Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e613f0f-f927-3c6b-83b7-a16c7a367763.roa
File: 7e613f0f-f927-3c6b-83b7-a16c7a367763.roa (raw, json)
Hash identifier: D3B7LsxDJpikzE3IN+7OTABrW5wamc2qXolZeNeopn0=
Subject key identifier: 3A:79:13:B0:5E:0A:6C:77:44:8F:6F:BB:71:62:78:AA:3F:79:77:19
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406E2C620491D2EE7B3C558400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e613f0f-f927-3c6b-83b7-a16c7a367763.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 70.251.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6e:2c:62:04:91:d2:ee:7b:3c:55:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=5e303ff5-29c8-43e0-a7f5-e949244b9660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b6:f8:f4:49:d2:2e:56:d0:34:7f:70:2d:a0:
7c:e8:44:ae:a6:5b:2e:d3:d7:c9:c3:60:64:2e:2b:
ff:40:5c:33:cc:1b:39:60:82:07:40:40:6f:de:0d:
f3:5b:8c:1e:58:14:ff:c7:03:65:c8:84:ed:91:5d:
43:fd:18:49:8e:5b:7f:90:60:37:e2:5f:c1:9e:52:
00:27:02:52:3c:81:40:4c:f6:13:7a:3e:04:3a:30:
48:94:70:17:9f:8a:fc:7f:f9:34:f0:fc:83:56:f1:
f3:fa:8d:4b:b7:b7:60:57:19:b3:eb:4f:33:cd:cf:
16:48:5c:0f:fe:45:8b:fb:10:60:9e:97:8c:6d:ac:
cd:85:f3:f6:ab:25:c8:d5:34:7c:43:9b:a6:2f:4b:
f4:29:85:87:57:c3:a0:4a:f0:ca:53:c0:0b:f1:a0:
fc:af:cf:9b:7b:71:de:72:cf:3e:19:45:1c:da:01:
26:10:ef:1b:2b:09:c0:d4:0c:17:50:2b:a3:3e:99:
03:d2:e2:cf:25:f1:a1:21:dd:a9:17:b3:cb:72:83:
b5:78:ec:8a:e5:c4:bf:72:4a:bc:5c:d8:cb:5f:29:
21:93:eb:df:d3:06:6d:37:c8:02:77:3a:d5:a2:56:
fd:ec:16:39:dd:47:4e:69:7f:f7:a6:ee:5d:15:06:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:79:13:B0:5E:0A:6C:77:44:8F:6F:BB:71:62:78:AA:3F:79:77:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e613f0f-f927-3c6b-83b7-a16c7a367763.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
70.251.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:f8:e2:10:2c:4e:1a:f5:bb:23:89:84:21:d7:8a:1d:8f:f9:
bb:d3:36:40:70:fc:fc:d3:63:fa:b5:1d:e1:33:7f:49:5e:ec:
48:00:dd:83:17:9d:17:c9:d6:84:54:a8:77:70:54:ad:72:9f:
7c:c9:df:7a:e0:15:70:07:d8:c0:49:3e:19:d1:98:41:5f:50:
75:16:5e:d3:5b:65:68:8a:c9:a5:87:72:6a:2e:6a:54:2e:a3:
c9:f7:1d:f7:58:51:c6:02:06:0f:fa:5a:77:d0:b2:c8:36:a6:
d9:8f:a0:f5:b0:fd:60:30:fb:5e:ad:5b:c6:a2:d6:40:42:37:
0e:df:98:10:dd:a9:56:75:97:6c:e8:ea:d7:c1:f9:3a:61:05:
df:e6:86:3f:69:fe:80:9d:c4:f4:20:c2:83:10:55:da:ea:8b:
1d:1c:4b:c3:c5:68:a4:10:95:cd:6e:95:d8:60:01:91:0b:14:
c7:fe:3e:ce:73:37:bb:df:86:b5:49:13:0d:5b:b4:6e:6c:e9:
cd:c8:34:fd:6e:a3:a3:c4:aa:98:f1:68:80:60:b1:bd:ce:b1:
20:76:85:46:dd:be:1e:81:30:10:0c:a4:2e:ef:a0:91:ff:fa:
0b:9d:6f:1c:55:a8:e3:e0:b8:9d:02:73:cd:65:37:11:5b:03:
93:5d:46:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:08 2025 by rpki-client