Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f38d45eb-a14b-3241-812b-d0916919f612.roa
File: f38d45eb-a14b-3241-812b-d0916919f612.roa (raw, json)
Hash identifier: oTUFggI+eJgtuHembPC02m58xy8zsvVWSup2qTDhjMY=
Subject key identifier: 3F:21:23:E8:0B:48:85:97:1F:6D:23:F1:63:2E:66:C7:B3:9B:3B:78
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840ADB7131660CC546CAEA77440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f38d45eb-a14b-3241-812b-d0916919f612.roa
Signing time: Mon 23 Jan 2023 12:00:00 +0000
ROA not before: Mon 23 Jan 2023 12:00:00 +0000
ROA not after: Tue 28 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 32.184.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:ad:b7:13:16:60:cc:54:6c:ae:a7:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 23 12:00:00 2023 GMT
Not After : Feb 28 05:00:00 2023 GMT
Subject: CN=94917a5a-4cd5-490c-835b-239fb30d6d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:a1:32:6b:b8:86:87:cf:f6:56:09:eb:82:
4f:be:55:24:03:ab:99:bd:a6:b2:47:35:0e:ce:b9:
b2:c2:93:33:fc:a5:12:67:9a:4e:6f:a2:04:d0:e0:
f9:88:4e:5c:a5:fc:e3:d5:2e:1c:d5:dc:41:4e:a8:
55:3a:80:2c:9e:51:9b:df:29:64:e7:7d:3c:32:5b:
a2:4f:2b:6d:65:31:ac:3a:cd:88:e4:7d:54:4c:25:
99:59:a9:61:82:f1:67:a9:21:fc:00:eb:ac:89:1f:
31:83:9b:61:c2:f4:6b:f0:95:a9:50:fb:66:ca:ca:
ca:66:cf:76:17:fa:c1:8c:b1:86:da:88:ff:be:65:
93:9c:f5:ac:9f:6c:58:ed:ef:33:2e:07:da:6c:da:
c9:8b:13:90:7b:35:15:46:45:c4:90:c4:b8:68:f5:
d8:2b:c0:40:e1:fe:28:b8:bb:7f:93:e9:db:48:93:
57:aa:b7:93:0b:7f:13:99:cd:23:d2:c4:e3:31:d0:
3d:ec:91:44:a2:ad:77:3d:91:54:65:bb:f9:2e:ae:
b6:85:76:08:60:a4:40:74:a7:06:19:89:39:d3:58:
8c:20:e2:0a:88:35:bf:2b:db:ef:df:60:85:ac:57:
76:32:7a:f4:c4:29:a4:d7:ef:c6:8f:8f:6f:50:8a:
f6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:21:23:E8:0B:48:85:97:1F:6D:23:F1:63:2E:66:C7:B3:9B:3B:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f38d45eb-a14b-3241-812b-d0916919f612.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
32.184.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:4f:cb:50:71:e5:b2:3d:4c:60:73:17:5c:be:b4:4f:6b:7d:
1b:a3:73:06:c5:43:74:58:b6:78:01:79:c7:35:6d:b7:af:26:
c7:b4:38:36:1c:27:49:09:53:1d:89:a5:e6:12:2f:82:22:65:
a8:2b:fc:fb:60:85:3a:91:b2:c6:b3:34:3f:1b:4f:2b:d0:4f:
5d:44:a4:6a:7d:f6:b5:60:84:13:b9:30:50:18:ba:09:e7:8b:
eb:68:13:37:85:53:19:1a:25:fd:da:f4:9b:45:3a:48:7b:a5:
f2:3c:15:95:b3:64:db:c4:a8:57:16:a8:bd:f9:19:b5:24:77:
07:37:0b:fe:2a:a7:f6:fc:90:ea:79:88:49:36:dc:59:64:26:
92:0d:00:7a:e8:9a:8b:82:08:d4:8c:cb:2b:1e:2f:3f:d4:ed:
d4:e1:ae:97:17:b3:f0:4a:4d:d0:7e:85:fa:a0:ef:fa:18:8a:
29:6b:22:b9:cd:c6:9c:d6:fb:e7:00:3a:8e:42:2d:ef:07:cf:
f7:68:0c:4c:ce:ef:20:fa:16:d9:27:e2:09:e4:f9:c8:2a:40:
af:a8:34:c7:18:58:c8:c0:35:cb:40:94:61:d2:03:f7:25:58:
2e:ff:83:08:7f:ae:a9:30:69:27:70:50:e3:08:ba:b0:05:06:
c7:87:e8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:49 2025 by rpki-client