Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67baa7c8-7a98-33b6-a450-c339d1578757.roa
File: 67baa7c8-7a98-33b6-a450-c339d1578757.roa (raw, json)
Hash identifier: T7YLQG9UMFVTgYeNvw1D/cPaizpdisScqVUAPrJpTiw=
Subject key identifier: 1D:97:1E:03:9D:05:B5:2F:1A:82:22:D4:09:7F:FD:DE:D6:90:C3:FB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0BECF2FA83B8A18F9B4B7180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67baa7c8-7a98-33b6-a450-c339d1578757.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 99.76.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:ec:f2:fa:83:b8:a1:8f:9b:4b:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=f109ec64-0b21-42ad-a572-dc92649d891a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7f:1f:5c:8d:da:e4:f0:3e:b6:06:70:03:d4:
96:3e:15:0b:32:1e:f6:70:fa:a8:0c:7f:4e:d4:3f:
d6:19:95:a3:58:43:47:fb:d4:ef:b1:ec:0e:fa:a5:
d9:6d:df:45:c2:f1:98:72:a3:b1:e3:0e:4b:96:94:
3d:fd:7e:39:20:2d:c3:c7:4c:c9:57:79:51:59:bc:
54:1c:91:bc:21:f8:bc:ea:53:cb:87:12:2b:63:d5:
11:db:f2:31:1a:0c:64:8c:42:f1:14:0c:01:68:d8:
38:e5:1a:4f:bf:9c:ab:47:e4:49:8c:4f:f9:a0:86:
02:0e:18:5f:89:ab:37:51:4d:45:63:97:a6:f0:1d:
b5:ce:48:ac:84:d0:c5:bb:94:d3:43:e7:fb:13:a7:
6f:e4:bf:f9:5b:b4:d5:4d:a0:d3:41:34:8f:f5:72:
6c:2e:bf:52:2d:71:74:c1:eb:a7:a0:14:86:da:c2:
5c:1b:6c:2c:b7:4f:3c:1f:0f:f7:d8:14:cb:b3:78:
45:26:44:3d:3d:c2:ba:16:57:95:4f:b9:9b:20:76:
85:56:cb:b8:07:f7:b2:eb:89:78:b6:66:53:97:23:
ec:f0:5e:47:6a:c8:db:2d:18:15:b4:6e:f1:30:3a:
79:4b:72:ee:2f:39:a9:49:9f:de:79:c7:92:17:11:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:97:1E:03:9D:05:B5:2F:1A:82:22:D4:09:7F:FD:DE:D6:90:C3:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67baa7c8-7a98-33b6-a450-c339d1578757.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.76.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:85:4b:e7:65:bf:c3:4a:66:d7:78:e3:0f:c4:28:75:c1:d1:
98:f6:4f:19:f6:9e:de:08:7b:2a:84:b9:2b:62:ec:2f:3b:c8:
37:29:43:e8:08:fb:b1:26:fb:de:52:a7:27:1b:e5:dd:22:b3:
c1:db:13:a2:ba:fc:22:76:c0:1b:66:fb:94:66:bf:02:27:5b:
54:fb:eb:d3:98:33:b9:e7:51:42:47:f1:7c:44:70:d4:d7:93:
1c:b5:6d:a5:6b:f1:a6:31:3d:98:06:63:88:4e:dd:88:8c:75:
b3:ad:95:fc:93:38:90:30:54:85:4b:db:61:cc:25:fa:c9:a4:
65:de:16:53:9e:09:47:fa:39:54:25:17:bf:7a:97:67:b4:43:
9c:d1:d7:ce:ff:cb:57:fb:f9:2d:e6:61:53:b8:c1:c3:10:e3:
31:74:e1:c5:02:11:ad:51:2d:5b:fc:5a:44:a0:7a:72:de:82:
56:6b:40:c8:9c:cd:1a:32:76:2a:bc:bb:66:10:cd:f7:68:82:
28:8a:3f:8f:61:2a:0a:bc:34:a6:1b:55:b8:79:c2:1e:e7:d1:
b2:84:ac:35:00:28:27:d3:b3:74:8d:27:05:7d:aa:35:f5:c5:
88:ca:6e:fc:bc:1a:c5:06:9f:0c:34:6e:8c:f7:2c:3d:e5:aa:
93:da:1f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:23 2025 by rpki-client