Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afd817f4-aaf0-32bd-a5d8-00cc6f7f90a7.roa
File: afd817f4-aaf0-32bd-a5d8-00cc6f7f90a7.roa (raw, json)
Hash identifier: rAhCE2UFBrtG4vdV/9n3Yr33m9XDaLKU5LWN+ecq1cs=
Subject key identifier: 01:D6:13:76:8F:B3:B6:6A:2A:E6:F2:1C:50:96:4F:EF:F2:7C:5B:EB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403543747578A9560D8BBD3840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afd817f4-aaf0-32bd-a5d8-00cc6f7f90a7.roa
Signing time: Sun 11 Dec 2022 12:00:00 +0000
ROA not before: Sun 11 Dec 2022 12:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 63.134.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:35:43:74:75:78:a9:56:0d:8b:bd:38:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 11 12:00:00 2022 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=78e11da3-5b48-438c-a467-24cbfd1d3259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e4:fb:5e:6a:66:49:2a:d3:86:87:72:a2:11:
63:3c:2b:f6:91:f6:31:8e:9d:1e:c8:d7:96:a9:d4:
dd:58:6b:20:2f:f8:b4:b4:97:ce:51:ce:b2:ef:40:
fb:67:b8:8b:73:41:5c:fe:69:05:e2:ac:b4:96:cb:
ca:f9:8d:28:6e:eb:d9:f4:fe:30:57:43:f3:0a:c5:
09:94:0b:71:30:cd:b8:42:a5:00:11:ea:4e:3c:99:
34:c2:db:da:10:6e:a9:d9:25:ef:b5:d5:1b:81:78:
7d:a6:ab:6c:31:48:a0:71:8e:51:06:23:7f:57:77:
81:e1:49:d3:4e:24:3e:b8:be:ba:b3:46:37:6a:ce:
39:56:04:45:35:07:68:e7:79:9a:48:03:89:f4:0a:
8e:e8:f4:1a:9f:d8:a4:99:ec:bb:de:f9:02:a4:60:
c7:fe:6c:ac:d2:72:d6:8c:32:e2:10:09:94:58:79:
fe:9a:0c:4c:7b:3c:e2:21:74:4f:ff:bc:80:f3:ef:
5a:74:d7:00:31:7e:d4:59:d9:9a:5d:5c:0f:d4:1b:
25:3d:ed:c7:b3:cf:cc:86:2c:98:33:16:64:c5:e9:
f6:18:69:0b:0b:6b:50:3c:03:04:9e:47:91:44:e5:
ac:f2:17:14:e2:7c:c0:1d:ae:e6:5b:0f:c9:00:b9:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D6:13:76:8F:B3:B6:6A:2A:E6:F2:1C:50:96:4F:EF:F2:7C:5B:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afd817f4-aaf0-32bd-a5d8-00cc6f7f90a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
63.134.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:fc:f6:84:b8:5e:56:fd:8b:2e:77:59:a2:08:f6:4c:a9:23:
56:cb:9e:18:af:ea:13:f9:bf:c1:bc:9f:4a:ac:f2:31:6d:99:
42:fa:ef:f0:6c:ca:cc:e5:02:b2:8a:74:12:29:d0:8e:9e:6c:
d2:1c:46:b2:19:12:ac:39:50:54:93:b5:d0:10:93:8a:c0:5a:
97:fc:6f:95:08:71:a3:f3:9e:cd:14:ba:d5:21:6d:77:a7:0c:
26:47:94:2b:32:61:65:4d:ea:5a:27:db:a9:ec:03:14:d6:ae:
f0:a6:8e:1f:98:4c:87:6b:09:5f:d0:10:ef:8d:a7:b3:94:64:
3d:e9:cb:f5:9b:73:fa:bb:f2:bd:19:ea:3b:dc:8a:90:a1:e2:
a3:eb:4b:17:d0:43:c2:13:53:a9:04:63:f9:9e:cd:f4:f0:7b:
51:54:6c:20:c2:73:46:07:2b:89:2f:7c:6b:68:3e:be:8a:e7:
78:72:20:c2:39:57:4c:cc:cc:27:6b:b6:1e:d6:32:d2:b7:bf:
07:74:af:4e:95:2f:a6:60:5f:0e:2a:6e:49:44:4f:43:1d:1b:
be:e9:68:37:a0:52:d3:3e:5f:64:b9:63:b8:7a:ac:83:2a:ba:
d9:49:a5:87:a1:79:c7:6b:67:51:ba:df:ac:ff:ed:7a:2e:91:
48:d8:5f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:58 2025 by rpki-client