Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfa5512b-ef30-381e-b004-d98dbc8a8c9d.roa
File: bfa5512b-ef30-381e-b004-d98dbc8a8c9d.roa (raw, json)
Hash identifier: O2Bhm/KwhwXte/NyuwoUeVYwDSNRAo6adR9yBbufB1M=
Subject key identifier: 4C:3E:9E:5B:6F:5D:67:A1:E3:6E:FF:E0:59:F8:22:DA:0F:5C:4D:A4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBC611A8996B360F0C007CA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfa5512b-ef30-381e-b004-d98dbc8a8c9d.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 99.82.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bc:61:1a:89:96:b3:60:f0:c0:07:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=04452ec3-b1f6-45d9-8a8f-4da05023a6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:0c:9d:fb:83:7c:29:06:4c:84:3e:e0:f3:
72:e2:1c:6b:83:17:9e:e6:22:83:19:39:79:0d:92:
46:86:7d:ea:07:40:20:d6:82:d2:70:09:69:ec:56:
64:e3:52:81:f7:3d:73:32:34:7f:02:06:89:07:ff:
ae:d3:d0:c2:fc:10:98:60:e6:f3:99:33:fa:a7:77:
d3:fc:55:79:f7:d4:32:f7:b8:2d:ed:aa:a0:96:8e:
cc:7c:80:f0:23:b6:51:c9:4b:6c:75:21:0f:e4:f6:
5c:d0:c0:56:6b:fd:5e:f9:fb:02:f3:85:ad:1c:00:
70:66:7b:60:7a:eb:6c:90:a4:fb:02:76:86:9b:1c:
c2:4e:93:1e:ab:fd:5d:24:a2:46:08:59:ce:ea:8c:
e0:ac:47:4b:40:e1:3e:ed:29:d9:d6:82:6a:3e:df:
e4:1d:31:c1:64:3c:72:f2:a6:94:3e:01:74:6a:64:
a6:8f:c7:b4:9f:63:5c:b0:70:7c:6b:67:61:cc:ed:
64:db:03:60:6e:24:16:b3:d7:ea:98:cf:ca:c0:c9:
81:14:c8:cc:56:16:75:a8:0d:7a:71:72:ec:49:89:
0c:bf:09:31:27:d7:62:d2:58:d9:4c:1d:1f:dc:6a:
27:af:64:3b:b6:54:a7:a6:0e:08:41:b4:3a:33:e3:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3E:9E:5B:6F:5D:67:A1:E3:6E:FF:E0:59:F8:22:DA:0F:5C:4D:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfa5512b-ef30-381e-b004-d98dbc8a8c9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.82.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:bc:78:78:20:db:a9:54:98:7e:a9:93:a6:55:5d:73:a8:55:
50:4d:83:67:4a:02:a3:3d:ba:ba:bb:99:1a:f2:6f:f0:11:4f:
8f:67:90:89:75:fd:d7:9d:49:d6:7b:a7:d2:d5:13:51:fa:8d:
02:cc:4d:7f:40:3e:30:cc:bb:b0:c8:b6:7f:b5:21:2f:96:00:
9f:a0:2e:ee:57:fa:70:7d:0e:ba:46:ae:9b:19:17:5c:ee:ca:
8f:5a:cc:a1:69:21:9b:4a:47:3d:ae:31:45:a8:90:3b:b9:2d:
73:2c:f4:22:fc:d5:24:90:a3:90:ab:e4:02:69:52:b0:87:7d:
8b:df:92:b1:44:09:ae:6d:7d:ef:0a:42:c0:b9:cb:b9:0d:e7:
1e:2d:2b:49:32:91:5d:00:ab:b6:e4:0d:94:de:78:f4:29:3a:
70:66:6f:68:1b:81:28:80:c0:12:c2:a6:f7:77:0c:dd:1e:fe:
10:0e:19:45:f8:f6:8c:c9:b5:12:4d:bd:ad:f9:2c:a2:59:d7:
f3:58:bf:9e:42:9c:b4:85:ce:80:eb:e2:2a:12:f4:66:61:17:
15:03:63:04:47:5b:d3:58:f6:1e:08:42:e4:8b:a0:55:50:6c:
e2:ff:57:a2:bb:82:90:43:74:1c:d1:63:34:fa:0b:ec:03:b9:
ac:95:0a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:05 2025 by rpki-client