Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70ca88eb-1a83-32a0-84f2-7db383f50567.roa
File: 70ca88eb-1a83-32a0-84f2-7db383f50567.roa (raw, json)
Hash identifier: 6pEWO/r8Z3F4meQGhX4TRRKRLQFRkdJWS8x0hzSuhTg=
Subject key identifier: 22:07:8C:A0:98:AD:17:1D:7F:88:E9:C6:87:87:91:EC:87:AF:D5:D6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C96FD48AAEBDB8660B853E160
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70ca88eb-1a83-32a0-84f2-7db383f50567.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:fd:48:aa:eb:db:86:60:b8:53:e1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=b28a303b-f4ff-4e8f-af33-a59d79f050a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e1:bc:b1:c4:0a:f1:c4:fa:db:8d:c2:17:e1:
e5:de:ae:41:97:d5:57:65:43:7c:a1:e9:84:ef:e7:
5e:63:4b:31:f5:ac:7a:28:20:72:43:e3:a5:fb:c2:
1b:d7:d7:e2:ef:55:77:bd:23:88:1c:45:10:a7:bf:
08:1d:11:64:29:c0:b8:0e:e4:4f:95:2f:9b:d6:84:
43:ce:79:12:1f:4e:c0:a9:ef:16:05:db:b4:f8:3f:
01:47:43:b7:bc:08:ac:7e:bc:92:5f:51:fd:ff:f8:
e9:60:12:95:25:e6:31:dc:a3:e3:95:b3:43:55:06:
67:d3:32:05:18:32:1e:34:b2:6b:43:cb:2c:8e:1f:
29:a7:81:b9:22:ba:da:59:d0:17:f9:28:d8:39:d3:
7f:a8:23:d3:eb:f2:5b:21:22:6c:97:61:59:67:61:
dc:c4:14:2f:a3:d8:6c:db:71:12:f4:33:cb:d7:a7:
2a:45:d7:3f:a2:f7:cf:45:51:9c:3d:a2:bf:57:74:
82:4c:f8:81:e1:bd:21:cd:51:0f:34:21:e8:84:c7:
83:b5:05:b1:d2:a6:ef:36:08:89:3b:cf:86:ed:24:
6e:6e:ab:01:68:b3:e2:81:c6:1b:09:25:49:c3:82:
8b:57:4c:01:13:6c:60:06:c2:eb:87:d0:5e:de:1f:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:07:8C:A0:98:AD:17:1D:7F:88:E9:C6:87:87:91:EC:87:AF:D5:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70ca88eb-1a83-32a0-84f2-7db383f50567.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:a4:8e:99:12:60:7b:3c:f1:48:2a:11:65:34:68:64:98:b0:
bb:0d:ba:21:2b:14:1c:4a:1e:db:97:31:c4:72:8b:ee:0b:72:
e7:46:d7:b7:20:53:e6:85:6b:25:4d:a6:5f:1d:d0:2b:b4:7e:
3c:b3:71:81:13:7e:01:5e:cd:e0:19:10:b8:59:55:fa:51:b5:
d3:a7:8c:0d:88:c8:fc:71:f3:52:0e:14:ff:16:13:15:f4:40:
0c:60:5f:6c:ad:65:88:71:66:8b:72:67:1a:97:32:ac:ce:a8:
f5:da:52:14:fa:a2:17:11:e2:95:f4:7b:a4:28:fb:a9:b4:b1:
14:c1:06:3f:f3:a9:af:b6:dc:c3:23:4c:52:45:74:a9:22:bf:
6d:3a:19:f3:0d:e0:ff:0d:87:a7:ca:27:8d:89:cc:eb:f2:3f:
c4:85:5f:3f:ed:c5:85:d4:2d:81:d7:b2:dc:9a:ba:61:68:2c:
eb:93:73:66:12:27:4b:6a:f9:6c:47:d1:e2:18:4c:74:53:96:
80:ea:f9:59:4f:a6:06:2d:d0:b9:2f:e7:c1:3e:1a:bd:df:02:
f8:f7:a6:53:de:96:d6:77:2d:48:e9:c7:ff:cc:71:8c:17:da:
96:1e:76:94:fd:a6:a6:d3:05:b5:87:df:36:da:75:06:7a:28:
8e:d5:f2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:41 2025 by rpki-client