Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd33d7f4-a912-3ad9-9cab-038f4f233e2e.roa
File: bd33d7f4-a912-3ad9-9cab-038f4f233e2e.roa (raw, json)
Hash identifier: ZzhpDxig8tTLc7hiQgSH5MJf9W1xA6hCdoz/53a4oOE=
Subject key identifier: 82:19:74:11:0B:C8:E3:13:95:D1:34:19:81:5E:AA:E1:FA:C9:20:35
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C967789089F7A641289F835C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd33d7f4-a912-3ad9-9cab-038f4f233e2e.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 72.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:77:89:08:9f:7a:64:12:89:f8:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=934e56f1-e737-4ca3-8c9c-4245867a2822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:58:97:1a:ea:74:c5:91:8d:7c:08:8b:52:70:
be:8c:e6:30:4c:11:d8:2e:b1:4a:3a:54:b3:cc:65:
30:6b:84:1d:f3:a2:2e:75:d9:96:91:37:03:5e:a2:
ab:1d:fc:75:e5:f2:11:c5:79:b9:e6:a5:41:66:52:
d6:64:e8:3e:b8:8b:e5:58:8c:98:a2:a8:67:44:37:
b5:da:05:dd:72:fa:f3:10:7d:c2:db:7f:8c:44:3e:
67:0b:b9:5b:d2:ec:55:da:7f:d6:1b:fa:05:68:89:
be:1b:a5:57:96:a7:7c:cc:0c:7f:6c:13:64:3c:37:
cf:bb:c6:b2:08:92:0e:af:4a:3c:b4:2c:bb:0c:9e:
bf:5a:cd:b0:1d:72:b8:38:d4:98:3a:9a:47:de:9a:
1b:dc:2b:85:85:e5:f6:1b:88:d6:56:5f:c0:3b:4b:
bf:e1:19:94:69:35:85:08:ef:7e:ae:09:39:69:83:
30:c1:f6:78:b5:53:1e:ea:c5:59:d8:63:e0:96:d1:
b6:aa:84:05:7e:b7:4d:52:00:51:8e:7d:cd:eb:08:
2b:b9:28:43:54:82:8e:d9:a3:89:98:9f:43:9f:df:
91:8e:5f:84:1f:c7:c0:3c:10:5e:24:a0:5c:d3:84:
55:90:fc:9f:b1:3f:9c:06:eb:b8:f7:9a:09:39:d7:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:19:74:11:0B:C8:E3:13:95:D1:34:19:81:5E:AA:E1:FA:C9:20:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd33d7f4-a912-3ad9-9cab-038f4f233e2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
72.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:b0:84:e1:a1:ce:c0:ef:07:12:5e:31:13:29:c7:2f:dc:8c:
ee:cc:d4:3b:3a:a1:3c:13:2d:a9:8f:a2:4f:d3:52:85:8e:33:
a9:cb:9a:e2:db:fa:a6:8f:a5:13:a1:6b:df:95:10:85:34:89:
a0:58:25:c8:ec:e1:e0:d3:8f:94:07:86:b0:ed:39:4a:4d:be:
0d:3f:39:f2:7a:26:29:1e:ae:bb:ec:5e:36:5e:8b:9f:af:76:
da:c4:68:f4:da:e9:e1:1c:c7:13:34:b3:6c:b6:20:a9:75:d9:
e5:76:39:1d:20:82:60:44:c3:08:07:3b:37:09:39:e1:c3:92:
20:57:ed:82:24:ae:0a:e6:0a:8c:75:04:02:d7:40:57:89:a3:
a8:92:b9:e9:e8:db:8e:bf:0e:c5:bd:3b:87:e9:a3:fb:9c:e9:
10:5e:e9:de:e4:89:09:37:69:a5:75:1d:cc:9c:ef:72:b6:2c:
07:ee:f5:21:26:c1:03:e6:d2:3e:e4:f8:7e:db:00:95:10:b6:
4f:aa:1a:88:8e:7e:b6:8b:65:dc:12:a4:1a:7a:de:53:1d:c0:
86:2f:be:e5:64:af:22:d0:d0:43:30:a1:d8:94:8c:fb:4e:c5:
90:b5:55:5d:5a:71:83:27:a0:0e:f0:6f:6f:84:5a:80:5e:40:
70:d8:82:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:42 2025 by rpki-client