Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc0a0290-16a8-3b35-aa69-ba1087814176.roa
File: bc0a0290-16a8-3b35-aa69-ba1087814176.roa (raw, json)
Hash identifier: qzcf2Uznuu5cGGUHmbJexdz30YmcFVX7weCxjoS4aEk=
Subject key identifier: 88:D4:7C:2E:0E:D5:7C:B8:80:42:E5:69:75:09:A8:E0:61:D1:49:CA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A3CEB09842C181124515E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc0a0290-16a8-3b35-aa69-ba1087814176.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 99.87.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:3c:eb:09:84:2c:18:11:24:51:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=527f9b3a-ff55-4809-bf89-9430a1d7e573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:38:ff:b5:33:6c:96:20:f8:f5:d5:43:3e:
b7:4a:88:d1:2a:07:11:4e:78:e3:8a:da:17:21:3a:
e6:07:34:60:25:6b:dc:de:7c:17:68:de:69:2a:12:
e0:d9:26:e6:3e:8c:71:f0:f9:9d:df:1b:5c:de:2d:
1c:a0:dd:19:e5:a4:c3:52:1d:ec:41:c8:1e:8b:08:
0d:ce:ce:6c:9a:3d:89:33:17:3d:2c:aa:b4:4e:c3:
14:9b:de:9f:99:fa:b8:ca:48:d4:88:08:4f:dd:53:
58:57:96:ab:01:7e:d9:f8:3f:16:f0:76:f2:fc:2b:
c1:f9:64:d7:3a:9a:20:46:f9:5f:8e:fd:ed:c6:d4:
07:4c:76:e6:93:a5:f5:2e:23:f9:5d:5d:63:dd:40:
42:41:a6:58:20:28:b6:ea:8e:b6:07:1a:df:d6:9e:
bf:4a:9d:d9:a5:3d:f0:b6:db:7e:06:e0:63:9a:d5:
ca:91:0e:ff:dd:4a:3b:b1:34:43:c0:28:c3:ec:69:
f8:8d:ce:83:7c:5d:37:cd:3b:c0:dd:66:e2:69:95:
9b:b4:dd:4e:c0:09:35:8f:10:05:06:f5:6b:9e:55:
c4:eb:3e:b0:54:3a:01:b7:16:41:da:b1:05:e2:c4:
93:29:f6:a6:06:6e:79:70:ca:66:ec:f7:b0:47:e3:
e0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D4:7C:2E:0E:D5:7C:B8:80:42:E5:69:75:09:A8:E0:61:D1:49:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc0a0290-16a8-3b35-aa69-ba1087814176.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.87.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:8d:65:a4:b1:42:e7:6e:12:09:10:f4:3e:ff:88:3f:00:c6:
60:64:60:65:91:d6:2a:da:05:48:21:91:db:d6:e6:f9:19:26:
d4:54:7a:1a:3c:b4:ba:de:44:a0:77:a6:77:c7:c1:53:cf:d5:
3c:07:96:94:ad:c5:4e:2f:88:e6:6f:db:0e:c4:0e:dc:85:de:
94:e6:b0:5a:a8:27:0d:52:71:1f:29:b6:b5:f5:b5:83:47:89:
36:1f:61:31:3b:9d:4d:61:2e:49:44:17:3d:7d:78:22:a1:bb:
4b:92:ac:1d:3d:8d:6b:14:f7:47:45:4e:fc:85:e6:7b:83:96:
74:cc:b2:c4:9b:45:95:cb:8f:83:e9:4f:42:e4:5e:89:98:c1:
40:cf:2e:03:31:97:11:8e:63:86:34:78:21:58:24:a9:28:c2:
67:89:f4:24:0f:eb:37:4b:29:bb:c0:31:ec:fc:c6:30:a9:6a:
ca:63:0e:42:19:41:71:29:e5:33:2a:55:e4:b6:01:61:4f:02:
6c:17:a9:46:d8:b8:42:c0:48:79:f2:99:cd:40:5e:fe:05:cd:
16:c7:2f:fc:3f:07:b4:3f:97:f3:41:5e:42:b8:b2:ed:68:c2:
1e:f4:15:74:00:c0:9e:59:4f:90:04:9e:42:96:f8:59:f4:7e:
f3:a0:af:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:11 2025 by rpki-client