Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cca619bc-95ec-3da9-9d7a-00212d06774a.roa
File: cca619bc-95ec-3da9-9d7a-00212d06774a.roa (raw, json)
Hash identifier: zCSBINXYKIgBw56jYOPy6MAZlRnA9jPIQ9ptIbpMLTE=
Subject key identifier: 1B:A3:14:CE:B2:2E:C1:B0:92:B4:C4:FC:0A:44:8F:EC:09:62:91:01
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D815A58F898035F4309F68D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cca619bc-95ec-3da9-9d7a-00212d06774a.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 99.87.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:5a:58:f8:98:03:5f:43:09:f6:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=7b68e4d1-257e-416a-a2a8-5a39f69675e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:41:19:96:01:f1:67:ff:e8:f9:2e:cc:1e:
67:53:f4:10:b6:9f:bb:62:cb:9b:06:2b:ae:d0:1d:
f6:38:a0:8e:54:ab:47:00:73:c6:12:70:0f:57:28:
61:c0:bf:96:40:99:fb:c3:ed:cc:3b:fe:90:79:5b:
22:16:3d:e3:e9:9e:9a:8f:95:2a:2e:dd:a3:88:f9:
2f:77:c5:c9:47:eb:ae:d8:94:89:50:76:45:6e:d6:
44:0c:6f:de:2e:25:63:c0:17:55:12:d1:ba:b2:23:
41:5e:ba:de:16:31:a0:bf:74:56:00:50:0a:1c:ff:
be:c9:71:58:86:6d:e3:14:3b:bf:2c:31:c2:11:27:
70:31:89:d8:4b:08:68:a0:a4:84:ce:ad:ad:82:df:
42:83:b6:79:81:57:0d:a9:61:48:1e:fa:2f:9d:5c:
d1:81:49:88:5d:ee:bf:35:52:99:72:24:86:fe:70:
40:a4:b0:72:cb:03:5a:49:79:ce:4f:e8:0d:37:77:
1e:44:30:14:ee:d9:21:16:78:1f:6a:46:03:7f:29:
aa:26:df:15:3d:12:47:62:5f:ac:96:bd:88:bf:d4:
28:70:a1:8b:91:02:96:d3:58:3a:5f:ad:0e:51:6f:
90:86:23:33:91:d1:7f:e2:5e:22:83:69:14:db:0a:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A3:14:CE:B2:2E:C1:B0:92:B4:C4:FC:0A:44:8F:EC:09:62:91:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cca619bc-95ec-3da9-9d7a-00212d06774a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.87.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:8b:4d:68:55:1d:ce:47:8f:36:49:ee:61:0c:1d:ab:bc:54:
df:2e:19:67:57:f8:62:97:7c:f4:f1:0f:52:f5:06:21:7f:7f:
96:cc:67:ce:d3:ae:17:9e:91:21:20:7e:1b:bf:8c:3e:a2:3d:
51:0f:2b:5d:4c:66:35:61:50:fb:e1:87:79:a1:8c:6c:24:8a:
4b:f1:62:b8:29:bd:8b:23:40:b8:ee:ea:18:0b:e3:bb:9d:49:
73:2b:5b:24:c1:87:8b:cb:24:ff:28:f9:56:77:af:77:f3:74:
a6:60:17:9e:1c:c7:c9:11:59:35:97:d8:37:cd:ef:f2:ee:23:
90:66:79:4d:b2:76:a9:ca:7b:69:26:73:0a:73:1e:e4:5f:2c:
b2:e7:c6:2f:e5:2e:13:9f:8b:f0:67:e3:b5:b7:d8:1d:a6:05:
d9:ab:83:82:0a:af:77:f3:43:c5:2a:3d:a6:11:1a:28:00:1c:
c1:71:1b:8c:bc:ff:98:7d:e6:53:d2:62:53:5e:05:0d:f4:55:
6a:ee:24:f0:7b:25:d2:a1:b2:fe:26:b8:94:97:59:92:0b:e2:
9c:7a:a9:8c:5f:35:b6:72:80:2a:6b:1c:08:97:77:5b:fa:cc:
ea:49:19:d6:20:85:a5:20:0c:2e:b8:05:fa:f0:e7:34:6a:8d:
d8:d6:67:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:53 2025 by rpki-client