Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2c2cda3-2078-39a1-a0bf-f7b591a9aa20.roa
File: f2c2cda3-2078-39a1-a0bf-f7b591a9aa20.roa (raw, json)
Hash identifier: rlvmfMZKdWW2JMv3aurhGuwJlM8z5tSh++Ka1e4Hc1Y=
Subject key identifier: 5C:A0:79:0B:D5:C3:C4:14:14:32:6A:E9:42:BF:D5:AE:F9:59:3D:40
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C96BACE4869E96B3FDA841600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2c2cda3-2078-39a1-a0bf-f7b591a9aa20.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 130.171.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:ba:ce:48:69:e9:6b:3f:da:84:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=24ae2d9c-5222-4656-8705-64161955ebe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:87:45:c7:19:33:00:80:47:1e:ae:78:83:
0f:99:06:eb:1e:ee:74:df:06:f8:b3:03:ba:48:9f:
a3:fc:f6:75:f9:3b:73:21:be:27:20:a2:c7:65:f9:
a1:a2:c7:a2:08:fe:b0:13:49:04:63:6d:a5:39:c2:
06:09:90:a4:2a:64:7f:66:39:b4:16:48:5f:0f:15:
fc:22:f9:92:30:3b:df:fb:a2:c6:53:de:c2:3d:e4:
43:6e:b2:b5:94:eb:1f:12:70:4f:aa:c7:24:24:24:
00:4a:8b:37:23:30:e3:26:f7:27:16:5b:80:0e:23:
f3:56:83:55:bc:a5:e4:e9:17:5e:6b:d1:ac:6c:2d:
ab:11:9b:f7:c2:ff:70:fc:d1:75:02:75:a0:68:b3:
1a:08:91:7a:ed:a0:57:c0:68:3d:e8:6a:10:e1:85:
df:36:44:44:1b:e6:12:32:8d:0a:7e:5c:55:70:42:
8a:23:56:81:0c:28:bf:bf:14:44:91:75:af:52:b4:
38:46:c4:66:97:d1:07:94:33:70:5a:84:8d:65:9c:
93:d5:b3:9c:98:36:e7:32:cb:57:7e:48:05:e0:03:
02:c2:65:b8:cc:73:58:7e:7e:36:33:21:d0:5e:a0:
74:82:3b:fb:2d:ec:dc:40:09:13:40:a0:57:0c:e7:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:79:0B:D5:C3:C4:14:14:32:6A:E9:42:BF:D5:AE:F9:59:3D:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2c2cda3-2078-39a1-a0bf-f7b591a9aa20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.171.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:c3:39:9c:2b:4b:f9:51:71:95:ac:42:3a:bc:8f:6b:9a:66:
be:d0:c6:b9:45:5d:1c:bd:c6:3f:42:65:39:f3:e9:cf:b9:35:
2a:83:84:6c:44:53:2d:2a:74:5d:be:f3:73:20:1c:a4:0f:58:
5a:c3:1f:6e:66:69:af:3d:a0:1c:cb:d5:c0:01:5e:e0:d4:41:
2b:88:5f:ff:09:45:c4:12:88:85:1b:6b:79:1a:dd:d6:4a:cb:
6c:53:66:13:29:42:92:a8:ad:84:a9:4f:f3:68:1a:36:d7:fd:
ff:0c:3b:cf:c8:8b:76:ad:9f:da:77:44:95:a8:96:65:e7:fb:
3b:71:6d:ec:ab:2e:4c:31:f5:b4:b7:c6:23:fe:54:57:5e:7b:
fe:2c:49:11:b0:e1:82:0b:b7:7e:06:fe:36:9b:e2:b9:d8:6b:
9e:d0:08:e1:43:ed:df:d4:4a:b6:04:a6:a4:35:53:3d:5c:16:
ec:ee:7a:62:fa:d7:93:b7:3e:45:49:55:2d:3d:6a:ac:7b:72:
99:1c:fe:b3:cd:56:eb:76:76:ee:04:69:1b:02:bf:2e:59:9d:
36:9d:6f:5f:38:20:18:3c:43:46:65:7b:2b:2a:be:9b:49:d4:
d7:3f:c8:db:7e:87:69:8b:9c:42:39:3a:27:52:81:a7:79:41:
60:88:41:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:43:44 2025 by rpki-client