Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0bda7ace-8824-33c3-9a94-1003afe287f6.roa
File: 0bda7ace-8824-33c3-9a94-1003afe287f6.roa (raw, json)
Hash identifier: VQyi7O+5gWV4MbenAyNJaVqA0oQy+RRB8L87QjinMfs=
Subject key identifier: 88:52:22:F2:0B:34:4B:11:06:1A:8B:6B:84:F5:22:58:68:2D:97:A8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406766140CF8B122ECE73D44C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0bda7ace-8824-33c3-9a94-1003afe287f6.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:67:66:14:0c:f8:b1:22:ec:e7:3d:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=f4a249c8-a166-4cea-b7c5-b8147ec3ca02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:7b:f2:5b:47:6a:f6:c0:c8:6f:e5:21:70:
b0:ce:7f:a6:57:9c:6e:d5:e9:74:f0:93:2f:f5:86:
2e:64:1c:d0:cb:ca:7a:fa:a7:20:8d:bb:60:55:7a:
d6:b4:11:be:04:96:9a:ce:f7:c1:a0:75:fd:5a:cb:
cc:c6:1d:2a:ba:a2:dc:f6:b9:5d:d6:21:cb:8d:fb:
a6:c0:54:29:c6:86:90:0e:33:c2:0b:b5:1a:11:83:
54:41:21:44:3c:22:3a:82:49:f8:94:a4:e8:49:a5:
a6:33:e2:d1:9a:d9:c4:b1:de:f6:46:9d:0e:26:65:
bd:65:6c:88:76:b7:39:fb:b8:c1:f7:d7:ce:7e:61:
1a:cb:b4:d0:f2:9b:52:2e:96:99:50:c7:52:70:f6:
69:cc:fe:7e:ba:b1:44:d4:00:92:c4:9d:77:d2:42:
8c:07:0d:80:a0:41:84:7e:44:45:07:91:f1:08:73:
7e:ee:fd:65:51:13:f3:ca:17:dd:e6:9f:ef:0e:96:
60:85:f6:b9:a8:be:24:c9:a8:2a:bc:00:7e:6f:31:
56:28:12:04:d2:8d:e0:64:43:54:da:1d:83:0f:cc:
43:02:a7:bd:d7:9b:15:9b:52:9a:bc:be:81:c6:64:
fb:bd:43:e3:1f:9e:14:e7:8a:4f:63:5c:e3:33:cf:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:52:22:F2:0B:34:4B:11:06:1A:8B:6B:84:F5:22:58:68:2D:97:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0bda7ace-8824-33c3-9a94-1003afe287f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:39:25:b0:f2:8f:9e:be:a6:46:37:27:93:a8:63:59:d7:59:
e0:69:99:cd:08:c5:44:bb:8a:88:38:f7:8a:fb:d0:03:3e:bc:
80:48:f9:a0:9c:90:b0:52:a7:fd:17:b3:3e:9e:92:76:54:8c:
66:34:96:a0:d9:c9:ad:f8:27:58:64:1e:97:dd:df:3b:06:42:
1e:3b:98:7e:d1:e6:63:49:12:76:ae:68:c1:1c:49:00:7f:9b:
70:ef:ee:40:1e:8d:ac:36:47:0b:4e:df:24:ba:98:4c:26:cd:
aa:fe:0c:7f:e7:a2:54:f4:57:ca:b3:fa:fe:2e:a5:3a:a5:24:
bf:73:fc:f5:ac:18:07:55:99:82:62:d9:18:28:73:53:d3:86:
82:72:97:4e:1b:b8:7e:7d:ea:27:69:50:1a:24:44:d0:59:9f:
70:b8:3b:29:24:96:ac:16:cc:2f:91:8e:55:ac:11:f6:65:b2:
18:7b:d2:a5:19:1c:45:43:8c:a3:b2:68:e2:f0:52:d4:0f:f6:
0c:c9:08:92:20:5f:62:ea:7f:0b:ee:64:89:fb:2e:71:ab:bb:
0d:c8:89:25:98:6d:da:52:9e:5d:67:4f:ae:c5:12:6d:2f:f1:
6c:c2:3b:97:b8:50:54:f0:fc:ca:a2:04:7a:86:22:e1:70:ca:
dd:55:6d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:01 2025 by rpki-client