Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/17df3f68-a54e-3da0-b9e4-3d4c7d7554b7.roa
File: 17df3f68-a54e-3da0-b9e4-3d4c7d7554b7.roa (raw, json)
Hash identifier: +85+k6IXXaDdhYIAfb0VwLeBFqjLmMVhdI0X41lp2a0=
Subject key identifier: 98:02:BE:D9:58:90:1B:78:6E:C4:E0:81:72:CF:1A:86:9C:07:3C:E2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F313965A9642D9CEDD39BD500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/17df3f68-a54e-3da0-b9e4-3d4c7d7554b7.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:31:39:65:a9:64:2d:9c:ed:d3:9b:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=d2c720a6-7f94-44c1-b12c-3f1a91cfce48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9d:bb:d5:ff:d6:3e:86:0a:4b:bf:67:ec:b1:
f9:58:36:ab:c7:d1:93:1e:87:ca:c3:88:90:ae:b4:
f9:4c:80:df:c0:52:6f:e1:ce:a5:fe:50:18:4f:f2:
16:5d:a9:e1:8d:76:e1:b0:0d:d1:fe:71:ef:59:0e:
dd:8a:56:01:ba:a6:8f:bf:d7:c5:26:15:30:51:43:
75:1f:76:59:9c:f8:5b:69:fe:81:d6:89:24:01:44:
91:9c:c6:b0:62:d5:d3:0c:8b:94:48:59:96:e2:53:
db:e8:64:4e:a9:67:b1:9a:e4:2a:97:20:b6:99:17:
f3:c0:1d:90:9a:37:90:7f:e4:9c:2b:cd:c0:b8:9b:
ee:f6:db:29:25:b6:29:40:78:c7:9c:79:8e:1e:ef:
d3:f0:8c:2b:b4:2b:6c:14:ad:10:cd:59:cd:b5:ed:
f0:92:99:a9:09:52:51:63:02:e3:a0:45:4b:e5:54:
34:9a:71:a5:fe:b9:b0:31:1a:a8:74:b6:c2:b8:64:
bc:dd:c6:b9:dc:eb:b0:da:30:fa:ac:5a:15:e9:f0:
fe:6d:7f:3e:cd:1d:8c:b0:ea:94:0f:fd:9e:6c:c4:
40:36:d2:07:8d:21:af:3d:20:6d:3f:9d:94:a1:9a:
c8:e7:b6:ef:a1:f0:77:d6:87:bf:4f:f7:c7:e5:dd:
5a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:02:BE:D9:58:90:1B:78:6E:C4:E0:81:72:CF:1A:86:9C:07:3C:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/17df3f68-a54e-3da0-b9e4-3d4c7d7554b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:b2:0b:48:12:c6:96:6d:57:5d:52:08:f5:2d:81:2f:54:5a:
b7:e3:e0:17:7a:6a:65:18:25:35:7b:e5:67:18:99:af:e7:ec:
64:35:e9:2e:e8:87:70:fb:93:63:e9:ff:57:0c:0a:1d:2e:d1:
50:5c:5a:12:0d:e5:b3:10:94:3a:7f:32:47:84:00:44:12:6a:
03:59:74:49:cf:32:65:1e:77:7a:97:6b:9c:b7:2e:3e:60:ec:
05:b1:c3:11:af:0c:65:2f:6d:c9:bd:0b:93:33:e9:7d:ea:92:
9a:1f:f7:46:77:5a:db:47:c6:a2:aa:59:65:7e:91:66:3a:19:
6a:83:fb:e9:21:2e:52:be:45:78:50:d1:45:1d:04:9a:9f:47:
7b:fe:cb:29:c4:86:6e:3d:95:f1:87:6f:a4:90:39:27:99:85:
2f:1d:14:8c:a5:d8:34:d1:5c:79:25:84:64:99:e7:5d:5b:88:
b6:2e:1b:7d:45:b8:d4:ba:4d:e6:56:64:4b:25:b5:b4:aa:26:
82:b6:2e:b1:54:6b:db:8d:d0:e6:1e:50:a7:0c:72:b4:b0:7b:
20:59:68:2f:52:61:9e:bc:fe:7b:40:48:71:8d:ed:83:c7:55:
be:90:e2:bc:b1:93:af:08:35:90:3c:80:e1:2c:6f:e5:cb:4b:
fb:4b:e2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:31 2025 by rpki-client