Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84e8a9e4-4f32-3c2c-9d06-9508363e52cf.roa
File: 84e8a9e4-4f32-3c2c-9d06-9508363e52cf.roa (raw, json)
Hash identifier: 7W1uwkhwM5BP4uSvt+1XJ0mIlSWrMw6op+//TryG4k0=
Subject key identifier: 28:C3:8F:98:C9:53:0A:2A:A7:4A:91:C0:67:4D:8A:D5:26:D2:2D:13
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401A89CE800BB8C29362C65E40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84e8a9e4-4f32-3c2c-9d06-9508363e52cf.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 99.156.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:89:ce:80:0b:b8:c2:93:62:c6:5e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=3c367c41-8e7c-4721-b5bc-9e874c9f0c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:60:04:ef:f6:5a:22:2c:28:cd:a3:41:8e:
8f:95:25:6a:fe:6d:b4:df:06:37:25:a2:3f:ff:c7:
43:4f:c2:09:d5:d0:91:1a:3d:e3:72:1a:48:38:6c:
bc:af:b1:5a:27:4d:bb:c3:5d:cd:92:24:cc:1e:85:
fe:28:81:cf:14:37:9d:46:d5:ec:10:cd:ae:01:ce:
c2:72:f9:79:07:a1:21:23:45:dc:65:a6:03:04:ab:
ac:00:39:08:f6:63:b4:07:5f:17:c2:37:91:b5:dc:
b9:ac:0c:81:ca:63:e5:df:75:dc:9a:ab:28:7c:e8:
48:3a:14:5b:b9:98:aa:d1:c9:17:f1:d1:d7:d2:29:
18:f2:cc:ce:35:48:9a:74:08:d7:ac:15:f8:f1:9e:
4f:7b:0d:4d:44:b5:7c:22:d7:0d:34:95:bf:06:d2:
51:68:c8:21:1f:82:2a:85:31:67:96:d9:62:da:f5:
c7:41:c2:db:2f:b1:d5:f8:29:42:55:b7:ec:a2:c8:
f5:e6:b6:45:19:f8:78:fc:7c:72:c9:4d:f8:46:ed:
36:77:7f:31:ba:df:a1:57:28:41:64:7c:de:a2:d9:
d7:e3:d0:3c:e1:6b:ec:fc:38:5e:ce:0b:d2:36:cf:
41:51:b9:86:a6:3c:39:70:7e:df:5d:10:64:5e:de:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C3:8F:98:C9:53:0A:2A:A7:4A:91:C0:67:4D:8A:D5:26:D2:2D:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84e8a9e4-4f32-3c2c-9d06-9508363e52cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.156.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:be:b8:ca:fe:90:f9:eb:e3:7d:a5:e1:f3:29:31:1d:2b:57:
c0:4c:9b:1c:10:18:fa:f8:6d:7a:85:25:d5:b5:85:7d:d0:26:
d0:de:06:af:ed:53:a3:df:e4:e3:8f:6b:ed:b5:7f:e4:62:c4:
89:68:be:78:dc:56:19:c0:b2:8c:08:6a:18:bd:de:9e:45:21:
3d:ba:c1:e3:a5:74:c4:29:81:28:04:8c:37:92:10:e9:e1:01:
5a:d9:8d:91:33:a9:37:83:89:9c:37:d2:96:21:97:a8:c5:6c:
09:a7:c3:25:80:4c:22:f6:3c:16:5f:0c:2f:18:e0:fa:ff:4c:
ab:1b:3c:94:a6:45:a9:b2:1a:fe:34:55:f3:b7:4e:69:2c:90:
1a:ee:c8:5c:6d:aa:c9:bd:73:24:5b:8e:1e:fb:d1:5c:f7:11:
f1:78:b9:3c:ea:dc:a9:fe:58:03:fa:f9:17:3c:a2:b6:ea:af:
f9:0f:59:e7:d9:87:f9:22:d2:10:23:34:54:9b:e4:c7:22:8d:
d5:2e:6a:06:26:14:5d:1e:70:41:31:4c:51:f5:51:8b:14:42:
cb:1f:7b:01:d8:34:77:5e:8d:0f:bb:da:2d:55:dd:a2:22:6d:
57:d0:e9:58:9a:cc:05:47:a0:76:92:2d:10:63:cd:2a:7f:0d:
59:60:46:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:15 2025 by rpki-client