Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e5938af-61ab-313b-a7f4-52882c6fb741.roa
File: 0e5938af-61ab-313b-a7f4-52882c6fb741.roa (raw, json)
Hash identifier: vtnl+81ILVOfPrSR31Cnu2YA2SJGQp0x5g9TZnvXu8o=
Subject key identifier: 8F:5D:81:66:05:FE:15:6C:2B:99:D5:BF:DD:C0:AE:45:3E:29:92:EF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405F418EEA6E21B753A3B10EE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e5938af-61ab-313b-a7f4-52882c6fb741.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 98.74.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:41:8e:ea:6e:21:b7:53:a3:b1:0e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=d67af3c3-d12c-4a9a-903c-d85778442a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:2f:e9:32:94:6e:00:20:83:9a:5f:e8:4a:
39:8b:d5:ac:98:86:fb:2f:a6:8e:92:7e:aa:cc:45:
c7:c9:37:04:89:bc:b4:71:56:6d:22:6e:de:bc:45:
a0:b7:d0:3c:47:ad:01:af:aa:fa:0d:57:a7:b7:79:
d8:a2:09:49:1f:f0:b9:d2:86:82:32:61:24:5e:fd:
2d:a3:72:03:07:6c:94:9c:0f:0e:85:f1:9e:71:91:
1e:62:80:c9:7b:e5:43:cf:2e:00:c6:c4:f2:06:43:
dd:bf:b1:5a:02:1a:25:03:e7:e5:05:88:ce:39:78:
cf:30:68:a9:06:e4:f2:89:54:16:1d:90:33:c1:f3:
a8:08:8b:9f:37:d8:8f:fd:b2:94:90:36:39:74:3f:
a8:d7:1f:98:45:54:3e:0b:db:46:93:a1:6f:85:4b:
09:ed:5d:e0:c8:a3:d0:88:ed:08:0e:7f:00:26:9c:
f2:27:8c:dd:16:30:a7:b7:70:b4:8a:c9:7a:4e:48:
8b:5b:d7:c7:24:cc:b1:73:db:8d:a0:23:26:1d:ea:
e6:48:4d:15:db:a0:f0:4b:ce:49:ff:59:9a:ff:cd:
52:86:ce:d1:d1:c0:92:e3:8a:e8:3f:6d:c6:21:f2:
b3:66:91:8e:df:fa:8b:ad:4c:71:90:00:1a:5b:ea:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5D:81:66:05:FE:15:6C:2B:99:D5:BF:DD:C0:AE:45:3E:29:92:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e5938af-61ab-313b-a7f4-52882c6fb741.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
98.74.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:df:98:ca:63:f4:a7:82:2d:db:19:76:10:8b:ea:6b:a4:8f:
45:89:c5:12:15:2d:40:95:29:1f:b7:8f:bb:5b:8d:2e:32:55:
bb:a2:fe:50:d6:60:37:19:11:7f:f3:ec:de:99:34:fa:1f:f9:
29:24:61:90:7e:46:6a:8f:f6:12:3c:0a:ad:9d:be:78:4d:dd:
3a:1b:45:9e:ea:76:2e:b1:7a:f8:2c:5b:e0:ac:68:f8:2a:04:
47:29:23:57:bb:50:7e:bf:62:e9:5d:55:41:08:0f:37:a6:a8:
3b:43:34:b7:80:fd:d9:06:00:5a:4b:92:6a:bb:1b:95:28:fd:
3e:cd:33:9b:3e:94:38:fb:4a:24:47:31:89:04:22:0d:34:81:
56:fc:52:34:fc:72:53:cc:10:b3:ba:6a:93:d5:20:9e:90:15:
45:ff:f0:1d:3e:79:62:f7:42:20:76:b7:83:47:f6:c3:d8:9e:
d8:fa:d5:b5:e3:d6:33:b1:90:30:49:d0:9c:29:c9:20:56:23:
6a:32:46:81:81:e8:b7:b4:47:96:f7:77:2a:c7:f8:3a:79:4d:
0a:be:94:80:73:10:3f:36:2f:ee:e4:03:20:0d:72:20:9d:80:
c2:98:6a:54:b3:63:ec:01:59:31:f7:45:9d:57:31:52:f5:4c:
ce:c1:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:18 2025 by rpki-client