Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f87bf70f-757d-3117-8c41-c3713a86aa4a.roa
File: f87bf70f-757d-3117-8c41-c3713a86aa4a.roa (raw, json)
Hash identifier: t7DkhrGrMzJgFjC5N4GSkMzD20JihEq3OpFSDaSPePI=
Subject key identifier: 01:70:4F:53:2B:62:A8:7A:70:53:B4:E2:70:13:BE:2F:6D:47:8E:6F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584027642AB46CF1763AA9CA7180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f87bf70f-757d-3117-8c41-c3713a86aa4a.roa
Signing time: Tue 06 Dec 2022 12:00:00 +0000
ROA not before: Tue 06 Dec 2022 12:00:00 +0000
ROA not after: Wed 11 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 13.60.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:27:64:2a:b4:6c:f1:76:3a:a9:ca:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 6 12:00:00 2022 GMT
Not After : Jan 11 05:00:00 2023 GMT
Subject: CN=19dbf6bb-74cd-450d-9428-5c86c917db90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b3:82:80:63:7a:c9:72:09:6d:d8:8e:74:a0:
b5:61:8f:f0:25:41:f6:83:3f:59:13:8c:44:5f:59:
a6:ac:f7:a2:1f:c9:b7:e5:f6:68:f2:5b:c5:cb:c4:
1f:26:43:8f:45:e2:14:4b:f7:34:81:3c:0a:38:16:
20:f7:c4:c0:e3:68:fc:1f:37:6d:f9:79:72:03:61:
e6:87:8d:8f:18:04:13:dc:09:5d:a0:16:dd:ee:14:
c9:0c:a5:af:1b:05:68:f9:f7:7f:45:61:f9:c8:6c:
7b:f5:a2:5b:24:68:47:c2:40:88:29:8d:54:e7:b9:
51:22:04:dc:6c:76:cd:23:73:ef:5c:68:fc:8a:0a:
0a:11:c1:df:53:03:ea:0b:e6:5c:6e:9f:e6:86:e7:
8c:75:08:79:34:23:35:bf:f0:34:a7:8e:76:35:8b:
99:6a:df:c0:dd:62:71:e0:1d:f3:46:9b:6b:87:2a:
9b:f6:9f:58:fd:9e:2a:68:8c:e4:d5:31:c5:a3:32:
ae:72:6e:ef:81:d2:21:a7:5a:89:a7:26:74:07:4a:
60:c5:1d:17:63:d5:32:9a:ab:00:bc:ea:b3:2f:1d:
6a:c4:db:9e:c9:27:14:89:b1:a3:57:7f:61:a2:e4:
db:12:74:fa:da:f1:dd:8a:aa:2c:a8:2b:ed:21:23:
07:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:70:4F:53:2B:62:A8:7A:70:53:B4:E2:70:13:BE:2F:6D:47:8E:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f87bf70f-757d-3117-8c41-c3713a86aa4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
13.60.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:19:39:86:c5:ac:04:f5:2a:41:eb:0b:bd:5d:a3:69:1c:6f:
ee:77:4c:8a:c0:25:04:03:94:b2:95:0c:7c:7c:2f:6c:28:01:
bb:6f:72:a6:9a:27:84:cf:6c:9e:60:36:02:05:7f:ec:26:92:
6f:3c:7c:00:77:f6:3f:3d:4d:09:11:80:c4:1e:a6:2c:c9:a2:
22:9d:4c:96:90:2f:01:5e:62:14:b4:b4:8d:7a:cc:2f:ca:98:
5a:99:8e:13:8a:bd:ae:8e:fb:47:e7:36:d0:c9:e8:18:16:20:
5c:3a:47:a7:65:8d:70:54:1b:31:c8:a5:e4:97:f9:11:46:38:
96:84:d0:9f:a9:64:52:99:81:ee:4a:a0:d6:d3:7f:4a:5b:c1:
e2:b0:d9:04:a9:f5:92:3e:0b:f0:b2:7e:10:cb:89:2b:58:97:
d8:77:e6:54:b8:fc:09:5f:ac:9a:55:11:76:a8:3a:ee:d9:f3:
a7:17:61:a4:f5:ca:4c:3b:06:d4:9b:e4:f1:f4:57:77:af:e4:
2e:e1:f3:22:25:29:c5:48:51:7c:ea:a1:79:11:9d:46:fd:fc:
bb:9c:90:bc:8a:53:15:a9:88:15:d6:eb:4e:0a:bf:a1:19:fe:
ba:7d:03:6d:60:5c:ae:90:86:f8:18:b1:cf:55:01:58:23:72:
76:ce:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:08:10 2025 by rpki-client