Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/effa9502-5c0d-3341-8201-1519472e360c.roa
File: effa9502-5c0d-3341-8201-1519472e360c.roa (raw, json)
Hash identifier: NmMJLJX3fLx1unKXgohB43J1tPmQx2PRnZ81WYUxGuw=
Subject key identifier: 7D:00:CC:CD:4C:B4:82:86:47:83:67:20:8F:58:8A:6C:C3:55:0D:5C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6DFA2DCD66CF7E19F64C4200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/effa9502-5c0d-3341-8201-1519472e360c.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 174.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6d:fa:2d:cd:66:cf:7e:19:f6:4c:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=92d1eb5b-c23c-438c-b6e0-3831a8b04ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:eb:94:51:e1:21:47:ec:d7:ca:c5:9c:ce:
4f:bd:48:c4:23:49:bb:dc:66:fe:28:d6:91:10:55:
a1:32:b9:7b:10:8e:50:21:a3:96:70:2f:61:4a:6a:
02:b8:64:5b:1c:a2:14:af:b0:f4:58:3c:10:fe:36:
93:1b:27:a2:bb:dc:3c:2c:97:f7:09:ab:3c:04:76:
d0:9b:3d:2e:3a:da:d7:6f:20:d0:8e:11:9f:83:2a:
6c:65:21:97:2c:ac:82:90:14:34:27:fb:11:f8:00:
26:94:b7:5b:96:ab:a0:21:82:4e:ea:8e:b0:d9:07:
74:08:78:b3:8d:61:b8:a7:39:b9:6d:3e:49:76:5b:
07:81:07:80:74:4e:a1:23:c6:aa:3c:87:48:98:8e:
bb:c1:a8:dc:21:49:4e:a3:cb:cc:98:b7:27:fb:89:
01:fa:97:7a:75:e8:9e:df:63:7a:2a:c8:08:63:e3:
ae:c8:fd:1e:64:70:4e:ba:9c:00:2f:41:95:42:34:
72:0b:41:54:4c:53:57:47:73:42:30:07:51:81:cb:
1b:09:dc:f8:d5:0d:91:ef:44:63:a5:7d:e2:da:b9:
cc:4e:00:2b:91:27:30:6b:b8:7f:0c:73:2c:f3:c3:
29:89:f1:c3:25:04:83:cc:a2:bc:4c:dc:b5:c6:8b:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:00:CC:CD:4C:B4:82:86:47:83:67:20:8F:58:8A:6C:C3:55:0D:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/effa9502-5c0d-3341-8201-1519472e360c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
174.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:a2:57:9b:d8:13:b4:ba:72:f1:71:c4:52:26:10:90:bd:79:
df:7d:68:78:6c:fc:80:88:4f:ae:e1:bd:f0:0a:3f:1a:aa:67:
b7:9a:98:d6:d0:99:4e:f2:fc:6a:c7:98:70:4e:8c:fa:45:80:
dd:7b:e7:0a:73:f9:80:f8:ea:e4:c6:88:7c:e5:64:98:9a:b3:
25:22:bd:11:a5:4e:20:ed:5a:5a:02:af:4b:1d:cb:7d:74:a9:
11:a5:4a:fc:8a:94:27:af:78:91:22:e3:62:71:3b:2d:d5:01:
9c:1c:56:b0:28:96:ff:9b:a9:98:c6:10:eb:75:20:e8:4a:39:
78:f8:5c:08:ba:34:a4:56:3e:78:71:3c:fd:fb:33:40:87:3d:
36:48:a6:f1:2b:bd:40:21:a4:1e:ed:6d:90:61:04:5b:72:64:
2b:fb:71:5c:fa:61:3e:f8:7d:d4:e5:83:ee:91:1e:20:05:cd:
5a:d3:08:60:87:7f:33:96:f7:16:6d:00:36:16:8b:4d:94:b0:
c2:55:8a:aa:31:3a:ff:9f:4c:2e:60:fa:fa:4c:fe:90:ca:04:
de:0e:03:cd:a5:d6:86:33:c7:55:6d:69:f4:b8:c2:e5:3f:44:
30:14:15:8e:6e:20:03:cf:9a:7e:4c:f3:a3:79:87:f5:e8:8a:
f2:19:8c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:15 2025 by rpki-client