Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a82fe380-4c33-3a62-95bd-42afdfcddbfe.roa
File: a82fe380-4c33-3a62-95bd-42afdfcddbfe.roa (raw, json)
Hash identifier: 2VQFLPjw0IVQB+H1XbiYYaUE1mV+VmAFQxEsBEnbdS0=
Subject key identifier: 45:FF:51:D8:A3:BB:D4:AF:D7:EF:E0:4F:C9:D3:BD:EB:99:12:C3:90
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D81AB1FAF1168F93A3401BC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a82fe380-4c33-3a62-95bd-42afdfcddbfe.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:ab:1f:af:11:68:f9:3a:34:01:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=c43a2fb2-58c2-4a30-b700-802285be9af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:d7:81:99:93:66:e6:89:c0:05:6c:0b:06:
21:6c:97:17:74:29:b2:bf:de:f0:ad:61:b0:ca:ac:
d7:8f:ee:2b:e2:36:37:1d:bb:ea:2d:dd:4f:0d:66:
30:a1:bc:33:5f:37:75:33:0c:d0:02:b5:83:6a:8d:
fd:c3:9d:61:90:1c:88:d3:66:2e:50:ea:f1:e8:51:
2b:df:18:0b:0d:32:8e:d4:26:4d:e5:9e:46:8e:49:
9a:0d:09:58:0e:fc:35:5e:aa:29:49:24:30:62:78:
0a:7c:19:8d:c2:2d:e6:bc:a7:af:e6:dd:5e:1c:22:
43:39:b1:2f:27:77:0d:ba:75:bf:a9:d6:fe:cf:a1:
30:fe:3e:16:a9:40:af:d2:eb:61:43:73:89:fa:50:
ac:c8:19:4e:28:a7:8a:bd:06:54:b3:fa:35:10:05:
a2:a9:56:99:d6:d8:e9:fc:ae:d3:1e:27:f1:0f:4c:
c6:eb:fc:d3:4c:78:d3:73:30:4f:3e:af:bb:0c:f4:
8a:b7:d5:99:58:77:9b:90:9f:d3:76:0f:57:64:b9:
7d:31:e5:4e:20:a1:17:ac:24:f0:75:34:fc:f2:1c:
f8:70:a2:32:21:0e:8d:42:b3:4c:9d:38:b3:9d:98:
34:d6:fa:9b:0d:1f:dd:10:e1:3a:a3:c0:66:45:11:
35:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FF:51:D8:A3:BB:D4:AF:D7:EF:E0:4F:C9:D3:BD:EB:99:12:C3:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a82fe380-4c33-3a62-95bd-42afdfcddbfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:3a:ec:30:0c:39:f5:b9:85:9c:47:1a:6e:24:88:4b:ec:d9:
cb:98:90:21:b8:65:5e:7b:09:ab:1a:41:28:55:96:dc:36:5b:
39:33:04:ed:95:66:99:c4:5b:60:b8:57:d5:bd:19:c0:8d:e4:
72:eb:49:92:2a:42:ea:f6:0e:dd:81:46:f8:03:5d:b9:0a:70:
d2:5b:24:95:0f:af:e4:c4:c3:0e:3b:1d:1b:d2:12:2f:dc:d5:
fd:d6:e3:c1:ce:92:8f:9f:9a:48:32:02:67:2f:aa:ef:e9:03:
3f:7c:3c:81:93:27:f9:0b:e3:ef:9c:ca:59:3b:28:2b:40:46:
66:52:98:20:b3:11:63:af:5d:8c:85:48:8e:e8:ae:ce:17:db:
24:f1:5f:fd:05:22:22:c5:6d:ff:99:d1:f5:78:a0:cd:ff:e8:
ee:68:0e:4f:8b:ba:a2:6f:26:7e:b5:4b:ac:63:45:97:c7:6a:
8a:5e:54:06:c5:f9:a7:5f:f0:c0:ed:38:2e:03:df:5c:9f:2f:
fc:3b:4f:fc:88:ae:eb:d0:f3:0c:d5:29:52:0d:17:b5:c1:a1:
a0:a2:5b:02:cd:ce:ca:ee:41:2e:3d:5d:ca:1b:60:42:6a:7d:
2d:7c:c4:31:db:17:3e:b2:9a:3f:b2:ce:dd:59:4e:9a:e7:b1:
75:85:81:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:21 2025 by rpki-client