Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d685c651-35a7-3ebf-9e09-a4489f3c5db6.roa
File: d685c651-35a7-3ebf-9e09-a4489f3c5db6.roa (raw, json)
Hash identifier: c0NmVq4L474rzgvywse4k4L8J4EBNP3XGhJu4q1BuIY=
Subject key identifier: AD:E6:2E:74:68:11:A8:8F:1D:37:E0:E4:9B:9F:8C:DD:6C:E8:64:70
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE4E6386554117162070BCA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d685c651-35a7-3ebf-9e09-a4489f3c5db6.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 99.87.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:e6:38:65:54:11:71:62:07:0b:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=04bf0ccb-6165-40bf-8d52-10557c74b2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:f8:d3:f7:54:e9:d4:fa:f5:d5:cb:3a:4a:
3e:b8:ec:76:6a:b9:28:d6:89:19:ae:c8:ec:ba:4e:
1e:5b:67:2e:05:93:11:ec:5d:1d:62:1e:4b:55:a2:
35:36:ad:41:e4:fc:e9:6c:1b:ba:d5:50:a1:6b:2e:
88:97:2d:ae:cc:fa:07:35:5c:78:c9:d4:f2:c1:7a:
3a:5f:5f:f7:e0:18:be:bc:72:e0:07:0e:39:3d:fa:
b7:a5:b4:87:aa:66:3c:cc:f1:1a:15:ca:a2:10:32:
25:18:ca:aa:cd:36:df:59:dc:e3:de:54:a4:f8:af:
fa:c9:3f:0f:7f:01:fb:34:3d:00:7a:0f:ea:0f:c0:
9e:ed:a5:cb:25:35:9e:73:50:ea:96:8f:cc:e7:f4:
3f:6f:3b:cd:c2:6d:db:4d:97:b4:8c:66:25:ec:72:
e8:a5:05:55:76:79:29:16:be:d0:57:35:1d:77:2e:
e4:d3:88:f0:51:c9:d5:1c:a8:31:23:9e:ba:68:79:
f6:ee:79:63:e3:dc:59:5f:06:63:04:b6:a7:b4:1a:
54:cd:f8:6d:58:4e:58:3a:c7:19:85:a0:f4:13:01:
3c:c1:ed:9a:a2:d3:bd:20:88:4e:95:64:f4:02:44:
06:8b:87:34:86:d0:10:95:d0:51:b5:bd:c5:17:43:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E6:2E:74:68:11:A8:8F:1D:37:E0:E4:9B:9F:8C:DD:6C:E8:64:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d685c651-35a7-3ebf-9e09-a4489f3c5db6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.87.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:76:24:59:07:55:01:be:01:bb:e7:f4:9e:c3:7a:25:71:b1:
81:5a:cb:d5:51:c4:32:64:71:b9:39:e0:0e:74:63:bd:19:ee:
d3:fb:61:b5:fb:c7:d3:c5:5d:e4:f6:c2:d2:9b:39:33:4b:47:
1b:4e:ad:61:5e:56:ce:a8:9a:05:ce:3d:5b:9b:6f:33:8c:0b:
0c:e1:a5:8a:9b:09:ac:e4:a5:92:f1:30:de:76:6f:fa:38:96:
d1:b9:f2:9c:4a:b3:ca:53:e2:54:28:24:a8:0b:b6:50:b7:d7:
3c:e1:b0:cd:93:08:8c:99:e8:ad:05:a7:f5:a9:c3:a6:34:a8:
89:90:63:0e:4f:f0:41:71:0d:80:e0:84:98:37:83:d2:08:13:
80:1d:9a:28:98:09:8b:a3:a4:36:e0:24:dc:64:30:6b:fb:23:
f9:64:8f:18:9f:2a:24:6c:b2:ca:19:8c:33:66:1a:a7:16:b1:
5e:f5:94:cb:fe:63:54:32:f9:ec:4a:e6:cf:7c:a1:62:6b:61:
0b:32:67:45:de:63:97:fd:38:3f:6f:70:a8:7b:1e:15:6f:75:
9d:2c:d1:bb:2e:46:77:e9:38:cb:6c:3c:65:38:70:c7:5d:dc:
12:7b:3a:b7:42:05:13:27:e8:e4:87:e8:00:96:aa:bb:64:df:
e9:59:2b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:47:53 2025 by rpki-client