Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71c39b9f-5ddd-38f5-be89-ae7689875d72.roa
File: 71c39b9f-5ddd-38f5-be89-ae7689875d72.roa (raw, json)
Hash identifier: AY5Rqq05tA9odk4dXQqEDuUHWwMJUHXy7tqPnaNhTZg=
Subject key identifier: 35:AA:90:19:D4:9E:7A:31:F4:17:3F:9B:E8:73:DC:6A:41:B2:0B:D2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A25F9ED41562DD72AE0BD00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71c39b9f-5ddd-38f5-be89-ae7689875d72.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 99.10.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:25:f9:ed:41:56:2d:d7:2a:e0:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=03c07dd5-8697-4aca-8146-3aae24b34ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ce:b4:65:74:f1:71:d9:f5:e8:4b:fc:67:1a:
ee:b4:62:58:af:0d:44:2c:e1:da:b5:94:e2:b9:85:
86:8b:37:99:7c:41:32:53:28:9f:c5:2b:1b:3b:78:
21:f4:9a:b5:bf:79:13:e6:4f:71:47:f8:78:73:46:
70:bc:82:dc:06:00:c2:08:ab:82:3b:3a:71:f2:90:
a3:77:41:3d:2e:fe:af:cf:cb:da:1e:6b:5d:73:a1:
d0:5e:b4:a5:52:4a:85:7d:b4:49:da:89:06:93:ab:
f2:de:37:33:de:74:8c:60:5e:1d:a8:9e:1c:84:be:
95:b7:2c:09:17:bf:24:ba:d3:7f:2b:27:1d:8b:85:
0c:72:d6:b1:87:dc:55:1c:5a:80:6d:74:f5:48:c7:
f2:55:52:fc:e6:ca:95:27:14:d1:4c:13:c9:98:82:
83:b1:e5:e4:6a:07:2c:8c:23:57:51:f4:f2:2b:32:
99:82:51:35:dc:dc:66:dd:21:0a:8c:f8:ac:86:14:
1d:e7:25:d3:7a:cc:35:8c:bd:cf:11:07:5d:cf:f9:
cc:29:a0:5b:1f:70:89:47:68:e5:50:8c:2b:0f:7b:
32:cc:9a:dc:2e:14:91:f8:0d:16:4f:31:e1:9f:9b:
47:27:46:a6:4f:4f:8b:03:d2:1b:a8:bb:14:91:1f:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:90:19:D4:9E:7A:31:F4:17:3F:9B:E8:73:DC:6A:41:B2:0B:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71c39b9f-5ddd-38f5-be89-ae7689875d72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.10.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:14:90:fd:2c:e7:83:2c:20:df:eb:b5:2a:c6:4e:86:92:2d:
4f:03:c9:c5:c5:34:cb:c0:3e:b0:62:57:10:d8:1b:7a:10:2c:
5e:ed:2e:dc:6d:fc:18:37:90:2f:1b:b4:9d:63:51:d7:ea:f0:
d8:9a:8d:b4:92:47:69:24:19:eb:c5:1b:9f:bf:7d:bd:ed:5b:
ec:da:b6:10:14:d8:bf:f4:25:71:f7:66:1b:e4:dc:75:75:30:
09:2d:b7:c2:1f:28:23:a3:1c:39:a6:99:35:c7:2f:4e:58:69:
b1:c9:5e:db:b3:f1:af:6b:ce:40:e7:7b:bf:26:55:43:24:d6:
14:5d:7e:21:8a:ba:7a:f8:6d:11:ce:ad:af:e9:fe:cb:49:ff:
01:82:a1:06:57:fb:46:35:23:35:e1:6a:bf:d4:07:ec:a9:76:
05:7c:b6:c9:bc:54:ad:b2:ab:97:45:75:95:8b:61:14:7c:80:
47:3f:c0:63:3a:ab:c9:36:cb:72:90:8b:2d:46:7a:1c:a5:37:
9f:88:35:88:84:84:56:de:51:98:61:5a:ad:40:a4:99:a3:c2:
23:f3:7d:8f:68:28:d5:6b:1b:9c:2c:68:63:d2:76:0d:15:da:
58:c6:70:d2:a0:59:54:6f:55:94:b5:b1:24:98:1c:29:0a:24:
d5:5a:01:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:26 2025 by rpki-client