Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d3ae793-5037-3c42-a1a9-aadbae0f4af1.roa
File: 9d3ae793-5037-3c42-a1a9-aadbae0f4af1.roa (raw, json)
Hash identifier: Txe+vBaCLn3/VALB1pbDX5POIAsrzdQNzxHveEB23GU=
Subject key identifier: 05:68:E2:B3:F8:E1:10:A2:A2:19:8B:8A:21:64:3B:4E:96:10:31:81
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840746385035DFE6C2D531C6A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d3ae793-5037-3c42-a1a9-aadbae0f4af1.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 161.99.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:74:63:85:03:5d:fe:6c:2d:53:1c:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=598db9e2-5dfd-45e7-8edd-65b004d4ddbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5f:cc:8b:01:99:53:12:11:70:da:e8:71:e0:
08:f2:f1:15:4f:0f:06:f0:29:10:45:30:dc:34:ba:
bc:af:7d:d6:84:fa:1a:6a:0b:1c:34:04:a3:fa:23:
e2:28:f6:48:05:53:d3:15:2e:0c:98:24:21:86:94:
b6:5d:39:d9:3d:dd:ba:d3:6d:24:93:d3:5f:98:ba:
09:ce:ed:8f:c3:52:30:17:3c:79:d5:11:da:07:a1:
8b:c7:94:e4:be:35:cb:b2:28:d7:7c:f2:3c:1c:41:
00:14:a4:26:1e:6e:a8:50:10:3f:16:b2:fd:a2:5f:
d9:89:61:bd:93:96:77:a9:3c:79:34:b7:57:ff:9e:
b6:f7:ae:1c:52:2e:61:20:df:e7:2c:f0:ed:dc:95:
3e:c7:a4:6e:61:6a:a1:6c:84:70:b6:38:22:4d:71:
58:cd:7d:c4:6f:98:3e:97:aa:a5:62:3e:a3:2c:5f:
d4:4f:24:ea:5d:ae:bb:5d:72:aa:33:c3:10:4d:72:
8e:30:df:29:4d:f6:75:d7:51:1f:5b:46:be:da:4c:
ed:64:b6:bf:c7:bb:96:f4:c3:0e:8d:9c:cf:1b:75:
5c:80:83:24:b1:52:fe:9e:d7:2a:6f:b2:97:6a:0a:
a1:5c:28:d6:ee:03:2b:1d:6a:3d:9f:27:36:90:37:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:68:E2:B3:F8:E1:10:A2:A2:19:8B:8A:21:64:3B:4E:96:10:31:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d3ae793-5037-3c42-a1a9-aadbae0f4af1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
161.99.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:4a:2f:25:bc:69:75:44:c5:c2:be:0a:b0:b2:2e:f6:8a:48:
a0:88:79:7c:b8:84:cc:f4:22:89:a3:83:1a:94:91:a1:b4:7b:
ac:16:c6:8d:d7:ee:3b:f6:47:aa:16:7b:51:0a:eb:2a:2e:eb:
9c:11:5b:ec:d7:ba:48:ab:a3:d2:d6:9c:70:e9:2d:65:14:e1:
fc:17:64:d3:a9:92:b0:2c:68:ec:9a:d0:9d:c1:e6:4b:4f:39:
ad:23:d4:89:47:2f:33:a3:da:7f:a5:42:df:76:ab:8a:88:2d:
14:7f:19:31:c1:a0:bd:98:33:cb:61:5a:a9:cb:5e:11:be:41:
d5:6b:d2:be:d0:83:41:93:79:7d:33:1f:56:a7:7b:7a:2f:67:
62:80:b6:6e:e8:bb:bf:b6:10:2e:fe:54:1e:c4:18:5a:d4:22:
8e:88:48:04:e2:a7:aa:13:6a:a7:b3:15:f6:14:8d:21:6f:70:
25:1a:13:31:fc:20:38:21:84:5c:67:68:df:63:bf:4c:6c:7e:
e3:40:e3:bd:dd:b8:36:d2:f7:d2:c6:f4:5d:c2:dc:be:da:f4:
90:49:ba:63:81:02:77:83:75:28:2d:c8:2c:af:d8:19:87:39:
c8:b0:1f:30:06:60:3b:b1:4f:1a:cd:21:70:88:dc:71:1c:e0:
13:ad:5e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:13 2025 by rpki-client