1e:ef:c5:ed:2c:38:0c:92:07:d9:67:bc:e5:8f:91:26:83:
56:ea:5e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:21 2025 by rpki-client