Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4e96263-b94d-3445-9d9c-904fd4583f5b.roa
File: c4e96263-b94d-3445-9d9c-904fd4583f5b.roa (raw, json)
Hash identifier: BKBke0cncgoVW/YwiHm7qEWYifrBmjj7nyw9sWFcIJY=
Subject key identifier: A0:5E:2B:40:68:29:7A:5F:0E:19:C2:35:F4:CC:33:BD:E2:83:F0:F5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6FEFB521093D0B2B541FBB58
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4e96263-b94d-3445-9d9c-904fd4583f5b.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:ef:b5:21:09:3d:0b:2b:54:1f:bb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=de48eaa8-7cce-4c8c-b809-0356c3f990bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:31:6a:a8:52:0f:47:52:2e:74:0b:52:ff:3c:
11:74:cb:85:1a:e1:3b:23:06:73:ce:35:a2:54:7b:
11:7e:1b:d0:81:c2:d5:7d:e0:f9:91:6b:bc:ef:84:
5e:a0:fb:3a:5c:7c:de:a2:50:25:16:9a:1c:53:1e:
07:f7:07:dd:33:bc:90:ef:8b:29:27:c9:eb:c1:12:
0f:72:15:e8:5e:c8:54:c8:df:57:fc:ef:c9:bc:5a:
ee:c1:d0:67:04:5a:d4:78:68:e1:a6:dd:33:7b:71:
54:69:88:bc:9f:d5:67:98:64:3d:29:fe:b8:eb:4c:
ab:e5:32:33:cb:df:54:45:3b:a4:a6:7e:a6:94:e1:
5c:dd:9c:c8:b8:83:27:47:c3:41:37:b8:42:5b:e6:
14:8d:ef:26:96:22:0d:ba:13:a1:c5:91:42:5a:1f:
02:b9:9a:16:74:e6:dc:98:90:7b:ef:56:7a:03:74:
89:c8:cc:4b:27:f5:f8:e7:1a:3b:ca:9e:ca:bf:9d:
cb:64:da:b0:31:af:b4:6f:d7:9a:51:4d:74:47:87:
53:fb:48:aa:66:47:e7:c0:07:96:fc:ad:99:af:25:
c4:83:5d:8a:ba:00:25:c5:71:00:dc:e2:d9:6d:5a:
25:c7:62:bf:b7:b6:eb:60:ee:81:b3:97:30:ef:f8:
bd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5E:2B:40:68:29:7A:5F:0E:19:C2:35:F4:CC:33:BD:E2:83:F0:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4e96263-b94d-3445-9d9c-904fd4583f5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:f6:9f:a0:e0:97:a2:81:23:37:c5:50:e9:96:13:39:78:af:
e9:ae:8b:bf:54:7e:24:2f:77:ef:36:fb:9f:1d:cb:2f:ef:20:
25:90:b6:6d:59:1d:b0:e0:b9:50:38:3f:0d:20:20:fe:03:f7:
58:39:44:8b:15:52:68:6b:82:a5:ba:f6:17:98:4b:69:c0:93:
df:1a:0a:a4:e8:f4:37:59:eb:a1:54:1b:32:ed:29:32:6d:1a:
5e:89:bd:d6:68:26:f3:07:77:b7:ed:26:f1:73:fc:a5:7c:93:
6a:7c:cb:42:ed:63:19:4f:16:ac:08:bb:b2:f4:3c:cf:69:44:
cb:47:59:cd:6e:96:6c:58:d4:49:b9:9f:e0:63:01:9a:6f:96:
16:71:68:b4:7b:9e:b7:78:88:ea:cb:96:f4:3e:27:50:98:4b:
7e:ca:09:73:05:ba:fd:7a:4c:89:f9:6e:49:b6:1f:96:71:7b:
4f:0f:e8:4f:7f:36:81:a2:af:33:f6:14:a4:27:d4:c8:3b:dc:
7c:da:b5:d1:c9:6b:23:a4:d6:6f:cd:cc:65:53:6a:d0:0b:bb:
92:3a:9a:b9:6c:b7:f8:cd:d6:b8:56:13:50:68:47:51:d9:d1:
fa:f2:97:e7:82:c2:d8:6b:2e:f8:99:d5:52:9d:d2:bf:5f:eb:
f2:40:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:18 2025 by rpki-client