Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/823c94b7-6290-3747-a2f1-3b5ee4962d8d.roa
File: 823c94b7-6290-3747-a2f1-3b5ee4962d8d.roa (raw, json)
Hash identifier: 3yGYOq559S3oM0n9jStVXlzfh5Djstl4N9X5U2w5Rw4=
Subject key identifier: 00:71:7C:37:39:3F:85:D4:49:48:C2:BE:A4:77:EB:F6:1F:21:AF:C8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401A03EDDD1732CBA8D0892340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/823c94b7-6290-3747-a2f1-3b5ee4962d8d.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 67.220.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:03:ed:dd:17:32:cb:a8:d0:89:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=62f6eeac-7a47-428a-8628-88971b217d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:02:8d:8b:6f:f1:fe:a8:ad:bc:c8:e0:74:
f1:27:c5:ba:16:ef:6d:46:b2:9d:03:ea:ed:6a:49:
92:2d:f6:93:a2:53:a7:b6:12:0f:2a:32:09:f3:01:
ed:e7:2b:72:d8:e9:f4:1d:4b:d6:42:5d:79:d2:68:
cd:43:e1:1f:ad:f2:42:c4:6a:dd:33:23:50:74:10:
b3:5e:c6:2f:ce:f7:78:91:7a:7a:5c:9f:3a:7a:47:
c5:c5:15:26:3f:4b:40:cd:42:d9:2e:6d:3f:76:f9:
c9:79:b9:46:eb:2a:fb:2a:ec:fd:70:a3:f6:3c:d8:
3c:53:4a:21:7d:f7:e4:b5:c2:cd:1c:2d:cc:d4:52:
ab:10:23:34:12:68:a2:83:36:e6:21:a9:c2:8b:ef:
10:6d:72:34:46:72:7f:cc:2d:4b:f5:a9:7e:ee:08:
77:86:95:ed:73:37:52:a3:ad:20:26:d3:89:de:00:
db:e1:e9:b0:ba:f6:2c:62:b4:39:f4:f9:2f:da:12:
fd:60:f9:2f:a2:d3:fa:0a:41:2c:8c:b5:d6:44:9d:
b2:63:f9:af:43:78:60:ae:ba:aa:cf:89:f1:bd:8e:
2f:1c:71:9e:c3:33:61:de:52:b5:96:20:c1:ad:4a:
e7:fb:bc:50:58:39:b3:2b:9d:12:55:1a:ed:9b:52:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:71:7C:37:39:3F:85:D4:49:48:C2:BE:A4:77:EB:F6:1F:21:AF:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/823c94b7-6290-3747-a2f1-3b5ee4962d8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:1d:dd:c3:b5:86:20:f9:5e:c7:ad:cf:1f:90:f2:d9:0c:97:
9b:37:d4:41:e6:85:a5:aa:7a:e7:19:4d:96:2b:59:67:5a:a6:
a4:5f:17:d6:67:1b:96:17:e3:8d:c7:9c:5e:6a:8b:f8:75:5d:
b2:36:0d:21:b1:05:4b:31:72:04:24:9d:e8:f9:35:c8:59:04:
df:37:3f:e6:26:38:29:df:75:d0:9d:3c:1e:11:19:d5:87:6e:
27:eb:d2:00:5a:ff:21:b2:31:08:2b:d1:d0:fe:c2:8c:ba:19:
da:03:dd:4a:fe:e1:16:f5:3f:b3:8c:a9:3a:36:fd:30:73:60:
97:64:ad:c8:78:9f:a3:0c:6c:8c:68:11:bc:39:ad:cd:06:a8:
41:71:91:cc:37:50:1e:45:93:80:f9:ae:58:91:9b:60:4d:b7:
71:5d:ba:4a:2b:bc:e3:e3:d3:a0:62:bd:61:72:13:73:ec:47:
92:62:62:8a:16:34:27:5d:79:cd:9a:9e:34:dc:e7:5b:58:da:
d7:d0:43:87:d8:c0:3b:b5:99:ba:cd:b7:22:79:1c:b1:60:71:
54:a6:15:b3:bf:99:ab:bc:14:d2:77:c9:b3:8d:33:aa:b9:cf:
58:b1:f8:55:c7:26:c8:d1:27:f0:d5:ff:33:ff:cb:95:02:bb:
ce:0b:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:53:26 2025 by rpki-client