Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cfe23b5-ff1f-39a4-8594-7dfa2f73c0a8.roa
File: 0cfe23b5-ff1f-39a4-8594-7dfa2f73c0a8.roa (raw, json)
Hash identifier: Sy86Rsa7/owsfQjgVRN2cLeX5fUrOYPG4TQQGcCirnc=
Subject key identifier: 23:51:82:5E:69:F7:FC:91:29:C2:A1:68:04:67:3A:B0:DB:CE:CD:05
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCAE2E23773965D2FFB4C9E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cfe23b5-ff1f-39a4-8594-7dfa2f73c0a8.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 99.84.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ca:e2:e2:37:73:96:5d:2f:fb:4c:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=5d5d541e-e9f7-49cf-b1be-696fe0cea252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:65:90:e6:b8:b1:d3:43:a7:48:66:71:f8:
1a:5b:f1:99:46:a8:d8:91:7d:0d:06:5b:5f:51:8d:
51:ee:62:71:50:4f:b1:c0:45:f4:54:cb:2d:7c:69:
ea:15:9e:19:35:b6:66:4c:e7:6b:77:11:da:80:01:
d2:8a:a7:d9:5a:c4:a4:9f:ed:89:9f:cc:8d:fb:76:
26:dd:e8:06:80:22:4e:7e:b7:2d:3b:14:95:7a:0b:
54:de:cb:80:91:b6:7d:80:e0:bc:8e:5f:a9:c2:07:
2d:b6:f8:13:a1:7d:d3:1d:9e:e6:b7:31:81:d9:3d:
d5:b5:52:f8:82:8f:5e:13:a6:44:30:91:3f:ce:89:
eb:81:65:6b:3d:f0:c0:53:19:df:63:ad:f4:4b:e3:
ec:c3:ea:e1:d7:bd:d7:22:14:31:f6:53:d5:f4:1d:
de:c1:ed:89:8f:51:40:a0:71:53:a9:8c:9d:c5:64:
89:27:4c:7d:e1:07:24:c0:4f:42:0c:99:32:42:73:
86:c1:f4:13:83:f5:3a:70:b5:68:0b:ba:fa:6a:7a:
3d:c4:86:1b:ed:76:36:c9:12:71:aa:6d:72:d5:3e:
77:b5:90:24:97:b6:2a:ea:ec:d2:3d:e4:db:48:f0:
b3:c5:8e:4e:5a:17:24:06:7a:28:dd:54:f1:81:8f:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:51:82:5E:69:F7:FC:91:29:C2:A1:68:04:67:3A:B0:DB:CE:CD:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cfe23b5-ff1f-39a4-8594-7dfa2f73c0a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.84.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:36:02:20:af:b9:c0:bd:df:fe:8d:ec:74:51:ae:30:78:79:
a9:98:6f:3e:4e:91:df:bb:da:b4:ab:2c:39:af:b1:1a:29:62:
ef:7f:db:79:95:a1:81:39:1e:96:86:1c:7e:0a:08:b3:1d:63:
a5:61:6b:2d:17:8b:3b:6d:65:b6:78:4b:31:f1:84:62:77:54:
7e:ff:4d:10:af:e2:8a:57:3b:48:33:20:fc:fa:85:f3:f5:d0:
81:03:de:33:1e:57:89:b9:85:69:bc:03:3a:f6:45:0f:b9:dc:
c1:3a:7e:da:dd:2d:22:cf:1a:5d:0a:c3:4a:8c:bd:53:7d:d4:
4d:d0:2b:4a:8d:23:e3:73:54:d4:c3:3a:4c:d5:75:83:df:09:
33:52:1c:f1:4d:9f:28:df:01:88:44:e3:93:75:cc:59:f1:f0:
eb:7c:2c:c3:e3:fc:80:75:52:80:ed:c6:73:f8:32:fe:cd:24:
58:28:bf:0d:6b:30:17:0a:7a:5a:aa:8e:d4:2a:ba:59:45:97:
d2:22:2b:5c:7c:9f:11:b5:4b:ad:60:f3:bb:e4:2e:f1:d4:6e:
b7:5c:06:03:ec:b9:2d:a5:75:84:a5:77:3d:3a:a0:75:66:e9:
cc:ca:a2:cf:35:2c:d7:1f:9f:70:9a:55:48:d5:ef:10:66:59:
09:6a:37:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:30 2025 by rpki-client