Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfeb34cd-1825-3f65-8904-a0dd48dc0a3a.roa
File: dfeb34cd-1825-3f65-8904-a0dd48dc0a3a.roa (raw, json)
Hash identifier: Mhq+pFHz3ayEmg64P5l3wXXlBuzDNmata3X2x4ULCCM=
Subject key identifier: A5:C9:7A:C6:99:62:D2:8D:14:22:01:D7:8B:9F:B5:39:96:F6:AF:99
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DA8C82F9D2F09F985DFA94C20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfeb34cd-1825-3f65-8904-a0dd48dc0a3a.roa
Signing time: Thu 21 Apr 2022 12:00:00 +0000
ROA not before: Thu 21 Apr 2022 12:00:00 +0000
ROA not after: Fri 27 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a8:c8:2f:9d:2f:09:f9:85:df:a9:4c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 21 12:00:00 2022 GMT
Not After : May 27 04:00:00 2022 GMT
Subject: CN=9b3e26df-7e89-457d-8991-325d643073ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:01:75:b3:e9:82:11:23:e3:92:de:ff:58:
5d:ed:e7:c5:d8:9f:c1:5d:06:68:ec:d7:99:d6:a4:
28:bb:a1:aa:f5:70:a9:cc:28:ac:d6:4e:11:37:36:
84:3d:52:bc:62:4e:72:0d:a0:2a:85:f5:22:fb:23:
53:f7:cd:c7:f3:02:65:de:f3:39:02:a1:46:68:01:
f2:08:28:11:20:77:65:a9:d8:19:5a:4b:4a:2e:03:
6d:e9:9d:19:79:d6:a3:ce:c8:ca:ef:55:aa:dd:e8:
97:42:08:3e:b3:12:d8:bb:59:30:b6:41:25:2f:ce:
28:34:9a:e1:f1:30:e0:fb:00:9c:52:06:99:48:fe:
cc:05:ef:bf:1b:e8:cb:cd:f6:0d:64:fe:57:bb:99:
d9:be:b0:aa:f8:82:19:db:3b:88:50:6d:93:80:c8:
e8:90:fe:71:4f:12:c4:45:00:c3:ce:bc:0a:53:b6:
21:d2:80:43:fe:47:53:de:73:d8:54:e2:0f:c9:f1:
d7:e6:2a:87:72:71:b9:6a:82:ba:f5:dc:51:1d:09:
f2:1c:ab:50:60:cc:20:04:09:35:61:62:55:2e:21:
de:1c:42:6a:f4:ed:00:0f:1e:f3:da:8b:9b:73:f7:
59:62:e2:79:48:61:1d:85:70:ec:f9:78:99:fd:e7:
e5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C9:7A:C6:99:62:D2:8D:14:22:01:D7:8B:9F:B5:39:96:F6:AF:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfeb34cd-1825-3f65-8904-a0dd48dc0a3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:68:e9:c1:de:de:ee:df:0d:4d:55:fc:14:54:3d:00:3f:55:
7f:c2:75:99:6c:9d:4e:d4:1b:0e:03:4d:de:c6:8a:da:8a:91:
38:00:80:11:f4:7a:39:02:68:e4:35:79:72:c3:7f:43:4b:53:
5a:c4:a0:8c:aa:c8:25:17:88:bc:d2:e9:8b:4a:6a:aa:2e:c3:
49:c9:4c:1f:bd:81:80:63:8c:8a:65:fd:55:17:0a:d8:ef:4b:
37:36:94:07:b5:3b:31:0e:a5:5a:c8:e7:b2:11:7d:a6:9a:fe:
dd:05:21:b0:3b:fe:cc:46:b3:f2:35:26:99:02:a2:d1:cc:9d:
46:2e:2f:61:ac:56:8a:4d:0b:a4:76:16:1d:54:36:be:b4:4a:
55:e4:97:9a:90:8e:af:8c:d2:9b:e5:b4:4c:e7:d7:cb:8c:45:
fc:46:6a:7b:72:a7:b5:e8:f8:a6:7c:75:93:32:c7:cc:a9:bd:
2b:aa:05:07:78:0e:0a:24:6c:87:88:28:04:95:c8:44:ef:bd:
e2:6f:ec:28:bb:30:ea:d6:4d:63:6b:07:4a:d8:79:22:1f:c9:
b4:82:72:be:f5:47:3f:69:85:6d:e2:75:3c:56:ea:ef:ea:fb:
1d:33:70:eb:a4:5f:29:76:07:73:84:29:e4:d6:fa:e1:5f:6f:
d3:c5:16:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:07 2025 by rpki-client