Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/598387e0-055f-3c30-af9c-43e1437fb0ec.roa
File: 598387e0-055f-3c30-af9c-43e1437fb0ec.roa (raw, json)
Hash identifier: alhv9yPEAtM9b6UZ0rNxCV6Cgkzod1a8UJUvQt3n6nE=
Subject key identifier: 4E:B9:57:21:00:FD:C2:74:6E:C6:8A:E1:48:BF:DB:18:97:5F:0E:21
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584045B91D8F0F1734330F0B7B60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/598387e0-055f-3c30-af9c-43e1437fb0ec.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 65.0.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:45:b9:1d:8f:0f:17:34:33:0f:0b:7b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=38dc8a85-b4af-4471-8edc-c1481baa931e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c9:7c:fb:5b:17:a3:bb:ee:f0:55:fc:e0:1f:
8d:7d:b8:a2:be:c8:b0:e7:8c:fb:9f:76:68:86:80:
d7:76:9c:6f:03:bb:fd:3a:36:67:3b:ae:7f:70:f2:
86:c7:8c:3f:be:3f:6b:4d:d7:61:73:28:16:a8:0d:
51:7f:1f:58:85:59:e4:b3:78:01:70:08:7c:de:62:
9a:0d:3b:87:23:41:c5:b8:74:5f:b1:75:39:5d:70:
1e:f0:64:6e:45:bc:2d:66:77:fa:f5:72:70:8a:9f:
4f:af:4f:2f:c6:f8:5d:6c:a1:5a:25:89:00:ce:32:
77:01:a6:8a:6f:99:d4:57:f9:8d:f5:f0:02:61:be:
ea:f1:67:ce:0f:53:85:0f:41:0f:0c:cf:58:28:08:
b9:0a:9e:e0:07:c0:9a:30:52:1b:d7:eb:9f:d9:98:
f3:cd:86:13:f1:81:51:3d:c8:f6:9e:c5:dd:1b:2a:
be:6c:0b:77:65:60:38:14:81:dd:49:88:00:19:de:
ac:c3:a2:f6:f7:36:17:17:56:ba:23:f8:bd:73:91:
d4:f6:07:d2:d7:1d:33:d0:41:e5:50:17:7f:59:e2:
cf:cf:4a:4d:ee:88:13:13:cf:53:ed:46:64:20:c7:
a3:f1:63:0b:31:5c:8b:f2:a1:1e:8c:11:62:e1:39:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B9:57:21:00:FD:C2:74:6E:C6:8A:E1:48:BF:DB:18:97:5F:0E:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/598387e0-055f-3c30-af9c-43e1437fb0ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.0.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:4f:49:ad:b9:f4:e9:58:b9:cd:0d:60:48:5c:e9:ac:ce:45:
f6:b1:21:80:df:ed:44:06:7b:04:76:51:97:d0:4f:9d:77:0b:
71:83:ec:8a:c9:7c:6f:6f:07:bf:4f:db:03:03:ae:b5:f8:57:
e9:ac:1a:ae:a6:35:fc:ab:0a:ce:33:3d:4a:4a:48:f6:1b:82:
fc:cc:cb:9c:46:b8:ae:1f:9f:e2:fb:e2:ff:27:90:c2:72:f2:
d0:42:2e:d5:84:1a:7c:51:f7:43:80:ba:ca:4a:77:f8:b6:4d:
ff:27:7a:94:72:09:2e:b3:06:89:9d:2a:19:b5:12:34:e9:a3:
9b:76:4f:8c:0e:69:ea:b1:a6:4e:99:88:75:05:7a:81:94:cf:
cb:39:bb:57:41:7c:72:f4:25:85:c5:91:c7:6f:99:15:41:52:
19:db:0d:77:65:d3:7b:24:4b:ff:7c:c6:1d:a4:3e:89:13:13:
94:1c:e3:e0:b7:26:15:70:cc:28:84:1f:c6:2c:cc:b5:4d:92:
69:0a:70:6c:3a:ee:33:21:60:3e:52:4c:92:40:08:af:6e:39:
18:5b:8a:ce:3b:64:9c:36:41:18:4a:77:c9:68:7a:8f:7c:5b:
80:cd:bb:99:98:07:02:e0:0a:7a:76:48:08:ac:c8:19:db:8a:
22:d6:56:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:26 2025 by rpki-client