Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2d6ef29-00ff-3c47-9f1f-55c122221e73.roa
File: a2d6ef29-00ff-3c47-9f1f-55c122221e73.roa (raw, json)
Hash identifier: ZCx/ePVnRM/dsZpLzPZADMgUZUvVYiShwk3FqShk+dk=
Subject key identifier: BC:B3:7B:29:9A:B8:35:E9:99:5A:0F:61:62:AF:6B:E7:26:2B:B3:F5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584042077C222769212CEB124600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2d6ef29-00ff-3c47-9f1f-55c122221e73.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 130.80.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:42:07:7c:22:27:69:21:2c:eb:12:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=114e72d4-3513-432f-9c10-f8c2e9762691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b7:b5:63:be:94:4f:fa:dc:2e:9c:61:cb:40:
1f:a2:57:8e:97:7f:28:34:87:d5:1b:34:69:45:52:
73:3f:5d:3b:15:20:57:e2:af:b3:5c:55:eb:96:f5:
a0:80:7a:1f:8f:ba:a7:bd:23:06:d5:49:a9:f8:70:
65:6d:9f:14:9f:74:44:40:3a:48:ec:c4:a6:20:37:
a4:72:36:ca:63:29:ed:d6:bc:b0:3d:e0:a4:9f:fc:
84:e5:06:72:5e:f9:43:76:fe:a9:14:66:1f:4d:c2:
7f:86:b5:60:92:e3:7e:0e:e6:7a:3c:74:61:bc:40:
2b:65:43:05:94:f0:1d:33:6f:2c:e3:21:65:7e:1f:
b4:f4:b9:8c:74:3e:41:fd:40:45:fd:fa:f8:a0:c5:
c2:8d:49:8c:1e:ab:65:bf:eb:66:c4:f6:45:e3:a8:
07:ee:b7:c2:20:20:87:86:ea:6b:60:e4:96:a7:89:
23:44:35:50:ca:ef:ab:fd:dc:d3:ba:80:94:a5:c3:
06:35:18:e0:e2:93:f9:6d:c1:41:65:16:38:5c:5f:
1f:b8:51:17:5a:6c:83:63:14:f2:f9:87:1a:8f:e7:
ff:d5:1b:73:6f:e7:03:4a:b2:fa:2b:6e:3d:70:f5:
4f:b2:83:c0:33:4e:48:ab:b6:f6:ab:50:47:04:4c:
19:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B3:7B:29:9A:B8:35:E9:99:5A:0F:61:62:AF:6B:E7:26:2B:B3:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2d6ef29-00ff-3c47-9f1f-55c122221e73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.80.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:13:b6:33:db:2f:95:d0:a9:7f:6d:cf:e9:83:0d:aa:04:56:
a9:47:f8:06:c4:f2:6f:25:12:32:83:cd:40:f5:e5:76:1c:7c:
55:40:77:f4:de:8c:c4:55:4e:80:59:9a:da:37:fc:5a:a2:a4:
ea:45:56:8a:a0:e2:5e:75:45:34:45:fe:6f:27:98:15:f2:6d:
fa:59:0f:3e:d0:8b:a3:87:3b:f9:dd:b2:e3:15:9f:fe:a4:ae:
57:dc:b0:63:39:cb:c3:b2:81:2e:4f:fa:c4:25:3c:e1:65:7f:
2d:c5:91:2f:43:e7:1e:c2:1a:73:f5:34:11:34:fa:d6:20:63:
96:8b:48:1c:49:cc:46:50:a5:6e:33:72:22:e5:c2:56:b5:46:
ac:b1:74:d6:c0:e5:80:80:0a:be:56:fb:ec:06:ce:a3:20:bd:
36:5b:5f:23:f9:0e:45:92:e1:e3:ad:8f:41:70:30:cd:3e:c8:
1a:6a:98:f3:d8:d5:ad:3a:b6:b5:b2:ea:60:cb:e8:a7:ab:f4:
a9:7a:6e:1a:e0:4a:9a:bf:08:42:b4:cc:06:16:a6:86:26:25:
db:e8:ef:4b:91:77:83:e1:6a:b0:6d:73:cc:22:1a:60:1a:de:
04:41:04:cd:35:ca:74:e9:41:39:54:cb:6b:10:f6:7e:bf:08:
d2:3f:a1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:47 2025 by rpki-client