Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82434976-4baf-37aa-848b-05f2427d0a55.roa
File: 82434976-4baf-37aa-848b-05f2427d0a55.roa (raw, json)
Hash identifier: 82L/IfLxQjOrAXh+soNy7WWiOni/RuI8DYgyG5ruiCE=
Subject key identifier: 67:06:CE:FD:B5:E4:92:7A:E9:7F:06:B7:D4:53:73:90:AF:56:E0:53
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403DB228BEFB6F6B6E9C985500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82434976-4baf-37aa-848b-05f2427d0a55.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 134.38.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3d:b2:28:be:fb:6f:6b:6e:9c:98:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=7229b545-f0b9-45f4-b214-794ddd4e7377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:29:11:9f:96:10:64:43:ba:a8:c2:62:67:
f2:0b:4c:da:5e:83:ca:7f:d0:44:7f:ad:75:75:58:
2b:33:4d:a3:e0:47:1d:ad:c8:4a:cb:4f:1c:03:82:
78:02:4e:ce:10:cf:75:a5:70:ce:74:d9:17:f3:30:
ad:dd:d8:29:96:2d:a7:77:d9:18:56:65:f7:ad:79:
ed:9e:fc:1b:e1:be:54:00:97:bf:41:0c:63:4d:4f:
9a:fd:bd:cf:74:9e:34:25:59:76:e7:14:54:83:e5:
87:32:cd:90:94:df:e9:4b:99:19:da:32:2c:c8:90:
f7:8e:15:f5:b6:75:41:4a:0b:0a:42:8c:fe:29:3c:
80:b3:4a:f9:38:87:df:78:2a:d9:ac:f6:58:30:64:
51:91:6a:54:b0:97:4f:d2:98:73:08:48:28:a7:96:
5c:7c:7d:17:1a:ca:35:d4:b6:2a:8b:d7:c7:dd:c0:
ba:de:0c:1e:d8:ac:ea:26:87:82:5e:d8:84:90:35:
62:e0:a6:69:7e:37:80:54:6e:5e:07:be:b9:8e:5a:
32:3e:db:0c:5c:8a:f5:04:03:e1:c9:77:1d:f4:5b:
8c:2a:cd:b2:47:25:49:a1:60:96:59:f3:0a:54:d7:
d5:94:0b:61:4e:e5:55:ba:14:cc:41:c0:4c:6e:29:
81:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:06:CE:FD:B5:E4:92:7A:E9:7F:06:B7:D4:53:73:90:AF:56:E0:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82434976-4baf-37aa-848b-05f2427d0a55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
134.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:cb:73:91:c0:8e:43:37:ff:b6:79:2f:8f:3b:e4:6e:13:08:
16:03:01:53:e0:46:97:51:40:8d:97:e7:86:dc:4e:4e:69:4c:
83:af:09:82:81:aa:fa:d9:c8:23:a5:56:33:c1:3d:df:1d:ad:
78:e2:da:ef:78:64:23:1e:11:cd:24:10:ac:3e:96:a2:f8:19:
a8:6f:36:d1:15:2e:36:b8:ae:ec:d2:2b:56:25:55:61:8c:02:
e4:4e:af:d0:d8:19:0d:58:97:1c:5b:7b:98:60:87:8e:5d:70:
15:78:42:ca:1a:ff:12:52:c5:07:f8:c3:d6:d1:67:28:79:dd:
7b:a9:b2:24:bd:8e:7b:69:2f:5a:e6:ba:7a:ba:d0:43:af:ba:
14:b0:37:58:62:29:93:87:36:25:6d:0a:e7:f2:bf:ed:d0:20:
15:c9:08:79:3b:6b:15:7c:11:ae:83:94:6a:7d:bc:ec:c5:bd:
06:84:3e:c1:ec:42:73:8e:8b:5a:1a:a0:ef:84:f8:9b:48:f7:
69:d5:61:51:41:12:ca:cf:cb:af:09:7f:3b:32:6f:ac:68:61:
7f:04:35:e7:8b:34:d6:7d:21:0e:10:1f:68:c8:17:4a:45:e4:
4a:8d:68:5f:85:a5:cf:6a:df:c3:38:ff:61:86:46:69:7f:94:
08:bf:a6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:11 2025 by rpki-client