Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0aa1a0cf-ff4f-3590-a674-581fb41ff21f.roa
File: 0aa1a0cf-ff4f-3590-a674-581fb41ff21f.roa (raw, json)
Hash identifier: 7SfG1RByfL/z//gtynjp0TR6IpJPw2QSTqXCwIUMcHM=
Subject key identifier: E4:9A:F8:F6:6F:91:08:9F:08:8F:70:C4:4C:CD:14:A5:32:FA:1F:35
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA8319E2A2B2D80B40E606B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0aa1a0cf-ff4f-3590-a674-581fb41ff21f.roa
Signing time: Fri 21 Oct 2022 16:30:08 +0000
ROA not before: Fri 21 Oct 2022 16:30:08 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a8:31:9e:2a:2b:2d:80:b4:0e:60:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 21 16:30:08 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=9688b552-a4fd-4e01-bddf-f29367430415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:29:6d:3b:e4:ce:70:ab:d9:7d:d0:57:fb:
cf:5c:aa:32:0d:49:57:77:f9:94:c5:30:c1:36:81:
47:79:2f:38:65:7a:1e:18:2b:79:eb:ac:42:22:5a:
ff:9a:01:9f:fd:4e:6b:85:c9:8b:b2:a8:86:15:f9:
62:23:d0:3f:3a:07:ba:01:38:ab:a0:4d:28:31:59:
2e:a9:39:58:0d:4d:ad:80:a2:44:16:3e:f2:6a:91:
24:17:b8:98:c8:9a:96:b0:02:80:75:6e:d4:54:25:
57:87:aa:08:43:08:d5:28:08:cf:33:14:5a:6c:e4:
a7:ef:88:77:cf:1a:d8:0e:f2:0f:9c:3b:d7:0e:d8:
6d:6a:2e:90:12:a0:5d:8d:84:cd:d3:86:48:8a:02:
ed:1e:6e:ae:7a:6c:dd:82:c8:48:c3:71:4d:3f:15:
f0:eb:c2:df:9e:b4:4d:e2:cc:76:0b:94:38:d7:27:
3e:74:25:0a:3d:fa:52:fb:7c:dd:f4:07:2a:c0:ac:
e3:db:d2:e3:e1:2f:ca:b4:26:cc:1c:23:67:ee:a9:
12:a3:49:bf:3a:a9:36:02:44:99:70:83:89:95:02:
03:74:05:33:0b:a7:58:b4:a1:94:b1:69:31:8d:f9:
ca:bc:5e:10:46:f3:c1:51:07:9d:ca:4b:03:b8:7a:
38:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9A:F8:F6:6F:91:08:9F:08:8F:70:C4:4C:CD:14:A5:32:FA:1F:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0aa1a0cf-ff4f-3590-a674-581fb41ff21f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:c2:99:21:df:12:6b:7a:22:43:72:2b:1b:81:b4:04:26:96:
bd:b2:8e:8c:eb:d6:36:56:fd:15:99:09:29:4c:50:1c:dd:54:
48:ba:64:d8:33:bf:1c:b1:6f:59:c9:de:a4:18:3a:38:29:40:
e6:e3:9b:5a:8e:ad:50:a3:58:ba:fa:cc:95:ea:a1:96:0e:62:
15:9f:51:48:23:22:c0:cd:8f:d9:c9:e9:eb:d8:96:73:bc:0f:
40:50:a0:11:5f:bd:3f:1c:17:2b:f6:37:aa:11:57:78:27:6f:
b9:88:db:b7:ad:4e:f0:c4:ce:20:7e:38:62:b6:73:f4:15:e5:
af:5f:bc:3e:6b:57:8a:7c:0c:d0:ae:b0:21:e7:2a:cf:a2:f8:
a7:4e:31:ac:11:d8:cb:33:06:a3:04:d9:78:36:f6:56:44:c5:
30:3f:1f:38:4f:e8:22:74:db:5d:8d:64:16:a2:88:7e:12:c8:
8c:d5:ac:a2:cc:a8:2d:b9:a9:50:30:85:e5:97:33:2b:c1:ea:
cd:fa:de:ef:89:a9:7f:ab:a0:7b:2a:ac:ea:d5:87:b1:34:be:
d3:37:2c:23:2e:7f:ac:20:7c:09:0d:23:ed:1f:ce:c6:9a:7f:
de:9c:9b:77:22:97:19:21:f3:aa:9d:dd:1f:fe:71:74:78:3d:
0a:a7:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:24 2025 by rpki-client