Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc5720f5-bb8d-3a45-b264-a560ffeff6ef.roa
File: bc5720f5-bb8d-3a45-b264-a560ffeff6ef.roa (raw, json)
Hash identifier: 4KUA4whIFJxpjOtDp0aQGuhPey/SQYnzpQqwfyFbGRI=
Subject key identifier: 78:78:06:B8:85:75:E5:9B:0C:37:72:0D:82:09:8B:46:95:C2:DE:2B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF7023A0346404F6B309C0780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc5720f5-bb8d-3a45-b264-a560ffeff6ef.roa
Signing time: Thu 19 May 2022 12:00:00 +0000
ROA not before: Thu 19 May 2022 12:00:00 +0000
ROA not after: Fri 24 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f7:02:3a:03:46:40:4f:6b:30:9c:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 19 12:00:00 2022 GMT
Not After : Jun 24 04:00:00 2022 GMT
Subject: CN=f8d2273f-57ba-406f-8bf6-6e2a4f04797d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:10:b2:fa:f9:fc:19:ed:07:97:f2:ab:e9:37:
9a:c1:2f:e0:eb:56:c9:a1:db:60:8f:d7:0f:9e:c2:
5c:4e:9b:4e:46:08:eb:ad:53:b8:03:16:92:a4:19:
c5:d6:22:9b:a3:91:a2:d9:2f:5b:10:6d:57:ef:a5:
bd:70:c4:12:43:d0:0e:08:8b:ed:25:3e:73:34:2d:
3b:fe:6a:cd:3b:14:a1:ef:7f:94:38:df:78:8d:54:
1c:68:d8:93:ca:3d:0d:22:09:fa:51:56:fe:78:17:
31:39:75:69:f1:ec:19:cc:e8:be:6d:9b:94:81:50:
52:53:28:e3:b2:2d:12:ef:cb:33:e3:fb:83:a8:8c:
b6:2d:b7:5e:18:9a:69:6f:b3:c8:2f:14:5f:65:d8:
44:be:80:85:a0:1b:27:8a:47:8d:b7:5b:18:cc:12:
9e:32:b4:5a:15:c7:0b:6b:04:63:a0:46:4f:b9:50:
f2:d2:e8:30:11:d6:96:74:d0:72:88:77:0d:43:c2:
96:7d:29:95:af:2c:46:62:cf:f9:2a:90:71:37:60:
32:19:24:59:6d:5c:4f:ce:df:c5:43:1d:28:4d:95:
32:01:79:a6:9c:9e:2e:2f:28:21:de:b9:a4:3a:08:
76:28:01:9e:3d:01:7e:2f:9e:f2:d3:a7:19:5b:c4:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:78:06:B8:85:75:E5:9B:0C:37:72:0D:82:09:8B:46:95:C2:DE:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc5720f5-bb8d-3a45-b264-a560ffeff6ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:48:52:77:02:02:42:d3:00:d6:02:11:79:5a:81:8f:68:10:
9e:33:53:b6:db:bf:0e:cc:1c:7f:f6:60:c5:68:b5:2e:4a:8d:
59:b6:8b:30:8e:ea:e6:56:b0:93:e4:1a:52:bc:5b:5b:c7:14:
0c:98:e0:09:79:96:89:6f:ff:7b:b4:96:e2:20:d6:ae:e6:b5:
f1:b4:c2:c5:70:9a:89:0d:69:95:0d:f0:b7:a1:ff:5f:58:37:
43:04:f6:23:50:6c:83:ce:70:47:1d:6d:4b:f1:ea:83:5c:d9:
a0:e5:db:29:9d:e4:a9:cc:01:9f:80:2d:37:69:cf:cc:03:12:
14:35:0c:27:cc:3a:e2:98:86:3e:37:36:f4:30:79:9a:1a:b1:
85:1c:6c:c7:5b:73:58:8c:fa:e0:53:4f:74:59:2a:aa:7e:2b:
1d:fe:3c:4e:ae:6b:c0:bb:15:67:a3:f9:36:d7:62:73:9c:14:
06:68:76:6a:66:83:c0:76:c3:0f:2e:b8:ac:33:64:eb:36:f0:
36:cf:93:c9:b4:f9:4c:94:56:6e:88:21:b5:66:04:99:be:15:
98:b4:a8:8b:57:f7:07:c3:0e:23:90:23:57:49:3e:0f:1c:58:
81:44:62:f0:70:a0:7a:e7:4e:a4:73:79:62:32:13:39:10:5f:
0a:46:d4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:56 2025 by rpki-client