Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfa5347a-059f-359f-a1a9-2ba930d17022.roa
File: bfa5347a-059f-359f-a1a9-2ba930d17022.roa (raw, json)
Hash identifier: OzzPozVlRHYFRUWXucE9tSFp2jESOW6v1y3w0EbbZ8w=
Subject key identifier: D9:09:67:8C:BB:70:E3:8C:48:03:D2:72:11:C2:AA:CE:02:30:58:A3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBE2953E16B4EF1AA765D0B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfa5347a-059f-359f-a1a9-2ba930d17022.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 204.130.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:be:29:53:e1:6b:4e:f1:aa:76:5d:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=8220399b-b3a3-41c0-ab78-badff6257d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:86:bd:d4:93:3d:9f:3e:97:3b:b8:4c:4b:
4a:2c:be:3f:f7:15:45:3b:73:fe:7e:a1:98:d5:da:
cb:d7:9a:7a:9c:bf:2d:af:8b:3d:6b:f7:1a:9c:cf:
81:03:14:5e:af:bb:6a:0d:74:4b:95:ca:ed:d6:1c:
f9:76:d1:22:49:7b:5f:68:46:67:7f:ff:62:ca:cc:
67:24:f2:b0:63:48:5e:43:cd:8c:cc:fe:64:c1:d2:
77:cf:c4:d2:61:51:2c:cf:a7:ac:57:ca:05:71:ca:
0e:25:2f:52:e8:6f:6e:92:7d:5f:39:c1:35:01:b4:
0f:bc:6d:20:25:d6:24:9f:ae:20:7e:7b:b1:85:ae:
f3:ff:73:56:3b:96:d7:53:f9:44:70:cc:04:30:56:
36:77:6a:e5:dd:21:77:54:92:ef:1c:13:65:5e:f4:
d9:a2:0f:ae:2d:d8:4d:af:15:e6:6c:3a:c7:23:1e:
05:7b:11:06:1a:22:0d:e4:74:94:9f:e3:3a:4f:32:
47:0f:ee:aa:b0:2e:23:9d:92:d9:36:87:04:64:f5:
1d:7f:8a:70:0b:56:58:c8:95:54:4f:62:37:97:dc:
39:5b:58:3d:45:c4:e0:2d:c0:23:06:1f:ea:09:80:
eb:58:34:67:f4:99:a5:6a:2b:99:27:dd:25:0a:0f:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:09:67:8C:BB:70:E3:8C:48:03:D2:72:11:C2:AA:CE:02:30:58:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfa5347a-059f-359f-a1a9-2ba930d17022.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.130.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:2b:23:65:f4:31:8d:31:ce:f4:7c:c5:57:2b:bf:04:1b:10:
73:86:d5:5e:58:d4:31:1d:76:5c:98:86:7c:27:6e:44:27:71:
f0:a8:0d:70:6e:1c:d5:3b:52:5a:69:af:ea:d6:bf:15:ba:1d:
79:85:0f:e3:61:cf:6f:ef:4a:95:67:d8:7a:e6:a1:e2:2a:3b:
8d:ef:8a:70:4f:e2:1f:95:9b:f9:e6:17:3b:11:4c:55:2f:fd:
b8:e2:f6:a4:5a:8f:7c:6a:ed:34:67:88:71:de:bc:3f:0f:0e:
bd:85:12:1a:40:c2:20:c4:fe:b3:d8:e9:c2:0e:83:66:56:38:
92:40:01:11:dc:6a:30:7e:28:b7:b5:7f:13:39:3e:69:5f:6b:
a4:7e:50:5a:3e:cf:8b:07:e4:e2:9b:d0:09:42:59:59:d6:54:
ac:d1:80:3b:dc:61:7a:8b:16:fb:42:0a:1c:10:0f:83:d1:8d:
2a:85:2c:6e:51:16:bc:7f:a1:56:dc:c2:bb:76:5c:fe:ce:82:
4c:de:19:05:21:93:ac:49:32:c0:af:86:a3:2c:58:9d:71:a4:
a5:4a:1d:a4:e3:a4:1c:97:c1:1b:90:85:98:b6:45:96:9e:48:
26:f0:82:48:c4:5f:a0:2b:c6:4f:c9:ec:6d:a2:06:27:aa:b1:
f4:24:56:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:39:22 2025 by rpki-client