Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa86959f-1474-3d41-a317-e233b3719093.roa
File: aa86959f-1474-3d41-a317-e233b3719093.roa (raw, json)
Hash identifier: pJ/OimI41KWqdfUJDRc2A/9z1fgSwt0/J45eIpbOV1I=
Subject key identifier: 54:EA:67:8B:7D:B5:30:D6:1C:D3:0C:48:C1:BA:83:A4:A4:5A:A0:91
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840441F94554C435ACB01A166A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa86959f-1474-3d41-a317-e233b3719093.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 75.2.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:44:1f:94:55:4c:43:5a:cb:01:a1:66:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=a653025f-70d4-4bf8-93b0-b67acccc24fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:59:e1:9f:6e:f3:f7:bc:28:3e:01:df:75:cb:
d8:43:fa:bf:c5:1c:c0:99:6e:dd:d2:ee:10:04:ae:
9f:bd:57:99:9c:49:61:95:fe:87:c7:ee:13:e5:7f:
3c:52:17:80:6a:c8:f9:6c:2b:f4:a0:1a:8e:8e:b2:
99:0f:e9:07:95:d9:3a:f1:68:37:99:c7:50:92:25:
1e:04:17:19:53:5e:a7:f4:de:fd:f5:8c:9d:a9:65:
6e:5a:1e:08:ef:bc:06:11:5f:de:65:59:03:c6:36:
59:f7:01:9d:f8:87:f5:f4:a4:16:41:6c:21:dc:dc:
c0:7a:0c:0e:20:5b:f0:68:d5:ca:5e:8c:a2:6f:42:
06:cb:1b:9b:0a:e5:e4:a9:b1:c6:aa:76:04:51:a8:
f4:f7:66:13:0f:88:78:f4:4b:63:77:ea:ca:18:9b:
41:20:aa:1c:85:7d:cb:cc:b0:75:49:dc:37:35:b0:
5f:c2:29:b0:47:5e:9a:14:73:c9:40:39:f6:50:72:
cd:f6:d8:16:4c:32:de:31:1e:9c:41:6a:84:58:c0:
f9:cb:8c:1b:dd:ae:f6:79:19:fe:0f:68:20:88:61:
c2:98:74:ef:dc:58:77:9d:f3:12:1f:49:a7:1b:a1:
17:56:8a:97:ec:d0:34:70:b2:3b:d8:36:5a:09:0f:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EA:67:8B:7D:B5:30:D6:1C:D3:0C:48:C1:BA:83:A4:A4:5A:A0:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa86959f-1474-3d41-a317-e233b3719093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
75.2.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:98:a2:1d:07:bc:2e:50:7f:17:86:71:95:b1:78:c2:96:82:
26:bd:39:4c:cd:63:1d:17:48:0e:94:06:28:45:5f:ce:0e:6c:
4d:72:3a:9f:54:c6:f1:b7:31:48:9c:81:b9:30:8e:dd:34:83:
32:5a:e7:69:6e:c4:ee:7e:47:27:43:b5:06:78:4c:4b:0c:38:
96:01:1b:60:c0:8d:c6:66:6e:1f:e9:8e:fd:05:d5:f4:94:79:
ec:86:15:a0:83:e0:05:6a:77:7e:7e:0a:a3:e8:a8:bf:78:8c:
7a:2b:2d:1b:82:da:a1:7c:31:55:29:0f:8f:5e:09:16:81:b8:
2b:31:24:fd:28:58:a9:ee:98:2e:b2:28:6e:14:03:05:59:5c:
d6:b8:ad:0c:5b:ed:e9:ad:f9:2f:4a:d9:e3:7e:a7:e8:4e:2b:
b5:48:28:81:07:87:bd:a7:e0:4a:25:00:25:ec:34:61:ad:54:
d8:ef:c8:ae:8c:55:0c:41:39:ae:a7:3f:72:8f:8c:52:91:f9:
37:73:15:ea:b9:57:7d:84:ca:ae:e8:69:d2:10:3d:a0:3a:db:
de:b7:cb:d8:da:df:de:d1:86:7c:c8:fd:3b:e1:23:1a:05:de:
66:b6:29:24:f7:23:86:13:c6:f8:f9:c6:8e:f4:5f:08:65:34:
9f:70:07:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:01 2025 by rpki-client