Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/509cf888-a838-35b2-9980-78ecb5928a07.roa
File: 509cf888-a838-35b2-9980-78ecb5928a07.roa (raw, json)
Hash identifier: dpM6+WAz6ss/6HbvZ9IYKb8tExVxQEHVNzpA7is+/Mk=
Subject key identifier: 5F:E0:60:10:63:5C:36:9B:CE:47:C2:70:CA:5A:03:74:BC:3D:76:EF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0C545C7F7302F2E2EE54F700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/509cf888-a838-35b2-9980-78ecb5928a07.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 192.189.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:54:5c:7f:73:02:f2:e2:ee:54:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=cbb90f6d-006b-4454-bf64-cb2b18340d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:ba:f3:20:05:d5:08:b3:81:6e:d2:0c:28:
bd:05:2f:8a:2e:66:cd:4d:2f:dd:77:df:c2:5a:e1:
d1:06:0a:89:fc:d7:08:ff:72:c7:7f:cd:64:ae:55:
c1:c2:44:ee:a2:22:e7:8d:4b:38:78:b4:b4:43:2b:
80:dd:2c:ab:6e:bc:c2:7c:cc:47:23:ca:bf:9d:e5:
fe:04:76:b5:1d:91:33:c4:d1:31:cb:50:56:45:d8:
bb:81:d5:e8:fa:6d:6f:6b:fa:b9:bc:49:02:93:d1:
8a:a9:b4:ca:1d:e5:d2:d1:e0:d3:a6:c1:e3:d7:09:
e5:22:c4:b9:36:ae:13:ae:0e:a8:52:b5:1c:14:1e:
87:ef:73:f8:74:4c:01:52:b5:71:b6:6b:55:25:6c:
e6:ba:3e:7e:d5:e3:f5:09:d0:86:a3:d6:43:9c:15:
81:81:ad:a2:8d:32:dc:af:f3:c7:6d:52:1e:af:51:
a6:96:64:49:95:02:4c:30:53:66:27:7a:b2:71:29:
4b:70:4d:e0:d3:bc:c6:26:de:fc:a1:8c:8c:c3:07:
7d:ba:87:42:91:94:1c:20:b5:76:af:ea:c1:59:03:
e1:3c:41:91:52:c1:10:f9:8d:23:70:5f:00:6e:21:
e9:8e:08:f3:ee:a0:c8:6e:65:0e:fd:36:8f:6e:05:
ea:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E0:60:10:63:5C:36:9B:CE:47:C2:70:CA:5A:03:74:BC:3D:76:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/509cf888-a838-35b2-9980-78ecb5928a07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:f5:a0:c3:31:dc:e0:73:e4:e5:32:25:ee:03:bf:b3:6e:da:
8c:b7:d0:98:c8:29:dd:14:88:2a:47:58:04:39:18:79:18:af:
86:fa:36:3a:03:b2:9a:f0:0b:a0:25:27:74:ab:86:ca:05:fd:
c6:00:0b:92:fc:dd:3b:54:91:de:6a:dd:6f:3d:8c:41:be:be:
b2:93:b7:ea:85:f1:0c:67:f6:66:65:cc:e0:f8:82:49:7c:df:
08:d6:42:0b:63:42:6c:cb:45:d1:b7:d5:55:2f:cc:b7:67:a7:
a8:50:57:28:04:e4:1d:37:5d:6b:56:6a:8b:91:67:89:c4:b6:
bf:52:aa:a3:81:42:53:3c:7c:a2:10:6d:c2:e3:0d:2c:7c:f8:
47:6a:bf:a6:cc:d2:7a:22:6d:a8:07:6e:0f:7e:b9:d7:7d:fe:
14:03:b4:33:bd:05:82:38:bb:cb:13:b5:e6:13:37:ff:e4:7a:
e6:f0:6c:61:00:95:85:5d:cf:39:96:87:34:24:b8:ab:19:86:
75:2c:82:a4:40:fa:63:f6:4b:d1:0f:fc:7a:e5:4a:b2:0b:e1:
05:52:4c:ff:5a:19:10:9a:bb:24:e7:d5:1c:8e:93:75:4d:98:
0a:e4:14:96:29:36:99:93:3c:eb:8f:98:9b:94:1e:bb:0c:fc:
52:2e:f1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:25 2025 by rpki-client