Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/acb40809-bc36-3711-9895-34bbfdc640a3.roa
File: acb40809-bc36-3711-9895-34bbfdc640a3.roa (raw, json)
Hash identifier: wwS9cOWt8FcmicKVNMTu+ngAS+v1R60Af4poE6VfEnU=
Subject key identifier: 22:02:EC:44:EA:97:19:BE:AF:48:75:B5:51:26:9C:0F:E4:37:E5:92
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584050FA2EEA58D23D24BB4D0780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/acb40809-bc36-3711-9895-34bbfdc640a3.roa
Signing time: Wed 21 Dec 2022 22:15:08 +0000
ROA not before: Wed 21 Dec 2022 22:15:08 +0000
ROA not after: Thu 26 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 128.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:50:fa:2e:ea:58:d2:3d:24:bb:4d:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 21 22:15:08 2022 GMT
Not After : Jan 26 05:00:00 2023 GMT
Subject: CN=e3c883ae-4b23-4a1e-b722-0578e834a865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:7f:56:bf:f2:19:e7:c4:6b:2a:29:ee:90:
8e:ec:de:95:b1:5a:a1:91:1d:24:aa:d4:34:0a:49:
d4:74:87:3f:b0:1b:0d:d0:14:4e:8f:15:2e:63:cc:
82:00:de:56:b8:67:fb:18:5f:97:da:6b:2f:4a:6e:
bc:dd:53:4c:38:6d:be:c2:53:55:a5:02:fe:0c:66:
94:fc:1b:03:3f:97:c1:3e:18:07:f0:d0:49:33:c7:
69:32:cd:99:dc:55:4c:5b:7a:9c:e0:8d:83:3b:49:
d5:9e:13:de:fb:89:78:89:f5:1f:f6:49:80:d9:f9:
85:86:ad:ee:ad:68:15:d1:cd:4d:43:0b:3b:d7:33:
4a:03:f0:68:a8:4d:b0:b1:db:75:de:a8:2e:c9:01:
00:6a:3f:5a:f5:d6:d1:41:f8:08:c5:58:c2:7b:d9:
0e:61:d5:d6:01:ba:24:ed:1f:59:a7:af:8e:3a:db:
52:1a:63:66:b1:f0:f1:35:35:0c:70:1e:7d:c3:ed:
ed:34:04:eb:57:e6:f4:6b:39:36:ea:f6:fa:a4:fb:
79:35:f8:81:37:27:1f:57:7b:c8:59:0d:db:de:99:
2f:1a:9a:9a:90:9c:8e:fd:4a:9b:4b:51:cb:20:2d:
30:a0:d6:90:82:c6:2b:05:bf:4f:38:3c:29:99:0e:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:02:EC:44:EA:97:19:BE:AF:48:75:B5:51:26:9C:0F:E4:37:E5:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/acb40809-bc36-3711-9895-34bbfdc640a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:78:89:fd:f4:3c:a0:2c:79:c2:ea:bf:a8:e2:01:7a:a4:f7:
20:d7:8b:c4:69:61:66:5f:08:f4:79:b4:b9:e7:04:2c:da:19:
bd:49:53:ce:25:10:1d:39:be:91:10:bf:ac:fd:e0:a6:df:73:
1e:42:f2:c6:2e:b4:2c:9c:3d:ee:ca:38:c5:cb:60:5f:1f:85:
f1:a7:d6:28:d1:06:4c:bd:79:2e:cc:6f:5f:73:18:c4:e3:2c:
2d:81:d1:c0:70:16:c6:c9:53:60:60:a1:b0:68:16:c3:bc:f6:
db:06:33:77:f3:b1:ed:f2:45:ab:b1:36:f1:3f:07:34:d0:a0:
93:7b:b6:77:5b:69:c3:4d:19:fa:f8:19:51:d2:e9:8c:5d:41:
94:96:88:c6:ea:3e:c0:52:d2:6f:93:9f:10:e6:4f:3d:e1:4c:
3d:80:73:4f:e8:5e:20:b3:e9:1b:18:93:42:6d:76:97:91:83:
d3:4b:bf:99:0f:a9:45:be:a1:79:d5:14:8d:09:c3:25:3a:46:
5d:ee:2e:cb:05:c2:f5:4b:72:e9:18:c2:d3:67:ae:1c:75:2d:
9d:42:86:40:6f:ae:27:5a:05:bb:41:76:a8:85:f9:9e:ca:7d:
2f:aa:04:cf:04:88:7f:e3:ff:fa:2b:38:c2:e7:ae:59:c3:8a:
14:cb:a3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:57 2025 by rpki-client