Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6fa1a9f0-8e84-34e4-8c8e-2b1eabf91d0f.roa
File: 6fa1a9f0-8e84-34e4-8c8e-2b1eabf91d0f.roa (raw, json)
Hash identifier: MhDgefsnRAsqaQenwdUl8rQAgvK7qYR7lnn7Esk5CmA=
Subject key identifier: A9:FB:BD:A6:A1:2E:13:A0:45:C1:81:D6:C1:D4:F8:7E:9F:ED:90:21
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE4E56CC5EF6BA8AB071B8B40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6fa1a9f0-8e84-34e4-8c8e-2b1eabf91d0f.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 99.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:e5:6c:c5:ef:6b:a8:ab:07:1b:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=a126200c-e933-4303-8d48-2ca246dfaf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:d1:00:41:87:38:e8:44:4d:55:ba:bd:df:
df:4c:ca:23:ee:4f:35:47:b4:f9:b9:e4:66:a9:94:
08:78:6f:7b:13:c6:f6:55:42:03:fa:87:9c:26:29:
c0:03:ce:4f:43:37:e9:6e:1f:7e:22:61:5b:b7:e8:
59:e2:fd:15:af:c3:4e:e1:ae:b6:3f:be:02:d8:7f:
b0:96:c5:03:2f:5d:da:52:8c:94:32:72:10:c2:8d:
e2:97:bd:4d:72:09:92:38:43:4d:35:29:f1:fd:54:
c0:9d:9c:97:df:1d:e4:83:5a:98:db:8b:9b:0e:33:
0a:38:ee:d2:f2:13:ba:16:80:ed:0a:c7:88:e4:ab:
03:62:72:c7:0c:03:c3:52:03:d5:78:4a:f1:fc:d0:
b4:96:8f:0b:58:e7:4f:21:b1:de:31:81:7b:26:b5:
ec:07:cb:00:01:fe:78:f6:94:9a:cd:28:aa:5d:ef:
09:e7:7d:61:08:e5:0d:94:c5:ec:97:c4:a4:ba:b0:
56:a0:7f:d5:91:89:95:09:e3:21:58:52:be:c4:ff:
2b:bd:d5:13:38:cc:35:a2:85:9a:39:9b:77:20:9a:
7a:4a:6d:b6:80:7f:6c:cd:99:ca:6b:63:13:ae:e2:
96:8b:00:13:ba:ab:a4:a8:e4:8a:b4:cb:0b:ba:0c:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FB:BD:A6:A1:2E:13:A0:45:C1:81:D6:C1:D4:F8:7E:9F:ED:90:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6fa1a9f0-8e84-34e4-8c8e-2b1eabf91d0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:6e:c8:7a:70:ef:d4:db:4a:98:b5:c0:37:61:46:8d:a4:04:
fb:b1:65:53:e0:82:89:9a:05:37:00:f6:1d:8e:ed:ae:d5:53:
53:e9:0e:ae:f5:d5:03:79:3d:bd:c2:f4:7e:77:b2:b7:03:e4:
0b:f4:ef:7e:f2:60:42:d9:94:32:b8:d2:f2:41:b0:97:24:5f:
11:a1:5a:2c:b9:72:b9:7c:81:39:1a:22:24:05:84:ce:f6:a7:
77:bc:e4:1a:17:41:18:00:87:5d:f3:39:e4:49:99:07:12:69:
d5:f3:66:48:71:ec:ed:43:f8:02:9b:aa:97:c9:a0:65:ae:b1:
97:9d:81:88:d5:75:b5:e4:56:1b:84:0f:23:b3:fd:2a:d9:0a:
9f:2b:17:e8:e7:f2:6f:36:25:db:34:8a:ea:36:3a:b9:1d:4f:
9f:11:08:1e:4d:d7:cf:bb:5b:b3:e6:e1:84:1e:af:ab:10:ba:
92:89:6e:2c:b4:40:73:50:32:6b:e4:21:52:42:ff:ab:01:a3:
37:32:00:be:06:6c:9e:3d:01:32:12:7d:7f:cc:f8:bf:d1:93:
3d:1a:98:9c:bb:9f:7a:b3:c6:0d:00:ef:ea:ed:f2:b5:ea:22:
2e:30:01:af:39:60:45:4c:32:a1:cf:91:80:54:84:da:33:32:
7e:78:c6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:53 2025 by rpki-client