Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/07df1daf-a8ad-387e-b617-0a8aea575561.roa
File: 07df1daf-a8ad-387e-b617-0a8aea575561.roa (raw, json)
Hash identifier: kP7/K7zIUmyy4P6p3ms9mcdydGEwXNU2V3kKkJjdvF0=
Subject key identifier: EA:29:BF:93:09:5C:FA:53:A8:9A:B5:03:DC:C0:04:40:1E:40:AB:6A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F811BF8910CDF896CDE25BD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/07df1daf-a8ad-387e-b617-0a8aea575561.roa
Signing time: Fri 07 Oct 2022 14:24:07 +0000
ROA not before: Fri 07 Oct 2022 14:24:07 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:81:1b:f8:91:0c:df:89:6c:de:25:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 7 14:24:07 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=f595e547-5e92-4c9b-a50b-1cba19c442da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:14:24:60:b4:3f:25:f6:a0:a7:6b:1b:e9:
b3:32:de:cc:cb:fd:df:d4:74:06:07:73:2f:b1:79:
b4:a4:1b:5a:3b:ed:13:35:57:f0:39:05:a7:22:30:
8b:6d:f8:b0:4b:ee:60:32:39:bd:78:67:a4:49:6a:
36:0f:27:bb:58:40:74:bb:8e:34:fc:d0:a4:9b:bd:
d8:45:fd:7f:aa:7d:13:03:1d:ad:d0:ec:1f:4c:0e:
5d:a0:7e:8f:71:48:f1:9e:a0:fc:60:1d:7e:85:cb:
6a:ce:8e:ce:67:10:4d:b4:4e:b1:a6:86:a3:35:18:
b4:cf:3a:0b:c3:98:93:1f:f8:46:8b:08:cc:22:96:
10:7e:0f:b3:dc:b6:31:35:c4:d5:7f:c9:c6:ab:b8:
84:1b:75:66:d1:e6:f6:4b:81:88:38:ed:c2:f4:23:
10:41:f5:19:2d:d8:20:10:9c:c3:5f:ed:62:6e:97:
f9:e3:60:00:40:c4:83:eb:04:48:a6:f3:2b:eb:60:
ee:6d:54:63:c8:37:98:31:ee:e7:ce:0b:85:a4:df:
df:cc:f2:27:a8:2b:67:46:6a:0d:90:2a:f1:a4:d5:
4f:23:5b:07:b9:ba:d8:fc:65:dc:1a:38:62:d2:1c:
51:87:94:ec:ef:e3:f9:af:0e:85:c6:98:ed:26:63:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:29:BF:93:09:5C:FA:53:A8:9A:B5:03:DC:C0:04:40:1E:40:AB:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/07df1daf-a8ad-387e-b617-0a8aea575561.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:21:37:8b:bb:4f:d6:dc:11:ef:df:d1:6a:4a:52:a3:b5:0b:
7b:27:75:63:e1:74:b5:7d:da:b4:8d:4f:d3:46:6f:12:74:9d:
74:ae:83:6b:1f:54:be:da:aa:6a:fb:44:c5:f8:b9:9d:36:81:
74:df:3a:f8:1f:fe:bb:6c:ee:43:f0:0e:01:50:6d:f8:84:e6:
70:22:96:85:e7:1a:f2:03:ac:c8:b3:db:17:38:c6:92:f7:00:
f0:32:dd:d0:83:f3:74:50:2d:59:5c:e0:5f:2d:83:36:44:f7:
cb:0a:08:3e:22:a1:25:c3:db:2a:b0:d7:9d:77:ce:cd:5b:15:
c5:d4:57:be:50:06:8a:58:2a:5d:bf:f4:de:db:c5:f5:a6:ff:
05:0f:b1:2f:ae:6d:56:6b:a9:83:44:4c:7d:b3:31:21:0e:c1:
00:43:4b:bf:c5:55:93:4c:12:b4:62:17:e3:b2:bd:d4:7f:62:
eb:67:35:62:ae:1c:69:6d:48:49:7f:5d:4b:c5:1d:64:ad:72:
23:96:09:37:c2:13:89:72:21:76:e3:d0:21:8d:d9:b2:c3:24:
87:03:9e:a1:54:59:bb:f5:25:34:ae:16:56:ba:71:36:a5:9c:
b7:47:81:cb:5a:25:18:85:16:e4:fe:6a:23:72:5a:5a:af:f8:
a6:d6:ff:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:40 2025 by rpki-client