Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/500cd6ea-861a-382e-ac0e-5085747443ad.roa
File: 500cd6ea-861a-382e-ac0e-5085747443ad.roa (raw, json)
Hash identifier: mYaLe/Ftlr9oR57Y41WUjJPWpUmRORL8YvGpF9oYNrA=
Subject key identifier: 30:63:BD:2E:05:08:37:AB:AC:9B:B6:1C:B6:22:98:E4:98:24:FD:FB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405232DC848C37F720643EF000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/500cd6ea-861a-382e-ac0e-5085747443ad.roa
Signing time: Wed 21 Dec 2022 22:15:08 +0000
ROA not before: Wed 21 Dec 2022 22:15:08 +0000
ROA not after: Thu 26 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 198.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:52:32:dc:84:8c:37:f7:20:64:3e:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 21 22:15:08 2022 GMT
Not After : Jan 26 05:00:00 2023 GMT
Subject: CN=18101ddb-fdd9-49d3-bb39-6cc68589cbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:e3:aa:de:4f:75:11:6f:fd:65:04:c9:16:
b4:1f:be:4e:55:29:93:66:5d:00:87:bc:8a:25:8f:
4a:96:5f:fe:ae:60:d9:2f:e5:33:31:09:b9:87:b2:
15:4d:55:ef:be:c9:e5:e3:3e:fe:c3:ca:8d:ef:38:
36:3c:dc:10:62:77:6b:e4:c2:f1:fb:4b:fe:d1:34:
03:04:b1:a8:54:d9:1c:ab:a5:fc:51:5d:67:e6:e5:
53:8b:e9:93:6b:38:63:da:ad:87:73:21:09:bf:46:
7f:f3:ad:a4:2e:e6:e1:27:ac:ca:0b:ef:7b:9f:84:
d9:11:29:7d:49:61:89:61:97:d7:b5:1e:12:d7:6a:
9b:82:5e:09:c7:de:63:ae:a4:de:be:4d:20:de:19:
de:85:c9:05:35:32:d5:91:e3:34:b2:1a:9f:5e:eb:
a9:95:2a:11:10:cd:22:ae:d2:56:82:e7:bf:91:aa:
e5:92:47:f1:d8:03:93:d8:b6:8e:bb:49:fc:8c:23:
29:0d:a8:cb:21:24:46:50:7f:75:7a:b1:f9:3c:23:
fd:8e:c5:6f:5c:4d:14:f6:bb:b7:90:63:45:4b:b3:
db:4e:12:7a:0e:6f:d7:98:16:e4:4e:96:b0:24:6c:
ee:56:bc:64:c1:52:6d:4a:0b:58:a5:d4:de:56:b0:
08:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:63:BD:2E:05:08:37:AB:AC:9B:B6:1C:B6:22:98:E4:98:24:FD:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/500cd6ea-861a-382e-ac0e-5085747443ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:5b:54:41:93:73:0d:cf:5e:fe:f8:77:30:a1:9f:ca:d2:4e:
38:a9:bb:f5:37:c7:c6:74:a4:67:25:47:13:c8:b4:94:51:50:
ac:b7:2d:ef:7e:6e:bd:5a:07:66:4d:c7:22:3b:13:82:a9:cb:
20:b0:e2:d6:b1:ac:1b:6d:db:16:34:a4:9a:89:7b:a9:bf:5c:
3b:14:72:12:8d:57:5f:89:8a:78:23:05:a6:c0:89:1b:f5:69:
ed:16:79:33:8f:34:65:17:a9:7a:c6:81:02:1b:e5:85:09:b0:
63:a8:a7:32:bb:7c:2c:28:cd:43:c3:08:8b:d7:24:a2:61:e5:
41:e8:5e:81:28:18:a9:a8:58:ea:94:ec:dd:f8:ba:e2:a9:09:
3d:8f:86:86:55:33:ab:91:29:75:3a:70:5a:c5:ce:37:84:8b:
8c:2f:ab:f9:78:25:64:13:52:4e:00:16:0a:4d:18:35:ca:7e:
fc:ba:c5:23:c1:56:f9:08:ed:28:20:cd:19:d0:68:10:81:19:
cf:2f:ef:15:c7:78:af:e8:31:51:54:99:21:e2:6b:8c:d9:e4:
9c:00:e4:68:b0:b5:b0:e7:48:55:9d:23:51:6e:f0:aa:7f:db:
8e:c1:05:7e:39:7c:42:33:3a:0e:8e:1d:8b:b1:08:73:3a:7e:
71:59:83:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:32 2025 by rpki-client