Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96a22e40-cc77-35e4-acda-3b8b8b13b9be.roa
File: 96a22e40-cc77-35e4-acda-3b8b8b13b9be.roa (raw, json)
Hash identifier: dPuMDniNwzsDysHraxjLLV4SJRaxTmQ33KqZZCR+fbI=
Subject key identifier: 8C:2D:30:20:F6:77:2E:84:10:6B:E0:70:40:8E:A7:C6:83:A6:15:A8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FDB9BAFBC1A7381D7B8041480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96a22e40-cc77-35e4-acda-3b8b8b13b9be.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 128.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:db:9b:af:bc:1a:73:81:d7:b8:04:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=68305efc-58d3-42ef-b7fe-b80d3a6ce687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:72:f3:da:76:34:1e:e2:75:0f:d6:18:c5:
13:c9:8a:a5:3c:c8:e3:a3:c5:d5:47:0e:27:2d:79:
ac:29:7f:86:d6:ca:0b:97:b1:75:5c:03:f8:5a:84:
11:80:7a:cb:5c:fb:1c:61:6b:b9:74:bb:2f:7e:cd:
46:37:ef:da:a4:83:bf:02:9a:d2:9a:92:15:46:a6:
84:68:15:8f:4e:01:96:53:83:99:e8:32:7a:79:77:
a1:24:82:81:46:3e:61:09:22:b7:63:83:eb:d4:88:
65:41:0b:02:d0:4d:35:51:92:86:d4:59:da:55:33:
ca:55:eb:2f:8a:f6:0a:30:6b:72:24:25:ef:9a:23:
91:a9:08:c9:02:b3:3f:7a:8a:f3:75:12:f2:95:3d:
b7:e5:25:3d:f7:a5:90:c7:61:4d:dd:2f:d2:cd:fd:
bc:2e:79:59:b2:09:3d:63:8f:2b:be:ff:c1:3d:1d:
a5:e4:19:a3:c0:f0:68:03:71:8c:0a:de:74:ba:be:
83:bc:25:0a:14:13:e1:a4:f7:8f:19:95:72:61:f1:
1d:74:1f:86:5f:57:2b:1f:58:6b:f1:37:41:2b:74:
fe:47:bc:60:e0:8c:b8:14:34:87:b1:2d:bb:0c:85:
a0:2c:cd:a4:8a:a2:77:15:37:1f:8e:39:de:4e:ea:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2D:30:20:F6:77:2E:84:10:6B:E0:70:40:8E:A7:C6:83:A6:15:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96a22e40-cc77-35e4-acda-3b8b8b13b9be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:13:1a:a8:c8:ec:43:59:3f:d5:70:3e:39:5a:05:f4:9d:c7:
ca:07:e3:d3:05:da:20:3b:03:1f:df:dd:4d:9d:4c:d4:a7:32:
59:8b:b6:11:4b:86:80:f7:9f:a5:4f:0b:44:bc:41:e3:46:44:
34:51:fd:fa:02:a0:b5:4a:23:55:52:6c:6f:cb:c1:b3:5d:4f:
85:23:c5:f7:f6:c9:85:ff:51:46:73:a7:90:8a:b8:c4:f7:3f:
c4:48:67:0e:bd:eb:fd:60:89:1e:be:4a:18:3d:0d:12:24:7f:
39:db:1e:3e:60:42:46:c2:f4:59:6e:0c:f7:c9:c5:db:4b:57:
d3:4e:ec:37:88:19:f7:75:95:89:8a:64:f5:3e:4e:cb:e4:f0:
f9:d6:07:85:3a:f0:e6:ae:49:1a:e6:d8:82:80:5f:aa:da:e9:
f1:0d:a5:5c:fc:de:17:2b:51:17:99:27:eb:27:26:41:4a:e0:
02:ed:4b:f1:a2:d1:23:fb:9b:13:2d:cf:6a:ee:25:a2:4d:7d:
95:ae:08:bb:a3:19:68:60:e8:20:5b:aa:5b:63:60:a4:66:c1:
7f:85:b7:d9:8b:d7:36:86:7e:26:7c:81:81:5a:18:69:b5:c8:
52:10:6a:17:e5:a4:e6:2f:b5:cb:16:2b:df:d8:62:15:f4:ae:
46:ea:a3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:12 2025 by rpki-client