Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c1959206-830b-3fcc-b1a0-6e35d5d78562.roa
File: c1959206-830b-3fcc-b1a0-6e35d5d78562.roa (raw, json)
Hash identifier: dsQJdRd3G29J3HhADpdpuQnYuRMfxCwT0WxGXp6UMhE=
Subject key identifier: B4:6D:7C:C8:B3:5B:0D:1A:CC:23:11:A5:8D:23:5B:74:AF:B6:E3:86
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F59E86990F4AED3899D127700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c1959206-830b-3fcc-b1a0-6e35d5d78562.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 99.87.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:59:e8:69:90:f4:ae:d3:89:9d:12:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=69f2185d-1096-46b4-b3a0-5c2e2ae867a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0b:46:5d:91:f9:9b:fb:6e:29:28:8c:d0:e0:
03:ab:77:5d:e4:c7:4a:be:b5:a9:ec:6a:bf:7b:97:
5e:fc:f0:dd:da:b0:a1:07:4a:90:70:97:f1:83:b1:
b3:77:65:91:93:2c:39:96:77:9f:6e:db:7e:ca:14:
46:b4:f5:40:97:ef:2c:1d:40:0c:12:4a:b7:7d:99:
83:9d:5f:eb:52:a1:c2:39:0e:52:a0:38:5e:1e:38:
7c:9d:2a:17:3f:d0:c1:08:62:73:ad:30:eb:19:38:
a4:38:82:16:bd:19:7c:5d:ec:79:45:94:45:d1:6e:
be:91:c0:b4:2c:af:34:b2:8a:aa:4c:eb:67:d8:3e:
06:0a:2f:b3:2c:74:18:77:c3:bf:d3:48:01:d6:05:
22:3e:b0:7b:68:26:9f:f5:c0:a5:14:1f:cb:47:e3:
da:3d:ae:04:d5:70:64:21:de:35:37:94:11:27:9c:
36:0b:79:77:5a:81:5d:ae:b8:2c:f2:5c:b6:67:a5:
7a:d8:1a:57:06:b5:2a:cb:06:39:a8:7a:cd:40:ab:
3e:30:be:76:cf:8d:a7:30:16:ac:d0:a0:0d:1a:00:
c7:d5:fa:c3:e4:9f:79:ab:d3:5a:8f:52:bf:2b:73:
aa:d4:55:c1:02:e1:2d:b1:98:f9:ff:6c:a4:f0:e9:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6D:7C:C8:B3:5B:0D:1A:CC:23:11:A5:8D:23:5B:74:AF:B6:E3:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c1959206-830b-3fcc-b1a0-6e35d5d78562.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.87.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:2f:b6:23:d5:6c:ac:45:91:47:03:58:2f:14:0b:1e:c6:fc:
3a:76:17:26:87:d3:34:57:e6:c1:86:13:10:35:6a:00:0d:45:
49:8a:7a:83:53:ff:c4:44:a3:22:fe:71:cc:7d:d3:e5:18:ba:
f7:45:fb:3c:f2:24:9a:a1:d0:d4:a4:82:74:4f:36:6c:80:49:
dd:de:60:7e:37:28:6f:d9:47:7d:ad:07:27:1a:e5:32:06:2d:
06:33:8e:b9:8d:e7:e8:32:9b:51:f7:fd:40:d6:a3:b1:5b:d8:
70:5f:35:22:73:d0:0a:70:00:c3:af:98:fc:b2:5e:e0:9f:2c:
ac:cf:c2:9d:9e:36:47:78:ab:55:68:b5:cc:0f:fd:03:64:3a:
d4:0e:67:88:3f:57:ce:f6:de:9b:2f:82:2c:6c:46:c3:a4:b5:
0d:b4:37:f1:ac:16:63:c8:e4:ec:f7:5d:8e:66:c9:33:2e:78:
cd:0f:59:88:98:e9:f1:f7:75:68:20:9c:e9:da:a7:e2:84:5c:
a7:ce:27:fe:89:3f:4a:f1:d3:2f:8f:b1:46:e2:4a:ae:e0:8a:
f1:95:95:a3:e3:da:14:39:e9:d4:81:5d:1d:76:69:2f:48:40:
87:0d:54:8e:10:e4:9a:54:3a:d5:44:1b:05:2e:97:dc:32:15:
fd:c1:70:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:42 2025 by rpki-client