Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80fce725-bb88-38aa-8294-a96cdccc145b.roa
File: 80fce725-bb88-38aa-8294-a96cdccc145b.roa (raw, json)
Hash identifier: nPjWkAOaB/KZ8L36oU8jXwL01lQbPvN/BMe7zUnv/iw=
Subject key identifier: FD:B2:AC:42:C9:9A:42:33:CB:30:A7:C2:C0:24:89:33:87:8D:3A:C1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF8517326416D6640CF3D9300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80fce725-bb88-38aa-8294-a96cdccc145b.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f8:51:73:26:41:6d:66:40:cf:3d:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=c3ad23b9-c78c-45e7-b245-a374c19503ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:55:a5:90:ed:5f:fc:99:34:5d:e0:15:bd:9a:
89:d5:e4:2b:b3:f3:b0:d8:02:a8:6f:55:d2:c5:29:
02:b2:2b:ac:d4:ad:e3:30:68:0b:cb:c3:a8:6f:6b:
f6:e0:31:08:f0:0b:48:28:63:1b:27:05:4e:f7:04:
a2:fe:ec:81:1d:02:47:92:d5:40:22:58:e8:13:a5:
7c:9f:a5:8f:af:89:1e:2e:38:78:e9:41:e7:9d:bf:
77:32:68:f6:d4:94:e8:ca:e0:af:7f:44:ca:54:77:
46:a2:e6:b9:47:ce:2a:33:fa:26:6b:4b:6c:60:97:
77:19:32:d0:27:c5:a2:de:8a:a7:96:5d:cb:88:7a:
6e:52:b9:5c:44:da:cf:3a:27:af:be:59:4e:de:13:
37:9f:3c:b0:3b:36:1b:fa:b9:98:54:4c:69:90:64:
3c:ce:13:f8:41:ae:6c:88:84:cc:78:e6:74:a3:da:
e2:03:02:27:99:4c:20:df:1d:0f:83:74:2c:c4:77:
7f:52:06:54:54:0c:83:96:c0:c8:f3:58:26:17:76:
61:da:e6:11:7d:c6:5c:c3:6e:0e:bb:4c:a0:3e:ec:
57:20:48:0f:92:0a:cd:62:88:6c:13:f2:4b:fb:a5:
80:34:ca:16:f4:df:0e:57:68:69:7f:ff:fe:b3:c5:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B2:AC:42:C9:9A:42:33:CB:30:A7:C2:C0:24:89:33:87:8D:3A:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80fce725-bb88-38aa-8294-a96cdccc145b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:ea:3e:1d:87:a3:49:1a:92:21:f1:10:98:99:a2:48:25:d4:
c8:58:63:4c:2d:c5:3e:97:7b:e6:be:9f:6a:74:90:11:91:da:
fd:85:bf:4f:b1:cc:7c:5a:9f:38:d2:42:68:cc:4a:84:f1:02:
80:95:0d:a3:55:63:cc:1c:e3:cd:95:9b:65:6b:c1:d6:16:35:
05:f0:96:2b:82:bf:65:dc:53:80:ef:33:af:5f:ec:80:d7:5a:
d8:28:00:4b:0a:30:fc:bf:02:53:39:4a:80:bd:78:96:c7:9a:
ad:aa:a1:fb:bf:de:00:2d:5f:73:8f:a9:c3:e6:a4:81:f6:1b:
7c:5c:ca:9f:65:1f:e5:84:5c:34:67:7b:64:a7:a7:5a:a8:33:
72:05:08:11:80:41:d7:e4:bd:86:b4:3b:a7:a9:b2:68:cf:13:
e3:ba:0e:06:2d:71:ea:ff:fc:03:63:81:f0:45:c4:63:c6:7a:
42:ac:b8:72:80:8c:ce:24:62:eb:76:cb:21:c1:d8:19:69:30:
cf:5f:54:51:c5:34:90:f3:24:e0:86:ed:f1:b1:d9:ad:ed:26:
61:67:7c:77:b2:c8:c2:8b:1b:44:ed:b9:57:d8:77:1e:f8:bc:
ca:a4:30:d3:a7:a4:6e:f7:aa:99:68:f7:6d:65:72:5c:ff:13:
26:d8:38:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:23 2025 by rpki-client