Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c514c874-e474-31c7-98e8-ad4bcfd2e971.roa
File: c514c874-e474-31c7-98e8-ad4bcfd2e971.roa (raw, json)
Hash identifier: gz9fFP2LZqIRzmJFOyOh1STwbyQ3HtGQ0BtDi1KEzjE=
Subject key identifier: 75:5B:5E:64:64:D8:22:E4:66:F5:FF:49:C0:C1:F3:96:43:EF:C3:CB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0C54295B2A1350F46C629100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c514c874-e474-31c7-98e8-ad4bcfd2e971.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:54:29:5b:2a:13:50:f4:6c:62:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=7d81cb21-2d08-4f4d-821a-f0db48be0f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:43:fd:51:91:c5:d8:3b:42:67:d3:6c:23:4d:
c7:b5:e3:4d:27:44:7d:e7:d2:b8:4b:fa:b7:50:79:
58:4f:f7:a9:67:b8:ec:8c:29:38:81:19:7e:b2:eb:
23:5f:13:72:6b:7a:34:f2:c1:a9:50:2b:49:83:86:
2c:30:2f:f7:81:6c:f2:73:e0:92:b5:d1:c2:dd:ae:
05:3c:e5:1d:17:50:ba:45:20:de:be:30:46:63:34:
2c:81:d9:59:cc:fb:fa:95:34:2e:b7:8b:2c:88:59:
18:c3:e9:62:95:ec:d2:f5:1f:78:1a:c2:10:76:dd:
1e:50:82:f1:c4:df:fc:0e:18:dc:5f:70:f7:f9:fe:
74:22:63:01:73:0d:3d:57:6e:e8:72:f8:48:31:27:
4e:e7:f9:d8:4b:87:ce:fc:bd:f6:91:eb:68:66:e7:
0d:1f:b8:2c:50:e8:0c:f5:31:ed:38:09:ec:de:2c:
ea:5f:bf:df:7f:0f:c7:74:05:d0:d4:9d:e7:41:a2:
2b:4f:d2:08:b4:9d:7f:3a:b6:50:1f:80:89:6c:0f:
0d:fa:39:8a:b1:14:e1:db:ab:95:9f:8e:3b:e8:06:
f7:c6:7e:9f:6f:da:fd:ed:e4:17:26:54:0e:d4:49:
30:9c:dd:1f:bd:ab:8f:bd:26:f7:83:69:48:1c:89:
42:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5B:5E:64:64:D8:22:E4:66:F5:FF:49:C0:C1:F3:96:43:EF:C3:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c514c874-e474-31c7-98e8-ad4bcfd2e971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:45:e1:a0:01:63:9b:5b:2d:ce:ac:eb:31:2a:1c:a5:4e:49:
cd:23:43:6a:c6:9d:8c:b2:aa:3c:16:34:90:1e:89:cd:f4:9a:
d6:a7:e4:be:65:5b:5b:cb:4d:dd:1d:77:d1:dc:7f:80:44:b1:
4e:5e:ae:f9:81:d9:05:7a:c4:df:1b:8c:99:89:72:01:12:54:
8b:ce:21:e8:14:47:ae:94:81:94:cc:75:c6:0d:2a:0d:fa:ed:
ea:87:14:4c:eb:bc:fd:d2:a7:37:33:47:fe:61:14:7f:45:fe:
82:6d:21:4b:70:f9:d4:d6:68:ea:6e:a8:63:ec:8e:2c:24:c4:
ba:02:d1:23:d6:a3:fd:2e:7f:7a:4e:70:b9:9f:fc:d9:46:1d:
40:8f:b7:ef:95:ea:59:f7:3a:d6:de:2d:a1:a9:7e:b2:e4:0e:
b9:c1:0d:53:75:8f:78:50:16:2e:c5:e0:bb:ca:35:54:d2:98:
eb:6e:5c:2b:bc:cb:3f:52:38:ff:5a:46:21:2b:0c:5e:65:34:
c8:f3:f4:21:09:4b:93:51:f5:93:33:57:ba:1b:a1:e8:30:c5:
24:92:89:d6:e1:48:92:36:8e:c9:e9:dd:5e:8d:6d:91:75:bc:
81:78:72:e1:6f:62:0d:90:6d:ff:1c:85:38:7a:b0:9a:6c:e4:
8a:be:51:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:05:24 2025 by rpki-client