Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/00ae49be-fc2d-3829-8a4e-7cfe1360439f.roa
File: 00ae49be-fc2d-3829-8a4e-7cfe1360439f.roa (raw, json)
Hash identifier: 4eQjF0n7SRazYKfq78Ovn2mGauDMefPbyco2oeTGiBw=
Subject key identifier: DA:40:C3:5C:ED:A7:EB:93:4C:75:64:04:47:89:37:7C:48:27:46:C7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401A21B1649DC42ED64ECE9900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/00ae49be-fc2d-3829-8a4e-7cfe1360439f.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 2620:107:4000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:21:b1:64:9d:c4:2e:d6:4e:ce:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=9d26264d-9c64-4876-b127-306595529757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:fa:54:da:8a:48:39:e3:28:ef:bd:99:6e:
03:7e:07:6b:f6:25:21:e7:39:2f:cd:15:35:0a:e4:
63:09:00:24:d0:ed:1c:26:c5:04:bf:b2:10:67:ed:
72:69:91:5f:5d:10:3c:d9:c6:9a:e7:b2:37:fd:62:
4b:7a:f3:5e:a6:96:10:a7:a5:0c:96:70:4c:b9:a4:
f5:6e:4e:23:65:a4:b0:7c:49:4c:16:18:f5:7a:be:
a9:1b:65:97:7e:b0:b6:69:51:5b:2f:8f:bf:de:cc:
12:d6:39:0e:5f:d9:fb:d8:05:9f:01:cf:fd:c5:55:
3c:fc:ca:1f:05:61:23:28:9b:e4:1e:d7:0e:35:89:
ed:35:67:96:5f:5e:7c:01:47:9d:2b:ea:f1:df:0a:
ee:49:e6:f6:fb:29:16:d7:a1:a2:5a:09:2a:82:3d:
59:d4:08:33:6b:91:a5:f0:45:d6:18:3b:0c:96:ae:
b2:46:8b:bf:4f:4e:75:fc:bc:3c:95:b4:8b:51:cb:
14:82:17:82:bd:29:43:89:d4:9d:54:fe:ae:ea:41:
d0:40:f3:30:a3:f3:d9:b0:ba:d2:11:36:5d:a5:33:
e1:60:05:d2:c1:ba:0d:47:57:c1:f9:80:27:7e:0a:
2a:af:b6:ec:21:f9:f1:54:5e:44:3e:31:e8:43:aa:
0e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:40:C3:5C:ED:A7:EB:93:4C:75:64:04:47:89:37:7C:48:27:46:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/00ae49be-fc2d-3829-8a4e-7cfe1360439f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:107:4000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:30:f5:61:d6:17:cf:b7:cb:51:15:3b:6e:84:3f:df:7f:27:
09:27:e7:be:06:04:8b:d1:93:aa:19:ba:87:b6:7e:ba:f5:ef:
17:00:8b:41:ef:a7:60:40:bc:df:b2:8c:e6:42:75:95:b8:7d:
54:d1:43:04:40:46:7d:17:40:54:56:80:c8:a0:cd:91:45:00:
52:11:de:d9:74:13:0f:93:ea:61:bf:e6:86:2d:c2:3d:01:26:
23:d1:6b:96:5b:74:8a:94:de:47:ea:a5:32:d7:4a:4a:d4:c3:
57:ef:10:71:b5:07:d8:27:a7:9a:d8:48:30:23:36:ee:dc:2b:
ff:e3:1e:d2:72:2b:43:75:23:b1:d7:44:85:10:49:23:cf:8d:
e2:03:4d:f2:6d:fb:b2:34:87:83:87:34:31:12:bc:f0:4e:31:
6d:f0:12:fc:23:df:3c:bd:81:39:37:2a:9c:bd:c4:ec:af:7d:
97:a9:0e:21:28:b9:97:fb:52:9d:20:70:7c:e2:d9:36:0b:01:
98:df:5f:0d:5c:0b:da:70:6c:e6:8d:a5:96:52:93:66:a6:eb:
ed:96:50:e7:ca:49:27:4a:3f:9e:cb:86:f3:b4:3f:d8:92:68:
7e:9f:ae:57:a6:38:a5:a7:4a:d3:a3:86:8c:a7:8f:8d:bd:a6:
8d:de:51:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:12 2025 by rpki-client