Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/014288ca-f431-3288-90bd-89f13827e401.roa
File: 014288ca-f431-3288-90bd-89f13827e401.roa (raw, json)
Hash identifier: xfTlZTM6/xv6xivnCVqJrvLqSTsDoUDXabgCIEC6BKg=
Subject key identifier: 79:C7:F8:D6:A8:64:48:4C:02:AB:4D:65:57:29:E7:4E:91:85:31:CB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584078C258840CA08DBDB70B8EBC
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/014288ca-f431-3288-90bd-89f13827e401.roa
Signing time: Wed 04 Jan 2023 12:00:00 +0000
ROA not before: Wed 04 Jan 2023 12:00:00 +0000
ROA not after: Thu 09 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 128.212.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:78:c2:58:84:0c:a0:8d:bd:b7:0b:8e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 4 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2023 GMT
Subject: CN=2487b7d0-7e1a-434e-a6c3-9f2c5904f779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:d2:6a:4e:ba:d1:e6:82:13:5a:d8:d8:2b:
4a:b3:fb:f8:eb:8c:12:08:84:e1:e6:43:10:83:d0:
8d:fd:7a:59:fc:0b:11:d3:5f:e8:07:d6:3d:20:37:
5f:0b:bf:64:5a:d6:ec:82:ed:1c:73:00:19:8c:96:
d7:b6:4e:99:3d:6f:bc:a0:87:ad:be:5d:5e:cf:50:
5f:01:10:8c:f2:4f:87:31:58:c7:99:44:7e:f9:58:
da:db:10:f7:c5:1d:fc:72:48:eb:9b:55:87:0f:62:
68:3b:83:aa:e5:b5:43:07:81:22:59:ec:28:23:eb:
a9:51:1c:a3:1b:6d:ec:31:9e:43:8e:c9:a7:e4:fc:
b7:ce:e7:c9:b7:a3:54:b4:3a:9e:85:1c:ef:74:da:
80:27:db:32:e1:0c:c4:92:54:67:42:d7:54:d1:e6:
a3:b2:89:11:b0:30:ef:9c:bc:10:4e:70:fc:85:2b:
e8:e7:e0:f8:77:ab:37:3c:3b:1b:dc:16:62:b9:63:
a8:15:67:19:02:6a:55:db:86:65:17:5e:f3:4d:c9:
bb:b8:21:41:56:90:50:b0:6c:cb:27:d3:83:8b:30:
f7:c5:1a:d8:6d:96:a5:90:29:50:41:be:60:1a:2b:
28:95:28:4c:64:ba:bb:44:a6:e8:d0:b5:e7:78:4c:
f8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C7:F8:D6:A8:64:48:4C:02:AB:4D:65:57:29:E7:4E:91:85:31:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/014288ca-f431-3288-90bd-89f13827e401.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.212.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:d5:30:56:6b:10:37:fc:49:56:15:82:29:47:f6:da:0f:4a:
a3:56:23:85:33:4b:31:2b:d8:50:89:cd:eb:98:22:31:c8:89:
08:d8:7a:5f:20:8a:cb:2a:3c:c8:07:a7:fe:17:f0:16:d0:bc:
e6:c4:ad:13:1f:c1:5a:17:a8:09:a7:a5:0f:b8:65:81:1d:f0:
cf:9d:c8:8a:6b:03:60:3b:f4:1a:dd:e0:7d:06:0e:b1:08:50:
eb:81:29:c3:f5:51:9c:c1:c0:86:03:f6:18:55:c1:58:a0:36:
8f:e1:ef:7b:8f:e5:3a:0b:bb:a2:12:92:93:cc:63:6b:8e:9f:
d5:43:66:f6:7c:10:69:6b:8f:48:4f:c5:87:fd:c6:9f:68:01:
c0:d0:20:bd:40:43:94:ff:2c:64:ce:42:30:46:7a:44:45:65:
2a:2e:1a:f0:12:60:fc:82:1c:92:72:b9:7d:aa:cb:a1:ae:d6:
76:c2:38:a8:d2:5f:2e:a4:56:51:b3:9b:44:97:81:c1:95:19:
df:c6:fa:6b:db:e0:51:d0:1f:ae:3d:62:c2:80:1a:7d:6e:b2:
ab:6f:65:dc:a4:af:9f:e1:be:e5:37:59:08:a4:14:ab:6f:b7:
7c:5d:d0:05:32:6b:17:66:8b:5c:85:9c:8a:3e:e6:19:9c:be:
c9:c9:41:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:17 2025 by rpki-client