Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ae114cd-5fe5-3f97-a976-be095019db5a.roa
File: 0ae114cd-5fe5-3f97-a976-be095019db5a.roa (raw, json)
Hash identifier: DfAmtjJ6sZzM1XIG6TLIX3+IDVD5c13T6JCacEbUHiI=
Subject key identifier: 9E:ED:D5:93:71:DB:F4:57:9C:BE:E5:65:08:B5:64:29:7F:42:62:EB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F0AA9CE1B81639E92F224AA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ae114cd-5fe5-3f97-a976-be095019db5a.roa
Signing time: Fri 26 Aug 2022 17:36:07 +0000
ROA not before: Fri 26 Aug 2022 17:36:07 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 99.85.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0a:a9:ce:1b:81:63:9e:92:f2:24:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 26 17:36:07 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=bce3e33f-531c-4314-8183-14a2c3b1985e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:70:0b:b5:ac:b7:87:0e:cc:21:6f:11:5f:
44:da:66:71:01:d2:a1:dd:c9:06:c8:fa:c2:d5:08:
a9:b8:8d:a6:33:fd:16:48:98:04:dd:f9:b1:eb:de:
85:4f:09:da:5c:53:46:df:fb:eb:e2:4a:54:e8:a6:
ac:8d:93:8c:9b:98:1d:1c:a3:de:51:7f:69:e0:0a:
79:12:77:c9:3b:26:d1:03:81:11:a9:6a:48:7a:90:
f8:28:93:6a:36:41:b5:d2:24:c9:10:dd:1c:09:df:
e0:5e:07:88:8d:19:7c:fb:4f:24:4a:6e:85:23:9b:
bd:f4:96:20:2a:b1:ad:b2:f4:9e:a3:55:35:5d:e7:
75:41:b2:79:17:f2:18:e1:8c:ab:64:1f:62:26:8c:
72:fb:44:f3:3b:a7:80:d9:23:3b:e5:bb:91:41:69:
da:3e:8b:18:e0:1e:0d:fd:ac:3b:fe:2c:4f:f1:a0:
b8:be:1b:ba:4d:f6:ca:83:6f:06:9a:28:de:ea:64:
8c:0e:77:ad:18:f3:30:95:df:24:37:51:56:82:2c:
6c:47:9b:01:b1:7e:4c:47:ef:37:6a:8a:6b:21:10:
81:8e:52:e5:a4:f2:7e:c9:04:62:34:21:43:7a:03:
0c:5f:9f:0b:17:5f:57:7b:64:7f:b1:3c:aa:8e:ac:
23:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:ED:D5:93:71:DB:F4:57:9C:BE:E5:65:08:B5:64:29:7F:42:62:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ae114cd-5fe5-3f97-a976-be095019db5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.85.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:2b:23:b5:cb:2b:1b:53:67:2c:e3:fb:e4:8f:1b:5c:e6:18:
21:bb:6b:65:98:04:f7:69:65:1e:05:4a:2a:35:57:a9:e1:ff:
16:dd:22:a7:64:9a:fa:a1:1b:df:b6:7e:57:36:d2:72:86:28:
8b:53:fb:54:10:6a:cb:56:7b:b0:d5:c2:1c:b4:b7:2f:a8:c1:
1a:a9:0c:97:a5:ae:84:32:04:1f:ae:c3:d1:d0:e3:b5:a2:8b:
92:25:72:ab:02:38:1e:06:51:f5:2d:e1:7f:0f:f8:f6:a4:22:
ea:23:93:d2:bf:a2:f3:58:e6:cf:f5:03:60:b3:f1:f7:2d:7f:
0f:c4:c9:d8:a3:64:03:75:34:ee:5d:eb:15:2a:02:72:cf:50:
75:1e:54:b3:81:21:77:21:4c:17:6f:ee:f8:96:87:fa:9c:98:
3d:e1:9b:4b:71:96:9e:82:2b:70:9d:96:15:17:37:f4:e9:7e:
84:a7:13:60:73:33:c2:03:2f:f6:d0:a5:e6:43:b3:b7:c5:e3:
03:87:6c:59:7f:ea:6f:e4:67:77:4c:dc:9a:e6:c3:a1:e2:b5:
20:2d:60:d0:f6:eb:af:8a:15:84:28:98:e9:27:94:bf:6a:55:
54:72:bf:45:7f:df:e8:9d:82:38:31:d3:a3:c2:45:47:02:6a:
c1:1f:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:29 2025 by rpki-client