Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/04bd5a3c-28c3-38bc-a1ab-ef238b8ab063.roa
File: 04bd5a3c-28c3-38bc-a1ab-ef238b8ab063.roa (raw, json)
Hash identifier: UE+ydezLwqU3MMn8aJri2/iU+hFT0ykdpoTqLpSXwpc=
Subject key identifier: 32:4E:D9:48:DB:BD:CD:1E:5B:84:C6:B8:5D:FE:3F:4A:64:93:59:AB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FB0F9E558BBA09C12FA7DC7C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/04bd5a3c-28c3-38bc-a1ab-ef238b8ab063.roa
Signing time: Mon 24 Oct 2022 12:00:00 +0000
ROA not before: Mon 24 Oct 2022 12:00:00 +0000
ROA not after: Tue 29 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 198.13.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b0:f9:e5:58:bb:a0:9c:12:fa:7d:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 24 12:00:00 2022 GMT
Not After : Nov 29 05:00:00 2022 GMT
Subject: CN=2daf4371-e10f-4e3c-a1e2-b72997d61ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:e6:ac:64:ce:60:b4:b1:4c:1c:bc:8f:0c:
43:b4:0c:ae:08:b9:19:16:3d:40:ae:44:f4:11:08:
94:50:4e:32:d1:e2:6c:14:14:0b:e0:01:e7:1d:87:
cd:16:87:b8:3f:e4:22:4f:1a:d3:6b:b6:cb:67:70:
e1:bf:89:0d:51:9c:8e:a0:8f:91:92:09:2f:03:86:
b4:44:86:05:5f:04:dc:e0:4f:30:04:f2:28:c6:89:
04:86:cb:66:78:52:36:2e:cb:4f:03:ac:ac:42:95:
7a:8e:2f:58:c4:f2:3b:25:6d:fb:a4:82:55:3a:1e:
85:4f:1b:89:c5:81:86:c2:4c:a7:15:3e:0f:d9:64:
5e:c3:23:29:08:67:f1:85:3d:1e:02:16:7f:1d:20:
48:e9:4e:b9:fa:cc:05:a3:b7:c5:bc:0c:0d:83:01:
1d:0e:3a:39:47:18:2b:7f:ae:49:77:a6:2b:f0:56:
da:4c:a4:ff:2e:85:9d:46:16:71:68:cd:86:3a:a1:
4e:60:31:3e:34:ac:da:3b:4d:0c:9b:55:42:98:c8:
23:f1:78:9c:64:10:a2:ce:0a:5c:75:0c:83:77:cd:
3c:8a:86:e0:97:fa:17:06:6e:f6:01:6e:30:1d:a1:
c7:3e:ed:13:c2:51:cf:3d:01:c9:be:b9:15:6e:8c:
5b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4E:D9:48:DB:BD:CD:1E:5B:84:C6:B8:5D:FE:3F:4A:64:93:59:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/04bd5a3c-28c3-38bc-a1ab-ef238b8ab063.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.13.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:e0:09:c6:80:a8:ab:6f:cc:be:48:12:b8:f8:73:70:eb:23:
56:af:a6:4f:97:fe:db:40:bf:e7:58:0b:2a:78:69:3f:57:56:
b0:b4:59:65:e3:7b:36:84:fc:97:77:47:34:fa:a5:c9:aa:5f:
2a:5b:67:62:a8:4b:b1:14:25:02:ed:7b:15:5d:32:af:c2:8a:
e5:bf:1f:1f:fc:bc:eb:1f:94:2e:67:ff:8f:1d:dc:d1:73:3f:
8e:46:bb:4d:97:11:91:c8:81:2e:98:c8:f4:fe:27:5b:14:2a:
60:58:75:ca:4f:82:23:6b:76:4e:b4:64:5d:18:d7:80:28:bd:
37:92:1c:23:e2:13:ea:39:08:5c:e0:3b:d9:57:a9:62:89:d8:
fb:ed:6c:83:1a:fa:53:14:a3:12:25:dc:68:08:f4:87:52:8b:
53:55:6d:fd:bf:c4:c9:60:6a:a0:30:f6:03:52:46:57:f8:9d:
f8:6f:12:b1:36:9c:67:6d:c0:3d:f7:b7:2e:d7:6c:41:56:3d:
f0:23:01:4f:13:9e:12:83:a4:3d:90:cc:35:f0:19:56:c7:c4:
d3:46:d3:7f:89:fa:42:21:69:07:42:62:ea:8e:dd:e6:c2:e7:
9a:1a:3d:9b:e5:b2:e2:95:62:46:aa:c4:0c:0c:3c:c4:35:ff:
cf:6c:2d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:38 2025 by rpki-client