Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e998f78-f946-30f3-b3b2-ae508913f42c.roa
File: 5e998f78-f946-30f3-b3b2-ae508913f42c.roa (raw, json)
Hash identifier: qsadTxyasYMRswmEie3/HCpzOJbIr/7o+6S2f+/b+PE=
Subject key identifier: 37:DF:15:A0:1D:C1:48:7C:1B:A3:C7:50:1E:57:5C:0B:E7:58:96:BD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCEE626F806DF909B95D88B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e998f78-f946-30f3-b3b2-ae508913f42c.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 99.150.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:e6:26:f8:06:df:90:9b:95:d8:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=224196a2-eef8-4289-9dac-19f15ac3e30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:26:14:9c:ff:3b:c7:e1:66:40:f1:5f:d7:8e:
18:4c:f5:cc:db:f4:9d:1e:c8:06:30:ad:60:a1:4d:
49:a0:28:6f:b5:49:85:eb:c0:ae:02:45:7d:66:bd:
ef:b0:ad:e2:71:54:47:4b:46:f5:82:f2:cb:ca:59:
52:6c:ad:10:b5:74:0a:55:ed:51:22:b7:91:6a:4f:
58:65:d1:18:3e:bf:4a:b4:75:ea:95:f8:12:ef:62:
41:e0:1c:2d:b5:2b:0b:79:08:4b:d9:2a:40:8e:e3:
41:f5:5d:b7:fb:a5:b7:f7:f1:db:27:78:b5:18:28:
81:92:f9:a0:12:a0:b9:2b:33:ae:5f:a1:b7:62:57:
7a:f4:7e:f8:95:35:50:0c:dd:88:66:78:98:45:b3:
cc:4f:b0:6f:95:d7:06:cd:bd:10:02:eb:21:04:8a:
99:18:07:8b:c0:78:4c:f4:ee:b7:99:a8:58:e2:1d:
5e:60:cd:a1:e6:50:64:75:45:75:16:63:4d:06:43:
70:a5:23:57:47:f9:f3:43:24:c1:65:d5:ae:88:3d:
1d:91:03:92:b1:10:0a:6f:63:83:c1:4a:03:b1:e2:
ee:7c:0d:e8:76:60:43:7a:da:5f:84:7b:bd:83:15:
c8:05:20:df:39:86:9d:ad:93:34:24:cd:b9:f8:88:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DF:15:A0:1D:C1:48:7C:1B:A3:C7:50:1E:57:5C:0B:E7:58:96:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e998f78-f946-30f3-b3b2-ae508913f42c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.150.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:64:25:89:43:51:9d:d6:ed:e6:2f:96:4e:7a:d8:a8:13:69:
7e:bb:bd:ce:ed:df:ad:7f:90:fa:d6:73:9f:01:43:d5:a3:69:
52:73:a9:01:22:7e:22:68:21:d9:cb:e3:68:e8:62:9a:38:83:
d9:f1:45:6c:f7:71:d4:92:0c:b5:2b:7e:6c:dd:02:78:49:cb:
86:4e:f7:60:9d:71:72:aa:4f:7a:5b:34:08:24:e1:1b:9a:cf:
dd:d5:2d:2f:41:f9:c4:68:82:e0:80:89:77:a2:00:b8:38:1f:
64:d0:3b:5c:95:6d:68:77:29:f7:12:cc:07:a5:2a:2d:f4:46:
6c:4e:0f:86:24:45:e7:e6:0b:86:6a:d1:32:34:72:6d:ee:f0:
fe:54:b9:c4:5f:39:db:14:2c:f1:1b:60:f5:cd:1d:7b:b8:3e:
1b:79:0c:b4:6e:18:0a:4f:70:7d:f9:38:1d:b8:b1:21:a0:29:
15:c9:24:89:6d:7f:e7:80:8b:8d:1d:23:e4:98:46:ba:d9:9f:
e7:be:c3:5a:99:bf:68:88:ac:36:60:f3:eb:f4:41:66:a5:fe:
e7:bb:de:53:73:38:09:d5:01:ef:68:ba:b1:d7:b9:6d:2f:ad:
02:03:df:0c:f9:11:79:e8:55:26:6a:69:26:60:12:6d:c1:ae:
74:d7:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:25 2025 by rpki-client