Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0554cd86-b474-3b58-b1f4-53052a5b6e63.roa
File: 0554cd86-b474-3b58-b1f4-53052a5b6e63.roa (raw, json)
Hash identifier: HtgMSYNB0H7l/TpAI72W6maKKyP4pqH+OovTuFY0MQ4=
Subject key identifier: A8:09:B6:5E:33:14:46:3B:55:FD:21:E9:3E:B8:7A:BB:0F:51:B9:8B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A3C785A6401955CCA294D6F
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0554cd86-b474-3b58-b1f4-53052a5b6e63.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 99.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:3c:78:5a:64:01:95:5c:ca:29:4d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=d6a066a6-c11c-4d27-9d7f-983ec49fe583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:88:b4:d5:3f:02:fd:eb:32:da:c3:73:cb:
7a:b2:34:21:21:87:64:15:54:23:5d:e4:9c:24:93:
4a:01:2b:28:bc:1a:b1:d5:f1:0a:26:1c:65:46:1c:
a3:0a:b6:76:ac:4d:85:07:e9:c1:1d:49:b0:57:c6:
4f:74:15:8d:cf:f0:d5:0e:ab:00:54:be:5d:89:b2:
84:14:7e:0b:59:6e:a2:ca:5b:0d:31:85:07:04:4f:
0b:df:9e:e4:23:94:fc:5b:2d:7e:b4:24:39:f5:45:
e8:fe:eb:1b:0f:e8:25:91:e2:6d:e2:18:f0:7c:4c:
d2:00:c6:c7:54:a2:50:b2:4f:67:2e:55:75:8c:76:
6b:2e:0b:03:75:cd:ef:5a:88:18:6f:9f:b8:6d:26:
90:0c:11:bf:82:83:1d:4e:ae:3b:6e:e6:bc:81:ae:
77:cc:f3:2b:26:ee:d8:52:45:6a:5d:0d:56:a6:60:
ad:8e:c6:81:0e:0b:d7:dc:29:bc:ba:28:d1:53:c6:
fe:9f:4e:c7:b4:56:b3:22:25:d5:70:cf:a6:fb:3d:
2e:62:97:91:87:66:74:90:6b:a7:f4:11:91:88:d7:
e4:e1:04:cc:3b:c8:63:7c:34:d5:41:6c:83:ab:2b:
f1:c2:a5:25:d7:23:6b:e1:b1:f5:85:e2:39:12:4f:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:09:B6:5E:33:14:46:3B:55:FD:21:E9:3E:B8:7A:BB:0F:51:B9:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0554cd86-b474-3b58-b1f4-53052a5b6e63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:85:bd:17:f0:05:e3:fb:9f:d4:a8:00:2d:7f:0d:2e:a6:75:
ab:1d:21:59:24:b6:20:5f:b0:28:0e:61:90:dc:f7:cc:24:1c:
ed:cd:1c:27:6d:ad:c4:48:30:7b:b4:c4:f3:9c:30:20:72:97:
96:6e:89:b1:af:59:38:da:4f:c6:fb:31:87:5f:96:1b:b5:b7:
dc:78:3a:6c:d2:bd:0d:bf:5b:0e:04:a6:c8:7c:82:6b:83:a4:
2f:c8:75:ad:95:0c:63:56:1d:4c:4c:79:76:35:ef:bf:1b:78:
5c:20:b5:04:b9:e7:75:bd:63:95:ce:29:ff:63:a7:07:d4:8f:
0e:fc:70:51:6e:9d:40:d2:6c:04:f9:f6:be:14:29:88:bd:16:
b0:cc:96:66:63:cc:11:9a:a6:90:d0:a9:5b:5a:08:be:03:df:
c3:d0:7d:51:02:0e:45:ee:73:23:a6:3d:d6:d9:36:42:54:39:
0d:eb:31:a3:00:56:70:5a:09:85:cd:2f:68:f1:99:f0:37:da:
d3:45:b6:47:c9:8f:ef:d5:18:9f:06:c2:e5:cc:80:6e:7f:59:
57:84:e4:dc:04:02:60:dc:e1:25:64:e3:7d:4c:b8:b4:3c:31:
94:15:68:14:89:48:52:75:21:0c:78:6f:f5:8d:29:1a:3b:d5:
28:56:6e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:52 2025 by rpki-client