Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc494ecc-c1f8-338c-825a-f4cdafac91a2.roa
File: bc494ecc-c1f8-338c-825a-f4cdafac91a2.roa (raw, json)
Hash identifier: NU6pbJUx2nH05bqLdTvknr9CaGOXVZJ/jU3lYJfQz38=
Subject key identifier: 8E:CF:96:12:D8:EA:03:EB:48:DF:C1:92:66:EC:9E:ED:99:9D:E3:64
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584019F50018F660D70137BEBFA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc494ecc-c1f8-338c-825a-f4cdafac91a2.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 142.54.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:f5:00:18:f6:60:d7:01:37:be:bf:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=1d590fde-e1ad-4d36-abf1-19bc5232f6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:94:3d:09:5b:71:40:7f:5d:ef:61:62:51:
82:51:6d:6c:15:a7:81:c5:f6:0d:64:8a:4f:f8:3c:
04:8b:c9:b5:59:34:de:d9:75:2b:c8:8d:92:3d:37:
63:2b:5b:79:b2:c8:e9:ba:11:b0:e4:42:e5:86:12:
ea:ec:8c:01:69:84:d8:5c:cd:8c:04:25:f8:98:e8:
19:9c:5d:4f:55:0b:2f:5c:b6:e0:25:28:5b:17:69:
13:d6:d7:1f:aa:11:c4:32:82:56:b2:bc:ca:be:db:
8b:f2:4e:84:62:d7:55:5c:74:cb:5a:67:f0:9d:51:
0f:36:d6:bb:1c:3a:2f:58:94:1f:a8:68:58:85:00:
ce:89:a7:c7:46:59:82:d8:df:6d:f2:11:60:fe:2b:
9e:c8:90:96:1f:9d:6a:55:51:26:0a:ec:97:14:ac:
c5:bc:cb:e3:00:a5:37:ec:ad:e2:d8:56:fc:71:73:
00:d8:70:4b:b6:ce:0a:dd:9e:ef:90:6f:e0:3b:00:
19:57:eb:98:af:a2:bb:c8:aa:0d:ee:f8:cb:2a:e7:
f9:64:33:75:5a:ce:4f:b8:2e:d9:1d:39:9a:ef:3d:
c4:c8:ec:da:29:f5:a0:40:21:8f:8d:8c:cb:d3:24:
15:f5:0e:46:2d:ad:3a:00:f7:8a:55:73:4c:57:cf:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CF:96:12:D8:EA:03:EB:48:DF:C1:92:66:EC:9E:ED:99:9D:E3:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc494ecc-c1f8-338c-825a-f4cdafac91a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
142.54.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:64:b0:59:6c:16:c4:b5:36:8c:6f:3f:72:80:5f:e0:1f:4e:
7d:32:7f:c3:19:70:2a:dd:6e:41:50:19:c6:c5:bd:fc:64:40:
22:72:e6:64:a3:67:40:00:46:b8:0b:1c:52:9d:6d:1f:93:c2:
9d:82:41:0c:62:06:c2:ce:57:5f:7c:a4:db:54:c5:b3:c5:7d:
37:65:a2:bd:95:42:70:94:98:d8:9b:35:1f:9f:d9:cb:56:a3:
8b:96:29:89:11:97:58:26:31:a1:de:b9:26:6f:f7:20:e4:83:
43:ec:f2:ce:d6:7c:5f:84:ea:c2:c3:32:8f:2e:e8:82:11:26:
02:1c:c9:82:2d:3e:1f:e6:cb:62:80:78:e0:c1:50:04:4e:41:
42:85:aa:02:83:e1:4f:43:5b:b1:bf:7f:64:20:a8:29:54:19:
24:34:9b:a3:d5:0d:3f:b2:57:13:35:98:17:f8:d0:7b:04:99:
15:86:f9:ea:04:9f:19:41:4e:14:05:e5:e2:2f:1d:26:f3:7c:
11:eb:b1:82:be:6f:7c:e4:73:19:5c:df:ac:0f:43:3a:90:ef:
c7:df:2d:90:85:0b:0f:13:e1:45:bd:b1:a2:49:63:a8:3b:43:
fb:5f:83:bf:75:2b:83:72:10:f4:9e:2f:96:2c:da:52:f2:86:
e4:3b:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:09 2025 by rpki-client