Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5d23ad1a-47a2-3756-91f4-320f0d45fa79.roa
File: 5d23ad1a-47a2-3756-91f4-320f0d45fa79.roa (raw, json)
Hash identifier: To3zOX1k4HUrNcBRfX7J7NqyPI/9VVX2CmBTy5ccAyc=
Subject key identifier: C1:22:0A:B6:98:02:70:89:EA:25:96:24:04:97:FF:28:A3:6E:5C:D2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F08CD7DDD24CEBDBCA2182C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5d23ad1a-47a2-3756-91f4-320f0d45fa79.roa
Signing time: Fri 26 Aug 2022 12:18:07 +0000
ROA not before: Fri 26 Aug 2022 12:18:07 +0000
ROA not after: Fri 30 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:08:cd:7d:dd:24:ce:bd:bc:a2:18:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 26 12:18:07 2022 GMT
Not After : Sep 30 04:00:00 2022 GMT
Subject: CN=1818aba6-3ca8-42d9-ada9-3fdc8b189ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:37:da:2d:04:0e:e8:37:7c:75:6f:5e:6f:37:
bd:46:bd:5c:ce:c5:a3:8e:3c:a1:2a:c2:5b:33:56:
86:8d:aa:d9:70:a7:c9:ad:a9:16:a3:c6:64:e2:9d:
f9:c8:8c:b0:c3:30:3d:7a:ed:2b:b3:51:e7:ba:0f:
9a:0d:d7:99:94:13:79:8a:53:9b:02:87:61:c7:a1:
42:3a:5a:26:8d:a1:03:25:b6:00:76:3f:d8:69:34:
1a:c6:2e:d4:ac:21:9b:92:bc:fa:15:a9:63:5b:2c:
7b:06:2b:09:cd:d6:4e:e3:1d:80:1d:28:3e:85:41:
68:20:29:04:f1:57:95:21:50:70:15:33:b5:45:c0:
08:9b:0e:6e:e3:29:39:0d:7e:33:43:66:90:70:89:
bc:7d:8a:a3:7d:e5:34:63:55:3d:01:1e:ad:aa:b2:
7f:0e:99:02:fe:55:0f:18:79:d7:b1:b1:43:59:7e:
8f:8c:d5:4e:62:ed:ab:d2:1a:46:ec:3d:85:dd:62:
60:7a:fc:1c:23:4b:86:07:5d:ce:d4:6e:0e:62:f5:
5f:1d:60:49:3b:6a:ef:b2:28:a6:2f:e7:af:10:a3:
40:1f:98:53:17:ee:1b:34:75:b1:a5:f5:43:8c:e8:
1b:8a:dd:6c:f4:11:8c:95:d8:2e:69:0e:ca:b8:32:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:22:0A:B6:98:02:70:89:EA:25:96:24:04:97:FF:28:A3:6E:5C:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5d23ad1a-47a2-3756-91f4-320f0d45fa79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:1d:71:af:05:f8:eb:41:e9:a3:ae:49:f4:83:6b:60:cd:b1:
b9:6c:d5:0a:58:62:4f:e3:a2:9c:66:e7:c0:d6:1f:45:ef:8b:
1e:75:e7:e6:c3:bb:92:49:50:99:58:05:e0:86:b5:61:d3:1c:
21:72:5a:0d:bd:5c:71:cb:78:22:c5:37:41:8b:51:ea:45:28:
f8:ec:15:2a:9b:7b:b1:ca:ee:8c:b0:f2:a3:21:f0:a7:f1:e5:
64:f3:83:18:77:57:88:c8:dc:d0:42:53:04:22:3c:68:e4:79:
53:a9:f2:8c:03:1f:64:71:f2:0c:4b:98:9c:be:79:c2:96:f3:
09:ed:1e:a2:d0:17:d4:1e:7c:5e:29:27:2c:c5:d0:ff:7f:ff:
21:44:42:86:f0:1f:c2:34:98:1c:91:31:ff:39:45:7f:1a:bc:
49:a8:1e:d6:40:4d:c1:ac:e6:ca:7b:71:2e:f8:52:be:99:cc:
0d:d0:37:be:ae:66:e3:66:14:a4:02:aa:e5:32:a4:69:45:57:
b6:8d:9e:f3:e4:20:b3:64:e7:81:54:97:9f:5e:93:64:f9:7d:
0e:b9:d4:69:b9:b1:ab:21:11:d1:d2:a1:8a:73:83:db:05:e0:
f9:13:27:68:89:a2:a8:c9:dc:05:a8:57:69:e8:e7:36:80:0c:
43:6c:cf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:21 2025 by rpki-client