Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be00dea4-2307-38c2-bf55-ad2b9b3983fc.roa
File: be00dea4-2307-38c2-bf55-ad2b9b3983fc.roa (raw, json)
Hash identifier: ZSvIu6SMWcqOpRp/A3+66rIByqZGBu6pZmA6D/KqXcY=
Subject key identifier: 54:BE:22:7D:08:EB:8A:F0:9E:5B:BB:46:5F:D1:44:76:CE:0A:43:96
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCEB23A140A312127C0C915D0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be00dea4-2307-38c2-bf55-ad2b9b3983fc.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 72.44.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:b2:3a:14:0a:31:21:27:c0:c9:15:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=31854e2b-9d1e-4e53-8e1d-28aeb81d12e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:74:8a:9e:aa:d0:6f:6d:2d:17:f7:d3:75:
53:f2:2a:d3:fa:e4:4f:0c:f2:a2:64:2f:7d:f9:e7:
d9:d4:a2:1c:a7:42:54:66:88:87:a8:f3:20:ae:f2:
83:33:f6:7a:cf:22:b7:54:13:6e:7b:a4:7c:0c:e3:
dd:3d:4a:1f:aa:97:45:85:6c:6a:a2:ed:82:13:47:
b8:13:1d:6f:f6:27:76:c4:1b:70:f9:ec:d5:25:bb:
02:72:bc:42:9b:a9:9e:3f:00:d0:f9:3b:d1:83:f3:
0b:3c:e7:f1:a2:d3:40:50:b0:b3:c9:18:44:44:ed:
f9:05:df:25:32:55:c4:05:38:4c:b0:6c:37:60:c3:
4f:b8:ff:61:9a:50:e4:3b:59:60:f4:50:96:a6:c2:
75:47:af:93:e7:aa:ed:22:83:42:12:32:c8:a8:89:
92:01:ba:3c:83:2e:52:62:6e:12:80:7f:49:0c:68:
c2:ab:e9:5d:1a:70:9e:37:41:38:07:ba:04:49:c4:
c9:72:5b:60:82:eb:51:9d:73:80:c7:25:cb:a7:5a:
23:32:e2:26:eb:ae:6f:f0:79:eb:07:9a:30:ce:6d:
68:5a:f1:7d:0b:9f:a7:b6:b7:a8:bc:87:51:2d:4a:
51:4d:70:38:23:b1:44:93:6e:be:2d:fe:31:e0:56:
61:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BE:22:7D:08:EB:8A:F0:9E:5B:BB:46:5F:D1:44:76:CE:0A:43:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be00dea4-2307-38c2-bf55-ad2b9b3983fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
72.44.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:ed:b3:c1:78:00:1f:c7:de:8d:c8:30:ac:8f:6e:86:2a:d8:
8b:66:fa:d6:be:e7:33:c0:95:22:28:e5:26:86:56:eb:d8:c3:
37:51:50:07:8b:de:ee:75:b1:23:87:14:68:e4:e6:d1:3e:59:
67:5d:a8:ec:29:bb:b6:67:74:32:67:47:f6:ab:ea:51:b0:73:
68:ce:75:c5:95:6a:bc:fd:9a:1c:fe:ab:1b:98:35:0f:20:7a:
b0:c0:f0:07:fd:1a:b6:0c:a4:75:0e:62:41:56:c8:26:57:2f:
12:db:6e:0d:3e:5b:f4:1b:cb:88:17:82:89:f2:05:8f:9f:e4:
bc:9d:ee:3b:be:c5:27:f5:7f:d9:c2:21:7f:42:6e:94:da:77:
a2:ce:7a:d4:e4:fb:f2:59:f9:d6:a0:33:bd:b2:17:dd:d1:d7:
fa:9e:f3:dc:57:2e:11:c1:aa:b1:c6:b4:09:a5:65:81:73:fa:
31:f2:40:bd:46:07:a8:db:80:b1:8d:a8:c1:3e:64:8a:95:d4:
52:84:46:a2:29:00:e4:00:c9:c0:b5:22:94:ce:8a:9e:1a:21:
b7:f7:25:3d:2c:85:b3:5e:f8:cd:4b:34:7a:69:25:a5:90:42:
1a:9b:e6:e6:ea:89:f7:75:81:c1:26:ff:f7:fb:ab:4a:9e:46:
67:ff:a6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:40 2025 by rpki-client