Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/089a0bd6-f2ac-3d3b-a5ff-c3585fd84aad.roa
File: 089a0bd6-f2ac-3d3b-a5ff-c3585fd84aad.roa (raw, json)
Hash identifier: IMep6ffNoXUMvltDNZnv2w1Eqxwtf+iCVYT67ZNUE4o=
Subject key identifier: DB:1E:5A:5F:88:74:81:35:27:D0:56:5F:D6:87:E0:1B:CB:C3:F5:27
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF663F9DE84BFD3415BFA7840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/089a0bd6-f2ac-3d3b-a5ff-c3585fd84aad.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f6:63:f9:de:84:bf:d3:41:5b:fa:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=0325b9ae-db42-49cf-91da-ef12657f4aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:e5:76:38:d4:f4:7d:f3:d7:56:c4:a4:4d:
aa:be:f0:81:b6:df:40:9c:4a:45:34:e1:80:1b:a3:
7b:82:1d:ac:62:dd:d7:f0:3f:cd:85:6b:b7:7a:31:
9e:3e:d3:de:1f:c7:17:cb:06:f9:30:19:29:b9:88:
da:c8:f1:0e:fb:2f:6e:25:9f:6b:df:fc:29:31:ae:
25:83:8a:55:e1:d6:c5:bd:2d:51:9e:d8:48:4f:65:
0c:74:c2:a9:28:b4:64:d6:d7:94:94:ce:65:f8:ab:
f4:c1:fa:d7:71:0b:8f:54:96:70:2a:73:45:2a:ed:
30:d6:84:12:8f:26:98:1b:e4:71:40:ff:a7:ad:f2:
4d:15:02:05:34:16:18:9b:70:54:9a:47:a1:0e:03:
3e:67:68:a2:00:62:c7:61:c4:8e:87:f7:dd:83:18:
31:b5:d0:8c:82:8b:c8:5b:b1:e6:a1:6d:3c:39:af:
a7:a7:ee:01:71:ed:0d:26:94:a5:08:30:62:53:13:
32:af:de:f4:11:0d:25:32:e7:47:14:bd:12:27:9a:
af:ca:69:80:96:07:c1:ff:f4:2a:ae:45:0e:12:90:
8c:91:6e:97:a8:b5:92:5c:9a:be:94:82:04:66:71:
b2:ff:f0:8e:74:9f:c3:90:46:2b:d5:af:76:a8:c6:
19:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1E:5A:5F:88:74:81:35:27:D0:56:5F:D6:87:E0:1B:CB:C3:F5:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/089a0bd6-f2ac-3d3b-a5ff-c3585fd84aad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:54:88:09:75:79:aa:d7:91:eb:b2:20:64:1b:35:45:9d:47:
63:79:4c:e5:7a:ef:24:07:a0:3d:e8:f7:84:57:d6:0d:98:78:
85:b5:a4:bc:47:5d:59:a1:26:cc:22:c7:44:82:74:6b:f1:3a:
5c:26:26:2e:d5:ed:32:93:d7:2e:2a:57:a6:f4:73:0f:e1:c7:
85:c9:22:4c:07:be:4f:c4:bf:81:b1:af:f6:bc:7c:65:c7:5d:
8b:58:48:03:80:1e:00:8d:fc:e6:56:a4:49:07:6a:da:d8:23:
1b:d4:7a:53:bb:8f:58:f3:61:57:78:02:00:9c:7c:f1:fb:e4:
10:de:13:7a:5a:08:f3:f0:2a:29:96:d1:11:c8:0c:db:c1:df:
ed:94:dc:cf:fb:fc:10:15:84:1a:87:3e:36:77:1e:70:06:a8:
6d:61:db:0c:11:c6:51:9c:b6:55:b8:e3:b4:80:39:d1:32:b6:
c7:ad:85:6a:86:b8:86:7b:3c:7f:a4:70:19:09:39:82:65:e9:
c3:8f:3a:54:a6:d3:78:2a:1d:e3:63:9c:f0:fa:03:fa:0e:ea:
b4:ea:5b:73:99:6e:13:c9:72:38:06:70:c8:a3:07:71:ec:e7:
f6:2e:2a:77:e5:ac:2a:dc:f4:46:bf:2e:a6:43:d5:6e:6c:d3:
c4:77:4e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:06 2025 by rpki-client