Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e34cef9-990e-3c17-b953-d58dd54893f5.roa
File: 0e34cef9-990e-3c17-b953-d58dd54893f5.roa (raw, json)
Hash identifier: mMW+IrJIdbvb9BQbBX4KwhA+Mt/Z2nRyo7tCWQjO+nQ=
Subject key identifier: 8E:18:D3:3E:71:34:82:48:59:9D:3D:09:74:40:68:4B:91:5B:EE:DD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840754C8A65992F5E70DE7B7A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e34cef9-990e-3c17-b953-d58dd54893f5.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 198.14.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:75:4c:8a:65:99:2f:5e:70:de:7b:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Feb 8 05:00:00 2023 GMT
Subject: CN=f4bef317-928d-4882-9208-961c8dc59f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:e8:fa:1f:47:c7:8b:46:6f:96:af:e1:f4:
13:7a:bb:dc:b3:41:91:ce:7d:d1:aa:eb:77:bb:49:
b6:13:99:1d:c0:21:51:b7:3c:10:b1:c2:de:34:01:
85:f1:0c:a5:2f:c1:42:30:b1:04:71:7a:41:ad:77:
c1:cf:3e:9b:90:64:60:63:3b:c3:a7:79:6b:ac:c3:
d0:e0:8d:25:09:dc:dd:71:2d:7c:84:a2:36:46:88:
b1:58:74:c1:25:fd:77:d2:fc:95:5b:b5:94:c1:3b:
b5:a4:98:89:0b:6f:bd:b2:32:fd:d0:77:2a:63:66:
d6:6e:95:61:fe:f8:8a:1c:a5:9f:f7:28:c6:5d:3c:
c2:42:32:2d:5e:a5:74:85:45:f3:95:6f:54:59:37:
6d:3a:bc:4c:4e:b7:2a:1d:86:f3:a5:06:06:21:ee:
38:d3:83:4f:d6:b5:72:52:ad:f0:22:d3:90:4d:fd:
d8:0f:33:a2:0f:92:d3:2e:0b:85:0c:b2:76:c9:e8:
fb:35:f9:7a:2d:e1:21:87:5b:cd:1d:1c:3b:54:d5:
9a:e2:f7:ff:95:d2:90:6d:12:c6:f3:c6:49:c1:14:
4c:65:f5:bd:2a:1b:57:59:3a:cc:c8:2d:d0:b6:3f:
5d:61:ba:ef:3f:b5:eb:13:a6:59:8f:2f:2f:35:f3:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:18:D3:3E:71:34:82:48:59:9D:3D:09:74:40:68:4B:91:5B:EE:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e34cef9-990e-3c17-b953-d58dd54893f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.14.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:87:71:83:5f:e1:fe:b8:28:81:c7:3b:45:36:0c:16:50:fa:
02:9e:d2:41:52:d6:5c:e4:6a:ab:8f:68:9a:7f:22:a8:78:1f:
72:ca:16:8e:3f:36:83:13:09:ec:65:9b:23:e6:f9:a2:36:a6:
7b:a8:c0:63:c9:fe:69:bf:d0:63:77:53:50:7f:8e:d6:fd:e0:
60:4f:78:00:2a:23:b6:a9:64:e7:bf:7e:10:97:2a:fe:03:b0:
5b:99:d1:b6:0c:09:81:aa:b2:ff:12:35:cf:35:82:9e:d7:57:
44:60:4b:65:3a:6f:db:d0:ca:23:8d:be:35:29:bc:24:66:26:
5e:8a:83:48:08:2c:4b:b5:d7:1f:b6:77:2f:00:42:39:ff:07:
86:67:3c:82:51:76:7d:e4:d9:57:8f:70:ad:c5:bf:61:6d:6c:
b5:e5:60:ff:27:81:30:27:d9:8e:03:b4:2e:22:80:d6:56:69:
87:47:02:05:aa:07:19:bc:90:84:2e:c8:c2:f0:01:7a:02:0f:
94:8f:2c:a5:e9:ea:a8:07:7e:51:d0:77:82:4c:b5:c0:ab:48:
c2:79:4d:94:eb:72:b4:0c:da:8a:fc:b8:8d:d6:12:e4:c4:95:
3e:47:a0:76:5c:1c:0b:25:dd:e7:e1:de:0d:11:52:ef:3d:f4:
4a:c0:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:09 2025 by rpki-client