Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d765cb0-ea90-3c9e-9ee0-3ee45fa8bcd6.roa
File: 7d765cb0-ea90-3c9e-9ee0-3ee45fa8bcd6.roa (raw, json)
Hash identifier: WTzWFmm0GP2ZIoNW9j3zN+YSuCWwRxy2JQl0jzsDDQk=
Subject key identifier: 9B:C9:BF:71:03:18:A5:E0:E7:74:D3:E7:03:F2:A1:B1:5E:D8:1E:C6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE4CF0851A984E38D0CCC23C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d765cb0-ea90-3c9e-9ee0-3ee45fa8bcd6.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 99.10.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:cf:08:51:a9:84:e3:8d:0c:cc:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=03f734e2-836d-4bb5-9acd-fae997abfb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:db:de:23:a5:8d:6b:06:6b:ae:84:8a:ed:95:
40:ff:33:a7:ec:79:30:be:1d:2d:3b:2b:35:d3:0a:
29:90:d6:3e:63:4f:1e:f6:b7:8d:d8:20:5b:72:44:
38:53:a3:52:df:32:4f:70:61:34:c0:50:eb:68:de:
d6:ef:eb:3f:b3:1f:13:cc:a7:fd:97:dd:70:97:e0:
bc:7c:34:37:de:d0:55:3c:1b:1b:2f:b0:64:c5:af:
f5:b5:53:ff:fc:44:65:16:0c:0d:a4:61:90:6c:80:
5d:6f:8c:07:b1:ee:ae:7f:8b:a2:58:80:43:33:81:
7c:4a:76:f7:e2:b3:eb:ee:ad:b7:cb:49:4a:af:ae:
89:db:6b:5b:40:cc:8a:74:dd:45:0b:f9:00:4b:ec:
39:4d:53:46:f9:52:fa:d8:56:c1:32:ed:0d:06:5b:
d3:da:45:12:46:f3:08:b1:ef:98:56:5b:bd:5c:07:
d4:9f:e2:22:2b:73:bc:29:40:29:e6:b9:60:b9:80:
c5:af:55:9c:05:9a:eb:b7:f6:77:c8:48:f0:91:10:
0f:b5:e2:ee:53:da:5e:df:55:39:97:dd:5a:84:fd:
bf:c3:97:3e:c5:1a:5f:eb:0f:d2:77:a7:a6:ca:42:
da:aa:0a:a6:66:14:3e:ea:44:4d:d8:c3:91:6e:35:
24:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C9:BF:71:03:18:A5:E0:E7:74:D3:E7:03:F2:A1:B1:5E:D8:1E:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d765cb0-ea90-3c9e-9ee0-3ee45fa8bcd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.10.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:9f:df:cb:13:ab:c3:af:21:5f:c6:eb:9e:20:d2:1c:25:3a:
1f:27:7b:23:26:5f:4c:cb:31:4e:ce:8c:0d:3e:eb:75:9e:e5:
75:b4:a2:c6:8c:07:80:93:18:64:ff:8a:f9:47:a4:cc:32:8b:
d3:ef:d7:6f:be:f9:c0:32:6b:c3:b4:44:54:ad:ed:47:e5:02:
95:36:d6:08:74:a7:d6:c7:8a:c4:29:03:8e:0d:e6:a4:0a:db:
27:ef:01:51:7c:87:b9:f5:ce:f8:39:8c:ae:9b:51:e8:c9:59:
e2:59:18:3f:5d:4d:c3:c0:46:ab:c0:ba:c3:e2:7f:61:cc:e0:
8c:c9:c4:f3:f1:ab:d7:da:3a:cc:59:47:98:71:5c:bf:ab:56:
ae:98:b5:7a:fb:8c:2a:60:eb:ab:34:0d:dc:8a:e4:e5:22:65:
13:28:de:bc:d6:d0:be:9a:da:f7:e3:14:ea:6e:4d:16:00:5b:
5a:bd:7f:ad:b9:b0:f1:e3:46:d5:1e:30:d5:cd:79:36:25:a5:
3b:9e:9b:a3:c6:c2:1c:f9:1e:d9:fa:a6:c3:26:54:a9:f4:f3:
d1:82:39:f9:13:16:bf:72:f1:3a:dc:31:e9:07:81:5c:13:65:
27:fa:6e:20:5c:cb:30:52:98:c1:24:67:38:62:d0:0a:78:af:
80:d3:71:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:04 2025 by rpki-client