Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8209a7de-ffda-32af-a342-130510171d7e.roa
File: 8209a7de-ffda-32af-a342-130510171d7e.roa (raw, json)
Hash identifier: KwgD1phpAXQRe5SYa3gCNYV6v/O59HI992CBiwhePQo=
Subject key identifier: AC:7E:AE:98:48:74:4D:3C:21:33:45:6E:3D:EC:E8:3D:BF:FD:8B:0F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B9EDDD5548F886F1E0E89E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8209a7de-ffda-32af-a342-130510171d7e.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 99.78.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:ed:dd:55:48:f8:86:f1:e0:e8:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=21a240d8-e15e-451c-8dc8-ff01b0ad2d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1d:62:49:69:c4:ed:50:41:35:c2:df:f2:27:
ed:f3:6a:00:9a:45:31:eb:43:b0:66:f5:46:e1:5b:
bb:00:2e:61:cb:73:79:52:5c:38:c8:95:67:cd:08:
76:f4:5a:24:de:7b:75:fe:35:6c:37:57:d5:26:d0:
1f:87:4f:24:ea:c8:8f:05:00:60:be:e1:01:94:e4:
67:ec:6d:cd:09:65:cb:b2:82:68:0a:5b:9a:aa:c5:
e8:86:67:3b:65:56:3c:42:2f:78:ac:8b:43:1e:e5:
d1:5b:d8:14:50:b9:cf:de:93:fd:0e:33:b0:ea:52:
2f:c7:52:a5:ba:6d:95:ab:99:f2:e3:e8:6d:03:8d:
36:ce:d7:a3:73:7d:fa:d1:e8:4d:d7:b9:d5:3a:31:
27:93:d1:a4:39:6f:63:ea:1d:18:b6:53:ab:eb:23:
a7:a5:02:c1:f4:66:97:06:dd:8e:02:41:9a:90:20:
29:6a:94:9f:4a:24:05:f7:e4:dc:12:5d:84:71:7c:
39:17:24:f3:7b:6c:f8:24:a2:7e:fb:39:b7:c4:dd:
98:e6:ba:30:91:fd:5a:6c:53:e4:eb:84:e8:67:66:
ea:7d:ce:07:a6:6e:90:68:f8:8e:e3:c2:71:8c:99:
49:23:3f:93:28:59:e5:9a:be:ef:a8:8c:ae:46:77:
ee:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7E:AE:98:48:74:4D:3C:21:33:45:6E:3D:EC:E8:3D:BF:FD:8B:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8209a7de-ffda-32af-a342-130510171d7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.78.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:f1:6c:5b:8b:92:72:50:ce:cd:2e:b5:42:17:4e:ec:1c:88:
91:b8:f6:a1:46:fa:ca:d5:fe:66:44:79:ae:ad:1e:57:7b:88:
c5:9e:74:f0:04:43:45:d2:27:60:bd:6b:97:b9:1c:d1:96:2d:
67:4b:75:ca:d2:65:75:5b:2f:22:1c:0d:2a:cf:f4:d5:9b:47:
1e:26:02:f8:c3:03:75:a5:e0:0a:a4:9b:8e:85:0c:85:5f:b3:
d1:12:9f:83:eb:69:db:c6:98:43:1f:09:07:f5:99:0e:05:bf:
ce:fc:11:65:20:f4:30:ce:21:86:09:b3:04:82:11:7a:ca:12:
5f:54:bb:de:ae:69:4a:2e:1b:50:ac:c2:01:68:e2:e9:1e:cc:
00:89:dc:99:e7:45:16:7a:f4:78:11:e1:01:3f:3f:86:c0:84:
17:c8:52:72:c0:d8:25:99:aa:52:90:07:51:6d:f2:c7:08:f7:
25:bf:1e:b3:4e:73:8b:ce:5f:de:b7:38:6b:08:bf:e9:6c:ce:
8d:02:23:27:e1:f9:40:23:18:03:e9:1e:73:14:ab:b2:a9:7e:
29:7b:df:12:0f:d6:64:14:50:2e:af:ee:10:43:22:81:ea:d7:
20:64:db:ac:a0:98:58:e7:e3:af:0e:95:ad:07:8c:a1:4f:cf:
cf:a6:5b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:59 2025 by rpki-client