Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be120064-99cd-3ad1-8325-36eb7ce4ae9c.roa
File: be120064-99cd-3ad1-8325-36eb7ce4ae9c.roa (raw, json)
Hash identifier: lDoSy0tjVNSZpqDxhr6y1HdlF67ZGTOMdQ+vyM/UWV8=
Subject key identifier: 3F:0F:3A:3E:46:08:4B:3D:A3:6E:26:2F:36:56:DD:3E:C6:7A:EE:E8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404E45D94B678A62D583950A40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be120064-99cd-3ad1-8325-36eb7ce4ae9c.roa
Signing time: Tue 20 Dec 2022 18:48:09 +0000
ROA not before: Tue 20 Dec 2022 18:48:09 +0000
ROA not after: Wed 25 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 128.81.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4e:45:d9:4b:67:8a:62:d5:83:95:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 20 18:48:09 2022 GMT
Not After : Jan 25 05:00:00 2023 GMT
Subject: CN=5583a142-8abd-4bf9-bd8a-1203c0e689b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:e4:94:3b:39:3f:cf:4d:2c:84:51:1b:c4:
63:9f:3c:09:9e:0e:e1:7e:9b:be:cd:e0:62:60:ee:
8f:36:b4:91:24:76:8a:89:65:f3:64:1b:5e:27:6e:
cc:e3:68:27:f3:62:26:01:93:1a:4f:cf:ed:9f:0c:
c9:5f:83:80:52:d0:ca:d8:88:5b:76:11:97:ad:5a:
21:f3:bf:76:b1:fd:66:24:c9:c5:26:26:06:57:3e:
43:8b:61:a5:30:9e:f3:48:4b:04:88:47:23:03:aa:
71:a5:23:11:8a:f8:0e:47:f5:fe:b8:33:eb:94:2b:
75:36:38:a3:c7:ad:e2:f7:1c:43:38:47:d8:5e:30:
8a:db:63:bd:15:a2:4e:bc:9a:59:5e:77:b9:0f:6a:
9d:93:bf:0a:f2:38:86:25:90:86:e4:4a:b8:c7:d9:
77:4c:e2:a9:3c:4f:9f:fe:81:6e:a7:42:d2:82:0a:
33:59:29:4c:cc:30:79:c0:8c:b8:61:21:32:30:44:
24:33:0f:ac:45:be:71:9d:c0:14:59:09:7f:a5:a8:
ab:fb:85:e1:95:9e:01:5f:91:dd:3a:8e:0f:2c:47:
4c:a6:7f:11:dd:5e:1d:df:c6:44:34:65:3a:ab:da:
57:f7:db:f2:3f:ea:9e:3b:fb:53:ff:75:68:e6:f5:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0F:3A:3E:46:08:4B:3D:A3:6E:26:2F:36:56:DD:3E:C6:7A:EE:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be120064-99cd-3ad1-8325-36eb7ce4ae9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.81.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:13:3f:b7:9d:19:bc:c6:39:d6:2b:ab:6d:a5:29:6a:69:49:
46:6d:30:6f:df:10:89:c2:6a:7d:ec:9d:fc:79:aa:95:e4:1c:
98:66:ba:9e:c4:19:46:07:81:a9:05:7c:a6:cf:f4:ac:eb:c4:
a5:af:59:9b:d1:b4:70:52:df:56:c9:5f:01:ab:54:e7:c3:0e:
58:85:53:f9:b0:60:70:67:d0:c7:9a:85:40:fb:17:1d:ad:94:
cf:fd:58:28:44:02:70:3b:9e:40:8f:a0:93:f6:f6:40:d9:79:
07:55:fe:6c:a6:56:10:9a:e3:14:db:15:81:25:ef:e9:d1:8c:
ef:d5:12:1b:c0:0c:11:63:e7:15:dc:db:a8:44:0e:1e:4b:71:
7a:a9:e1:59:9d:99:73:94:87:9e:fb:08:f5:53:87:00:dd:b8:
ee:5c:c4:2e:1f:cc:a5:fc:5c:05:69:9e:a2:79:81:8d:c1:5a:
45:0a:2f:d5:80:64:74:2b:e6:79:90:56:d0:5d:1b:66:b1:9f:
5f:58:6f:5d:c9:4a:a9:64:78:16:39:62:94:ad:48:de:35:c6:
39:ac:ca:a6:e7:77:ca:85:78:dd:0e:d3:57:c5:3c:f4:50:f5:
68:08:34:94:aa:49:9f:79:4d:1e:97:69:1b:dc:a5:f7:97:3e:
54:b5:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:46 2025 by rpki-client