Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e514994-87d3-3052-99da-016c3c5001d7.roa
File: 5e514994-87d3-3052-99da-016c3c5001d7.roa (raw, json)
Hash identifier: KQbkwoyUvjRF+3MvrsaWnLxcIw40y4oJ5w4qj6I/xAE=
Subject key identifier: 75:86:07:98:68:BC:76:10:53:E5:36:48:21:F3:34:8D:60:AF:2C:C1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBC60D4B911EB76B224B59040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e514994-87d3-3052-99da-016c3c5001d7.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 99.87.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bc:60:d4:b9:11:eb:76:b2:24:b5:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=1a8b70dc-82ab-4ecf-9283-7324e5a8ffe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:c9:03:fc:72:21:be:23:e0:e3:b0:8c:4c:
ea:26:bb:13:3c:32:9a:6e:0c:4b:7b:8a:d8:b6:b6:
dd:b8:e5:bb:43:ce:95:91:f6:67:39:87:2d:d0:03:
0b:4f:1e:07:ac:8c:c5:75:31:86:a2:f4:e8:b4:0a:
2f:7a:cc:22:91:d5:c1:f4:2a:35:d3:1b:eb:d7:4d:
25:d2:b9:99:c8:b9:5b:77:3e:43:f8:68:3e:bc:93:
31:9c:c1:7f:6d:65:07:db:48:84:a3:97:c5:c8:a6:
27:7e:0d:fc:ee:08:2e:8b:3c:c4:40:78:e8:56:03:
87:4e:10:2f:ce:83:0e:13:58:6b:55:98:b6:26:44:
35:f2:2a:ea:87:1e:e4:4c:fa:66:8d:03:b1:40:42:
9e:66:98:b4:3b:83:02:27:1a:1d:a8:0d:89:da:7b:
f3:0d:50:75:e0:27:87:1b:88:ab:6a:04:0f:3a:2a:
88:f0:3a:62:3f:63:61:1e:69:3c:16:71:12:49:ba:
d3:e5:ec:e2:7c:bf:d1:df:6f:6d:12:c7:9a:50:67:
8b:2e:32:31:7c:0d:d9:f2:67:3e:d6:d4:72:7e:2e:
8c:a0:13:d2:c4:03:62:c6:54:0f:7b:23:a0:68:39:
54:26:4b:81:e5:c3:a3:1a:3b:57:a5:02:c5:18:52:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:86:07:98:68:BC:76:10:53:E5:36:48:21:F3:34:8D:60:AF:2C:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e514994-87d3-3052-99da-016c3c5001d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.87.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:a8:e5:0a:d4:ed:97:8a:0e:11:7a:02:48:7c:63:69:ff:d0:
19:77:93:36:42:a4:cb:a3:37:e3:f7:8f:b2:01:6c:56:e4:aa:
c7:19:fc:9b:16:c6:a0:cc:52:b8:76:6e:8f:de:89:b6:57:66:
d8:a0:1c:35:c4:12:e3:58:6f:2a:c3:27:10:5b:8e:be:60:27:
e5:6d:83:cf:45:f6:d7:b9:f0:f3:75:32:e8:75:c0:16:00:b9:
e6:e0:ca:9a:02:83:8c:07:c6:11:24:48:0d:af:d0:3c:a2:55:
74:5f:42:8f:0f:b2:fb:c5:5f:00:fb:d3:c0:1f:ae:97:89:f4:
7c:47:49:0b:58:89:84:05:e8:8c:d6:93:63:43:ed:98:c3:a7:
47:b1:7f:2b:df:18:00:3e:8f:5d:e5:f0:fc:45:8b:a5:86:0f:
28:45:b3:96:74:6b:fa:d9:22:ca:bb:10:e2:5b:6d:b6:59:5f:
72:cc:8d:3b:45:b7:b1:7f:28:0f:24:68:dc:f9:4b:d3:fa:f7:
c8:49:4d:26:8f:78:ed:52:3e:19:43:d0:b0:da:71:6b:3d:87:
87:5a:57:ad:03:63:49:68:f4:72:3d:39:95:e1:9e:9a:a9:d6:
29:be:ab:e4:1c:95:cd:c6:9d:db:7d:31:0b:c0:ae:d6:96:48:
82:d1:6b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:38 2025 by rpki-client