Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1bfed331-7809-3d0e-90ca-32c6196ed834.roa
File: 1bfed331-7809-3d0e-90ca-32c6196ed834.roa (raw, json)
Hash identifier: acbloCyy1sbPKRYxsUJ4D0r33dY5SophjP7q26wH0b0=
Subject key identifier: 78:48:2E:15:AA:52:9B:BB:15:C7:BE:CC:BA:92:65:06:23:6B:B6:45
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CA394D09A36B2C9DDB7E89500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1bfed331-7809-3d0e-90ca-32c6196ed834.roa
Signing time: Wed 19 Jan 2022 05:00:00 +0000
ROA not before: Wed 19 Jan 2022 05:00:00 +0000
ROA not after: Wed 23 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 199.205.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a3:94:d0:9a:36:b2:c9:dd:b7:e8:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 19 05:00:00 2022 GMT
Not After : Feb 23 05:00:00 2022 GMT
Subject: CN=1cfba366-6944-4aa3-a37e-d6ce7d48f684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:3f:8e:1a:93:9d:ff:e0:d2:f8:5e:76:64:
f2:ac:86:ea:f3:a0:a4:18:de:2f:1f:57:7d:da:62:
ce:07:a3:37:a1:a3:9c:49:65:6f:88:99:4a:65:b5:
ea:ec:06:ae:9a:16:63:74:f5:2f:0f:1d:24:dc:48:
d1:b3:77:16:a4:92:ee:92:44:d6:54:76:a3:63:7e:
e1:1e:56:43:2b:8a:e1:02:23:bf:38:ef:3c:c5:56:
7e:70:46:33:c0:bf:6d:1b:e9:f7:9f:51:04:32:85:
d0:31:95:fe:6f:28:fb:c8:aa:93:f4:88:07:ee:1f:
75:ef:5e:a4:10:fd:65:42:06:e1:3c:d7:2e:7a:8a:
4f:26:48:81:f9:d7:df:a7:e0:fd:67:2e:c4:62:07:
86:36:6a:0c:46:a9:80:17:92:20:51:ac:57:4c:e3:
4a:e0:5a:14:f0:21:a5:ec:ba:33:00:fd:ec:4a:15:
a5:cc:75:42:81:e7:3b:05:c6:32:0f:44:da:30:86:
88:4b:fe:75:e7:f9:64:1b:85:48:d6:9f:9d:29:a3:
27:97:a2:50:e0:61:13:b8:5c:2c:1a:77:56:51:1a:
8c:67:fb:d0:d5:1a:2f:cd:ed:5b:24:16:e0:f3:48:
50:3f:88:4b:70:66:11:ef:98:a7:bc:ea:94:3f:f2:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:48:2E:15:AA:52:9B:BB:15:C7:BE:CC:BA:92:65:06:23:6B:B6:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1bfed331-7809-3d0e-90ca-32c6196ed834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.205.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:ff:9a:f5:dd:1b:d0:3d:30:ff:99:fa:8d:fa:84:63:93:43:
df:d8:91:61:4b:fb:8b:0b:74:70:b3:4c:4b:1c:0a:43:39:2b:
8a:7c:4d:27:c1:f1:89:ea:01:0d:8f:01:06:bd:e1:8d:eb:26:
5e:05:3c:a2:e4:c1:d0:fd:75:79:43:3b:91:39:18:88:27:87:
00:ad:70:d4:09:71:de:c7:1c:41:5e:04:79:8c:1c:25:23:84:
a5:2c:67:77:eb:c7:03:40:4e:89:48:4e:68:83:b8:af:81:08:
b2:e9:84:f3:dc:c1:e3:0c:a9:8b:9f:83:ec:c1:9e:37:4e:6a:
fa:0f:d7:02:74:2a:9d:60:62:f9:74:db:b9:bd:b8:ac:d9:28:
17:e0:7f:86:b0:81:0c:03:03:21:2d:05:c9:db:e4:c5:c1:7c:
71:9c:31:73:cf:4c:76:26:1a:ab:77:c7:ea:31:2c:10:e0:6b:
cc:af:d3:87:dd:78:99:30:1a:72:b4:93:a9:f6:3d:99:f4:2e:
07:f7:60:7d:5b:a6:36:8c:e1:f0:6b:8f:23:70:80:c1:f7:a5:
11:36:6d:3e:0f:42:a3:30:ac:fc:ef:eb:97:b2:c7:19:d5:ae:
3d:aa:33:3a:16:40:ec:c4:d3:d4:fc:ae:58:31:5f:f1:0d:f7:
6b:7d:53:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:09 2025 by rpki-client