Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/915db2a8-9234-301e-81e4-890ee50c7a1e.roa
File: 915db2a8-9234-301e-81e4-890ee50c7a1e.roa (raw, json)
Hash identifier: QljQbE3aR7v20xWBUS/MGNNgumzRUKzNxri5XbFrGvg=
Subject key identifier: 1A:C8:E3:73:2B:27:D0:EA:AF:93:20:8F:45:A6:96:1D:6B:7B:1C:E9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF23BA0E875AD24C67B2A4E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/915db2a8-9234-301e-81e4-890ee50c7a1e.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 100.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f2:3b:a0:e8:75:ad:24:c6:7b:2a:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=22b4e172-defe-4026-a52b-35d3b772eef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:27:3a:7b:3b:21:56:2c:ce:24:cb:07:6b:
34:75:2e:d1:71:2d:70:99:a7:35:94:10:90:36:47:
7d:ba:ff:31:04:c7:6f:c6:c5:eb:a2:3a:82:54:a1:
60:89:a2:b5:89:3c:cc:db:1f:11:e6:2a:59:3d:fc:
13:75:ac:86:43:9c:88:69:a8:f5:66:6e:4c:aa:e2:
8b:99:a0:fb:c4:e2:74:dc:ea:de:ba:36:02:83:2b:
56:39:28:cd:06:d0:50:f4:70:a8:c9:cc:52:7f:bc:
f1:7d:e7:44:36:84:5c:ec:af:14:55:35:da:06:d8:
3f:f6:25:41:95:df:74:6e:6a:0f:5c:c3:f7:46:ad:
68:64:3e:30:38:ac:3c:a7:72:b9:c2:87:77:13:18:
38:e5:a5:ec:36:7b:7a:86:fe:3c:7f:96:ab:35:63:
bf:03:7e:20:3b:5d:09:bc:70:4c:e6:5a:6a:0c:98:
8e:c5:53:eb:61:e1:ef:7b:0b:97:db:b9:5a:68:0a:
c1:73:2b:ac:74:21:25:45:32:0b:92:e3:fe:4f:c8:
dd:40:da:9d:a7:83:14:e5:23:59:df:8b:6e:14:79:
9b:6b:44:1c:47:96:4a:45:01:83:2e:85:7c:ac:32:
72:ab:f7:3a:9e:a2:19:1a:55:3d:02:21:1a:c7:55:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C8:E3:73:2B:27:D0:EA:AF:93:20:8F:45:A6:96:1D:6B:7B:1C:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/915db2a8-9234-301e-81e4-890ee50c7a1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.24.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:d5:0f:23:1d:fa:e2:11:da:99:4f:8b:19:9e:6b:04:14:57:
13:12:8e:3e:c1:96:90:e2:e8:c7:67:0b:22:1c:28:a2:e6:e0:
93:f2:ad:7f:d2:cb:52:cf:3e:f5:df:bc:92:0d:4e:87:1e:7c:
51:20:83:92:22:f4:55:e6:17:af:29:14:85:fd:a3:8f:32:db:
67:aa:94:01:99:85:07:a6:6f:74:c8:63:c4:69:8b:b6:ad:65:
56:f3:72:1b:62:0d:e4:9d:bc:a8:56:2c:08:27:8d:59:1e:54:
1d:db:e0:cd:21:d2:83:af:22:ef:1c:6a:6d:d2:4d:29:97:fd:
57:8a:67:2b:8c:5b:8c:3b:57:46:55:0d:35:c4:e7:f3:1e:e3:
9b:61:c0:e7:3c:3f:ee:ad:5d:bc:40:8f:d3:f8:d0:c0:18:36:
9c:a4:c3:a0:1d:09:b0:8d:b3:85:49:41:3e:66:f4:9c:9f:5e:
71:12:f8:6a:ff:5d:df:e2:7d:84:91:d7:6d:27:4d:b1:e3:ed:
4a:0c:d3:9b:fd:0c:ae:7c:2b:30:de:98:55:8c:62:81:65:d8:
25:6a:0d:9a:ad:9e:d3:24:a0:b5:79:a9:d6:ec:e2:73:17:77:
d9:b8:91:c5:20:9e:c0:f0:cd:a4:9d:39:a0:6d:19:a0:cf:22:
dc:c3:60:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:09 2025 by rpki-client