Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8ea637c-7c17-30c8-8c32-331bc5da93a3.roa
File: b8ea637c-7c17-30c8-8c32-331bc5da93a3.roa (raw, json)
Hash identifier: DHVZDT0K3GHzV4o2bvh1SgwxV6bkWMDhGg/itYpzzeE=
Subject key identifier: C9:A7:5E:A1:23:CF:F7:14:65:3F:05:29:B2:0D:1D:BD:85:EF:F3:25
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6DA8757E18FB1A3DBA6E7E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8ea637c-7c17-30c8-8c32-331bc5da93a3.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6d:a8:75:7e:18:fb:1a:3d:ba:6e:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=fe5b2bdd-ed47-4042-b6fa-f5451066f2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:a4:e0:c6:da:3e:1d:fc:2a:0c:d2:6a:b8:
64:48:b8:30:2c:e5:46:a7:ec:d0:3b:42:42:27:ac:
00:0c:0b:c2:64:5c:96:be:eb:2d:6f:06:f4:12:94:
44:15:be:a6:bc:c7:30:fe:a5:52:9b:e5:8f:7c:c4:
cc:d7:c4:25:40:e2:75:c2:08:43:59:59:a3:14:de:
3a:08:27:6c:f8:5c:57:c5:a9:95:8d:b6:d8:28:d0:
45:3a:90:06:21:3b:1b:fd:ac:e1:13:78:08:7e:ea:
14:c7:4c:2c:3b:ee:b6:da:fb:5b:5e:77:04:cb:10:
7a:21:cb:81:50:42:80:53:6b:48:9e:22:1d:00:f0:
6b:06:c6:c6:db:30:09:97:12:c8:4c:23:2f:df:bf:
a1:75:70:04:2f:be:31:59:8f:1e:90:92:3f:c8:1e:
f3:58:9f:8d:2f:9e:1a:51:73:9c:7b:b7:ec:86:93:
6c:9d:b2:11:03:0b:28:fc:e3:00:f6:1e:9d:4b:99:
e8:39:3e:02:50:f1:69:15:c3:39:50:67:d8:5d:f3:
d5:1a:65:97:fa:5b:1e:d7:ce:e9:3c:17:0d:72:67:
35:27:74:c5:10:c5:c7:d5:b8:41:d1:c4:ab:e7:f7:
98:44:1c:3c:97:ba:b8:72:4e:7c:ed:19:f5:fd:58:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A7:5E:A1:23:CF:F7:14:65:3F:05:29:B2:0D:1D:BD:85:EF:F3:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8ea637c-7c17-30c8-8c32-331bc5da93a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:18:c0:5d:d1:b9:0f:6d:b2:c0:38:31:b7:f3:26:dd:a5:56:
4a:2f:3c:1e:61:30:61:fb:93:4e:b1:aa:15:48:57:f6:6b:8e:
26:be:3a:06:86:82:ee:21:70:de:78:81:1c:f0:6a:38:85:b1:
71:35:5d:07:be:c9:4a:76:38:4d:c9:39:08:9e:8b:33:1d:a9:
81:b9:8a:f7:6a:9a:c9:96:7e:80:a6:be:7b:ed:c8:cb:61:d6:
03:8c:2b:09:16:ec:f0:7a:9c:11:ae:50:b9:7c:64:09:fc:0c:
5f:9c:ca:3e:12:bf:ad:ce:46:8b:0e:ce:71:c7:81:55:2e:3e:
6d:e6:9e:fb:6f:1e:64:4b:9b:20:99:25:dc:17:ef:26:8b:eb:
ef:70:0d:f1:9e:b1:2e:26:4e:81:be:fe:8f:de:e5:e4:6a:b8:
41:28:83:2f:fb:61:60:63:3c:73:cc:34:9c:45:06:c4:a8:e5:
1c:35:9c:1f:6e:d4:49:55:d3:f5:3c:e9:30:89:44:11:aa:19:
50:80:f7:c1:97:af:79:d0:34:af:ee:a4:28:6d:52:b7:a3:ff:
73:93:21:c8:49:4c:f9:e3:0f:f9:4c:e7:ee:ab:7e:e9:19:71:
9f:22:20:f5:af:ea:5d:f0:be:36:89:f7:2e:22:4f:df:54:6f:
5a:48:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:10:20 2025 by rpki-client