Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1dbe474c-9b1d-3efa-b410-eb36a42128e6.roa
File: 1dbe474c-9b1d-3efa-b410-eb36a42128e6.roa (raw, json)
Hash identifier: jWbqNVABsQ3icYMfjleLRHsCVwNuTsfgvS99+cv1M0k=
Subject key identifier: AE:CC:74:90:71:CB:8C:57:A2:5F:82:59:40:84:F2:4D:2A:48:79:1D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0C640AFD3D7265E1DA87FA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1dbe474c-9b1d-3efa-b410-eb36a42128e6.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:64:0a:fd:3d:72:65:e1:da:87:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=4a34ce92-96a6-46de-a42f-b5abdcf15571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:0f:7c:4e:70:b3:88:65:41:a7:b5:3e:f0:
6d:a8:14:c3:c5:4a:08:4f:8a:90:37:66:5a:52:ae:
36:d4:72:d7:39:97:99:c4:0f:ee:88:06:8e:71:f3:
0d:59:42:e3:97:9c:1a:9e:94:c3:38:9b:54:bc:50:
49:fb:87:f7:4b:1c:28:15:0b:81:49:dd:52:3f:bd:
30:95:e3:f6:7b:0f:51:5a:e4:e4:44:8e:6a:55:33:
f2:57:71:19:bd:fe:39:00:3e:2d:d6:f6:5c:e6:37:
2b:17:4b:15:7d:01:07:07:df:01:54:74:3d:11:f8:
2e:d3:96:1d:e1:df:53:88:8f:06:e9:b7:10:27:f8:
89:ef:c6:7b:c8:13:fb:4a:38:79:29:19:f6:55:47:
3f:6d:87:41:96:98:e0:d2:e4:58:47:88:01:3d:bc:
22:d0:d4:6d:17:30:2d:f6:5a:32:59:f0:f6:0a:cf:
d7:2d:17:6a:7b:3e:cf:1f:e1:47:2e:9d:9d:72:47:
eb:91:b8:c3:7c:68:bc:a1:20:25:bc:de:42:3e:a1:
fa:9d:86:20:db:7e:c3:83:dd:09:f6:81:bb:74:bd:
9a:19:9e:a3:f1:72:97:74:34:17:b7:dc:0c:c9:44:
cb:54:44:7a:31:7f:cb:2d:2f:4a:22:9c:b0:c1:7b:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CC:74:90:71:CB:8C:57:A2:5F:82:59:40:84:F2:4D:2A:48:79:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1dbe474c-9b1d-3efa-b410-eb36a42128e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:f6:39:42:28:40:8e:67:58:12:25:6c:ba:2a:21:c7:7d:25:
f7:66:6a:16:50:d4:a4:4c:37:11:d9:c8:19:52:63:d6:f9:79:
6d:c0:52:53:07:8a:66:aa:3e:14:00:9f:e5:24:49:e2:b2:2c:
19:12:59:41:10:14:d7:35:1e:bb:ac:8c:79:c2:8f:81:70:f7:
70:38:dc:e5:fd:35:04:ee:4f:10:1c:a7:80:95:19:8f:f7:a7:
5b:89:8c:96:5b:10:b1:5e:0e:0c:96:26:b9:da:cb:e1:ce:26:
97:48:d2:98:1c:4f:ba:ef:26:18:e8:80:ca:d2:16:8b:2d:db:
bd:6f:2e:9d:41:c2:7b:ad:f3:7a:2f:2e:b8:17:50:76:2b:b0:
b7:d9:b5:e2:fc:80:62:b7:35:a9:25:19:d1:cf:fe:23:f3:0f:
83:bb:12:93:60:a4:67:5d:15:82:f3:33:55:28:73:a4:07:47:
f2:33:ef:f6:66:d1:c4:91:eb:5d:b8:e3:d6:ff:cd:38:3e:13:
1b:5e:cd:77:dc:86:6e:15:b3:2b:fa:9d:5d:72:95:d7:01:4b:
37:a9:2b:1d:86:8b:7f:ed:6f:c6:02:ca:cd:2c:1c:10:93:f6:
64:28:7c:12:ce:b9:84:2f:f8:37:06:12:fc:0b:6e:11:17:36:
f9:60:26:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:23 2025 by rpki-client