Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce07cec9-e234-363e-9e47-35a802ace587.roa
File: ce07cec9-e234-363e-9e47-35a802ace587.roa (raw, json)
Hash identifier: W2UJW0YAXiCiKmBNzlxhWHF1JEazP7fy5naMG4YLpjA=
Subject key identifier: A6:70:E0:E0:42:E3:7C:19:5E:0D:0B:65:FB:08:B7:AE:D9:D8:4D:A8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C3B343453261ADEB71C057A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce07cec9-e234-363e-9e47-35a802ace587.roa
Signing time: Tue 31 Jan 2023 12:00:00 +0000
ROA not before: Tue 31 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 13.60.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c3:b3:43:45:32:61:ad:eb:71:c0:57:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 31 12:00:00 2023 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=6888005b-fd52-4c29-b3a0-5545d6859136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:44:cf:e7:8e:b6:df:43:6c:05:83:69:5e:
71:43:5e:05:77:f1:05:ed:aa:79:c0:16:97:ef:fc:
ab:54:48:15:66:ec:ca:27:8d:c4:7a:63:b4:3e:b5:
79:f2:02:63:bc:b9:73:6e:66:f9:32:9f:bd:c8:cf:
76:67:9e:1b:84:4a:02:5f:1a:dc:36:a3:d6:17:c0:
f7:c2:c6:91:b2:bd:ed:f2:ae:93:a3:78:6b:d6:2c:
d5:b5:91:53:e8:9b:fd:9b:0d:94:ae:91:6c:53:31:
42:10:14:57:06:3e:67:7f:79:08:e5:e6:d7:35:3b:
ea:55:3c:06:b8:18:cd:16:b6:3d:ce:5a:93:71:ce:
19:7d:c5:53:c0:9f:0d:63:69:bd:2f:2f:fa:3f:3a:
89:8c:13:2c:a3:6d:ba:c2:6a:b9:03:e3:df:c6:62:
e4:37:38:e0:e0:45:bf:49:bc:8a:8c:68:e6:26:4c:
d3:a0:a8:1d:0a:95:1c:81:b5:41:ed:29:b5:ea:d3:
89:38:fe:82:fb:94:45:bb:df:73:31:ec:ac:3e:a6:
e9:a9:49:d9:b2:3c:4a:9a:ee:7b:ec:78:cb:29:69:
4a:64:cc:45:a0:25:a0:a1:e1:cc:c7:dc:d7:20:b2:
93:46:d3:45:57:87:6e:d9:35:3d:3f:08:44:35:92:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:70:E0:E0:42:E3:7C:19:5E:0D:0B:65:FB:08:B7:AE:D9:D8:4D:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce07cec9-e234-363e-9e47-35a802ace587.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
13.60.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:32:9c:de:21:f8:ac:8a:61:8b:12:02:47:4e:4a:4f:83:e6:
fc:d0:0c:f3:f1:bd:46:61:5d:d9:30:69:65:ff:45:21:f1:ef:
d5:3b:ff:50:22:5c:31:98:df:07:1b:f2:3d:a2:85:1e:88:d1:
4e:20:32:8d:d5:91:52:f8:66:a5:db:cd:0e:d5:76:58:d1:4a:
7d:ee:5c:0b:f4:18:06:63:47:60:f6:41:82:f1:5e:2e:5e:ce:
8d:e4:ea:04:71:04:b0:71:24:ad:4a:90:9b:80:d4:3c:62:33:
e6:83:be:77:5c:0c:ac:e8:33:94:5f:02:3f:18:bd:21:68:97:
01:75:fc:c5:78:fb:e9:0b:aa:6b:4c:1e:bb:62:36:f0:13:25:
f5:a4:9a:99:0e:65:ba:24:55:3d:3b:b6:0a:ab:3f:88:5b:3f:
00:46:8c:12:74:a2:90:1f:04:56:88:3d:c9:02:6c:b8:b5:77:
0f:2c:62:83:f9:f3:7e:bb:b6:bc:94:d5:8a:de:83:1d:79:dc:
38:88:b8:13:66:3a:81:62:d8:91:6f:6a:ec:17:09:26:47:ef:
04:a3:7e:fb:a3:8c:fb:b5:16:61:51:c5:27:0a:06:54:96:f3:
f7:be:96:d2:ca:9e:4d:19:07:95:c4:b6:62:5b:99:10:d7:31:
16:c4:a3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:02 2025 by rpki-client