Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbdf4c1e-8bbd-3982-991a-de8dba10ca46.roa
File: dbdf4c1e-8bbd-3982-991a-de8dba10ca46.roa (raw, json)
Hash identifier: FbIXT1cKVGaoVY7o61TSg1YIdeaHdP20T2T5dgZXXX4=
Subject key identifier: AC:43:09:F7:12:BB:A2:E6:3B:38:31:C6:A0:6D:39:91:48:DF:1B:D0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA83197CB7A906D213B948CF0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbdf4c1e-8bbd-3982-991a-de8dba10ca46.roa
Signing time: Fri 21 Oct 2022 16:30:08 +0000
ROA not before: Fri 21 Oct 2022 16:30:08 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a8:31:97:cb:7a:90:6d:21:3b:94:8c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 21 16:30:08 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=922db6d2-9bd8-49e0-9b65-e4f6f0eb603a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:d9:eb:d3:1a:1f:43:6f:bc:4e:cc:96:4c:
d6:92:cc:1a:63:a6:74:42:19:5c:d3:37:0b:87:f1:
01:d7:0e:a3:e9:6c:9e:35:60:51:b6:e8:18:14:81:
f8:57:9d:9f:9e:51:79:5a:30:08:1f:b9:c6:24:e2:
c3:47:2a:6b:ba:99:c8:af:d2:25:39:79:6c:3f:61:
24:58:8c:7d:3a:e2:65:1d:8b:3d:b9:38:40:73:24:
03:68:03:23:3d:a0:7c:3e:1f:60:80:8a:44:cd:c8:
b5:36:92:f9:d4:22:bf:54:53:2a:73:a1:3a:f2:5c:
08:e5:2e:11:2e:19:6f:d4:2a:a6:c0:5d:4e:9c:01:
dc:65:25:40:0f:e2:46:96:01:77:da:3f:a9:5c:31:
9e:48:e5:4e:63:24:a8:d9:29:19:d4:9d:e2:1a:34:
61:cf:89:70:be:70:fb:23:d6:96:b4:31:49:4c:35:
5b:0a:5f:70:cf:43:91:4e:93:1e:4c:14:99:7d:f5:
d9:84:a1:3a:af:b2:1c:7f:9e:6f:db:70:f6:ca:94:
f8:bc:e7:70:24:b0:1a:14:58:70:18:4d:56:6b:f5:
0c:82:68:f7:1a:15:9b:70:a0:a8:d6:e3:bf:d8:37:
ce:c3:d9:a8:9f:71:ce:c3:ff:93:7b:e0:dd:bf:de:
2b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:43:09:F7:12:BB:A2:E6:3B:38:31:C6:A0:6D:39:91:48:DF:1B:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbdf4c1e-8bbd-3982-991a-de8dba10ca46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:00:fd:d3:ce:40:50:69:18:38:9a:27:62:f1:59:e1:51:d9:
85:43:c3:08:e9:d9:29:fb:28:c0:48:fa:dd:e3:7c:5e:66:44:
88:12:ad:cc:ca:7e:6a:55:c8:d5:7c:69:f0:56:0e:b6:cf:20:
e9:fd:48:6e:1e:21:66:55:2a:74:68:80:16:1c:73:96:7b:6d:
5a:0d:01:4f:b1:c7:a6:4f:d1:b4:c7:34:0c:3e:b1:b7:d8:09:
aa:48:f4:3e:33:0c:4c:1c:22:70:de:af:66:c8:05:f7:1c:48:
e6:8e:a5:77:71:7e:fb:80:d0:91:27:ab:1c:3e:d7:fa:61:c7:
94:33:15:b4:d1:6a:ef:08:51:84:78:fa:8e:b6:52:c0:60:9b:
06:76:00:67:e8:97:dc:59:8f:bb:59:a5:f8:eb:45:cd:e7:66:
37:70:cf:4f:03:67:36:de:9a:3d:62:c1:cb:0e:6d:75:da:4f:
b1:3f:b5:20:dd:08:8d:ea:11:a8:e8:7b:9d:cd:78:4e:a5:6b:
85:a2:99:7e:44:1e:af:d5:f0:e8:8a:a5:74:28:94:56:73:68:
f3:3d:fc:34:93:6f:c3:fb:3d:3f:01:f9:52:07:ee:a0:94:30:
85:49:54:44:7a:0a:43:85:06:0b:e1:1f:bc:ed:20:c3:9b:69:
bb:65:3e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:34:53 2025 by rpki-client