Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f31e427-3952-35a8-8840-5566599fcced.roa
File: 9f31e427-3952-35a8-8840-5566599fcced.roa (raw, json)
Hash identifier: cpHaHG0jQsqDcrc6FvKzuS4POMhzOTGxdKu7FChI4qA=
Subject key identifier: D3:B6:09:5E:B5:58:7F:C9:4B:EE:75:4E:58:A6:BF:97:50:96:56:FB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0C11F2322BECF909A1BD8840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f31e427-3952-35a8-8840-5566599fcced.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 130.171.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:11:f2:32:2b:ec:f9:09:a1:bd:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=296b65d7-6f3b-4d19-989c-3ce5dd6031d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cd:50:2b:c2:ff:fd:ca:83:54:41:52:8e:79:
70:bd:39:cc:9c:50:fd:52:cf:e7:36:ec:7c:15:87:
25:65:a8:96:23:69:0c:47:3a:ac:78:2f:24:69:e9:
c9:7d:50:cc:e9:06:ef:b5:05:18:57:fb:ba:01:54:
db:d3:7c:e3:3c:99:e1:05:ff:98:93:b4:4d:20:19:
c0:64:39:1a:f3:33:e4:bf:91:ce:56:69:2d:6f:de:
75:b1:e5:93:a7:00:e4:20:51:c7:b0:30:c5:ce:32:
1d:ab:f5:6e:42:28:fc:01:95:b6:bf:24:ac:01:dd:
cc:f0:b7:a2:a8:8c:2b:cc:60:5d:6d:15:c7:39:1a:
8b:3e:4d:3f:cd:2f:57:25:ba:22:95:c7:31:f2:a9:
ce:27:b3:36:7b:20:69:54:e9:fb:9f:ea:1a:ad:48:
48:62:e3:aa:ee:63:57:e7:37:07:95:65:8d:85:97:
34:b6:39:1d:f9:fb:ea:ad:7f:e8:d0:20:8f:75:24:
5d:f5:1d:d1:6c:8d:d0:d7:a1:73:30:35:43:a4:8e:
2a:52:6c:60:d2:62:ff:b8:e6:35:59:a8:0e:6f:f9:
ef:9e:6c:86:df:11:08:3d:32:f2:05:23:5a:9a:c3:
c1:dd:2a:e4:98:21:75:bc:64:a7:be:14:86:24:83:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B6:09:5E:B5:58:7F:C9:4B:EE:75:4E:58:A6:BF:97:50:96:56:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f31e427-3952-35a8-8840-5566599fcced.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.171.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:e7:9a:61:bd:0c:fd:72:8a:a2:3c:86:8f:9f:4a:b5:e7:67:
23:fe:d6:ec:e7:28:4a:33:fa:bf:18:bb:42:99:8f:68:85:c2:
2e:dd:ab:3c:7e:72:0e:1a:26:fc:bc:eb:ec:47:2e:3d:cd:42:
37:8c:f6:2b:09:06:12:6d:b6:07:87:71:89:fb:f2:d6:42:1b:
79:f0:ac:6a:e3:e4:57:15:1c:d4:ba:96:50:a0:0c:f6:5a:c9:
bf:74:97:03:eb:f7:48:bb:71:5d:2b:78:cb:cf:70:19:17:96:
e6:cc:59:74:8f:19:2d:39:09:ee:cf:55:7a:66:3f:8a:77:05:
e2:1a:34:ca:b0:0b:8e:20:e7:2d:83:39:b9:ee:34:ba:a4:91:
9b:4a:d8:69:5a:ae:c7:38:18:d7:19:f4:eb:ed:ad:fc:1d:b2:
84:cd:73:5c:ad:6f:81:da:c9:33:36:fc:09:b8:21:c1:f0:c1:
79:1e:b6:15:e9:ff:fe:bc:ff:05:6b:ca:ca:a3:c7:ba:1a:52:
33:db:75:04:58:ff:2b:d3:f0:0b:49:5f:98:5d:d6:72:23:db:
5c:32:71:b1:4a:f8:57:52:6d:b5:08:70:7f:1b:dc:e4:d4:87:
57:84:f8:3d:29:ed:18:b9:d7:a3:1e:ff:5b:96:86:cc:0d:c0:
1d:5f:45:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:02 2025 by rpki-client