Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da493e25-ba35-30a8-81d3-d9130b04a8f1.roa
File: da493e25-ba35-30a8-81d3-d9130b04a8f1.roa (raw, json)
Hash identifier: 7k+y6A7RJEyeBrEIBixEfAbTaLs08TYCL15HCJVJJ7M=
Subject key identifier: 40:DD:5A:14:40:87:36:70:6E:97:11:52:07:D7:D7:5D:D0:FC:93:9F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF8EDC045239133EA26D91240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da493e25-ba35-30a8-81d3-d9130b04a8f1.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 99.78.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f8:ed:c0:45:23:91:33:ea:26:d9:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=0bb900ea-473e-4550-be62-bc88c50d71e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f2:2c:d8:64:e6:48:2d:d9:a8:8c:c8:74:8e:
c9:81:24:63:15:f6:57:80:a8:3d:08:94:ce:15:95:
c7:bb:2e:f3:17:88:3d:3e:59:7e:3a:fb:6f:2b:d8:
0a:3f:7d:15:22:9a:bc:82:02:17:ba:56:dd:3c:f6:
67:aa:ef:e5:de:ad:31:8d:71:ba:fc:83:b5:a2:d3:
0e:98:b4:a2:1a:25:6c:2e:53:da:f0:95:d1:16:c2:
4c:40:97:aa:8d:09:18:71:14:71:5d:c0:dc:a8:38:
04:eb:22:29:72:ec:c6:61:b1:bf:17:97:ff:a7:56:
2c:ed:6e:33:f6:29:27:e5:41:73:40:93:b1:0f:65:
18:19:13:16:ac:66:1a:e8:79:51:d2:ee:fd:c6:c1:
0a:7b:6d:41:ea:52:e3:51:6c:5e:9b:2d:1e:e1:82:
14:a4:99:7b:ac:89:4f:d8:bc:4e:24:24:99:7e:c8:
ae:33:83:78:0c:0e:d4:f9:a0:39:ff:a3:88:dd:70:
a9:b2:34:9c:de:e5:ff:ec:19:9c:4f:8e:36:95:5e:
8b:2d:8d:a2:6c:02:bc:6e:27:ac:b6:4d:e1:17:c4:
40:d4:b6:92:17:51:98:79:bd:94:74:ad:dd:21:87:
92:1f:36:6d:ee:2d:e3:6f:1b:44:fc:6e:d1:04:b3:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DD:5A:14:40:87:36:70:6E:97:11:52:07:D7:D7:5D:D0:FC:93:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da493e25-ba35-30a8-81d3-d9130b04a8f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.78.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:1f:1b:33:7d:e6:a8:06:e9:28:61:86:40:84:90:d3:64:fa:
87:fd:82:e8:4c:c5:b8:38:9f:bc:b7:c2:99:54:e8:ec:cf:d1:
09:ae:35:59:c5:e4:cf:c9:e0:b5:ed:2b:40:5a:60:31:48:ba:
92:6f:02:ae:14:f8:9b:56:85:3c:e8:ae:5f:ab:86:29:a7:90:
b0:27:9b:9d:06:b5:88:5e:9c:a8:40:66:5c:9a:36:43:75:45:
34:58:59:d5:69:bd:92:73:b5:7f:92:17:be:09:13:8f:8d:c4:
45:55:aa:ad:11:c7:1a:f2:b2:bc:1b:f5:31:33:76:e6:11:8b:
02:eb:44:96:0a:fd:6a:58:a9:3f:b7:93:4c:b9:85:07:be:ef:
c8:87:a1:1e:66:cd:c9:98:c8:39:a0:08:27:8d:b0:2f:ae:db:
06:ab:b5:51:d6:b1:30:09:00:f1:c2:84:5c:52:74:6a:58:60:
60:a2:e8:db:31:4a:4e:5c:80:dc:58:86:12:bd:19:d8:51:72:
23:e6:52:4f:5f:07:0d:2f:2e:51:80:3a:ed:9f:6f:38:ae:d7:
a7:0e:f3:55:ec:9b:f5:d6:1a:1f:3e:bb:89:9d:79:9e:6c:d3:
71:2a:67:c4:48:c2:b3:cf:f6:c1:1a:6b:02:e5:ab:ea:03:4c:
e1:6e:ba:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:40 2025 by rpki-client