Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9107d90f-7d05-325b-9da0-c8392831264f.roa
File: 9107d90f-7d05-325b-9da0-c8392831264f.roa (raw, json)
Hash identifier: 12CwtZF2WUTcE4m0ZHgJqe+gP6OfS0UmZS7jaY/pWd8=
Subject key identifier: ED:D3:6F:FA:70:8E:73:44:69:33:00:2D:6B:76:8B:BF:D4:17:C6:8C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBDD0C7B864E2034D6F758000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9107d90f-7d05-325b-9da0-c8392831264f.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:d0:c7:b8:64:e2:03:4d:6f:75:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=33b1119f-19e3-4b97-bcaf-09c9ab63a955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:aa:0a:70:77:57:e6:fd:8d:db:df:6a:52:0c:
49:9c:e8:d3:0d:fe:b0:c7:59:16:7c:26:46:2c:26:
d8:c7:51:ac:f5:b5:19:2d:75:74:fb:4a:02:44:8a:
24:22:39:40:d9:3d:b6:62:0d:88:80:48:d7:70:c1:
a1:4b:15:c0:e2:66:b2:20:5d:cc:72:5d:44:0b:92:
2b:93:36:4a:2c:4a:9f:d2:3a:63:95:ee:4d:cf:83:
3e:3f:fe:c1:d6:ac:c6:09:22:30:1d:4c:21:ff:12:
bc:7b:b4:7a:95:5a:a4:6f:8f:c2:c1:15:c4:31:a1:
24:82:b1:1c:01:fa:ed:ca:ba:10:b7:4e:1c:62:27:
7b:4f:52:8c:4c:d1:1e:35:32:02:cc:b9:43:03:c6:
a3:a2:ad:83:af:d6:ee:8c:67:5f:ba:58:15:9f:68:
52:14:2d:88:34:3e:27:f2:3f:78:64:6a:74:1b:6c:
6b:fc:62:61:a2:a4:42:44:d1:4b:ee:35:9c:5a:49:
a0:73:a8:f6:fa:e1:c2:10:47:80:a2:2c:ec:1e:90:
22:0a:59:ca:55:bf:01:9f:40:19:b1:4f:71:d5:4e:
3e:a9:8b:85:0f:fa:35:aa:b5:55:8e:9e:b7:90:2b:
c9:ea:5d:9f:23:9a:6e:68:d2:5d:d8:0f:bc:28:8b:
cb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D3:6F:FA:70:8E:73:44:69:33:00:2D:6B:76:8B:BF:D4:17:C6:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9107d90f-7d05-325b-9da0-c8392831264f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:9c:34:ef:c1:42:07:5a:8a:a5:4d:d6:6c:f8:d0:31:a1:b7:
dc:10:13:86:06:82:a6:40:79:8f:53:b8:5e:8e:b0:c8:ec:60:
03:86:04:b9:36:6f:22:cd:54:7a:42:c3:e8:e5:3a:dd:22:1d:
ad:b9:41:de:d0:af:9d:9d:e1:5e:e3:8c:2b:72:d7:3d:17:17:
43:d9:3b:ea:25:59:b8:ed:87:c4:38:83:13:7c:ae:d9:71:07:
f4:b6:e4:78:31:75:1f:bf:ad:51:0f:fe:96:4a:96:d2:95:41:
37:37:96:7c:37:46:96:d8:38:9d:f1:db:27:85:31:27:c8:e0:
16:20:38:54:ca:4c:bd:ae:71:c8:e8:ff:19:8e:4f:07:dc:09:
71:b4:7c:99:fb:99:33:7e:82:d0:65:ea:66:14:59:e5:16:b5:
ca:d0:0e:9e:e2:96:d4:5a:87:99:13:e1:97:6f:68:9b:d3:2f:
10:a3:53:a7:61:e6:de:f0:a4:dc:84:c8:19:fe:9c:80:1b:51:
2a:68:4b:68:cd:ea:72:6b:fc:09:d2:95:fb:93:85:7e:dd:2b:
03:c3:51:04:40:9c:93:3b:a3:6c:47:8a:73:5b:72:4d:2d:30:
3e:23:be:fe:6a:7f:f1:69:84:79:cb:e5:ba:10:b6:99:99:0a:
ce:0e:a6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:17 2025 by rpki-client