Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ec2f1ae-c265-3246-a7c4-e4c0ffab6d80.roa
File: 1ec2f1ae-c265-3246-a7c4-e4c0ffab6d80.roa (raw, json)
Hash identifier: owfTzm+aK9dFoAizfqJPZNeKYkYOGM5cAUiYrw+z3HE=
Subject key identifier: 0A:59:A4:66:EA:C2:59:9B:77:7A:0C:D2:5D:34:2D:50:3F:CF:C3:59
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840391E9AB5CE9454F41A9C7680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ec2f1ae-c265-3246-a7c4-e4c0ffab6d80.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 65.4.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:39:1e:9a:b5:ce:94:54:f4:1a:9c:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=1eb343b8-ab9a-41dc-961a-8891fd5775f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:ee:ad:b7:0d:70:34:93:d4:1b:31:19:32:
e7:96:75:ac:5a:db:8c:53:71:e3:e7:11:69:90:bc:
94:44:de:c0:f7:d8:83:45:66:be:8c:7d:db:c2:92:
d0:c0:ee:3a:b3:31:81:fc:12:15:15:8c:3b:5d:48:
61:e9:5f:74:0f:13:a1:b4:df:18:69:da:99:d9:ae:
78:bd:0f:f5:f2:7d:ca:4c:25:03:d6:71:b6:ab:0d:
4a:02:e1:b9:18:cb:d2:2e:91:63:2f:20:d7:de:4b:
b8:c7:a8:57:dd:ea:76:89:b7:0f:06:c4:3a:d9:06:
ec:a9:6e:81:8d:a2:a9:48:b8:a5:f5:57:31:9c:bd:
22:12:b4:5a:20:e1:16:a5:19:0e:6a:d4:48:42:93:
e7:66:cc:0f:a8:ec:dc:ea:55:c0:e0:f8:12:66:22:
21:99:d0:31:55:f6:1a:cd:a9:a1:58:e0:34:19:db:
72:c6:de:be:58:52:ee:ca:ad:a2:f9:61:04:39:fc:
81:50:5b:11:c4:25:1b:25:ce:96:7b:ff:6d:3a:41:
37:84:de:74:d0:04:21:58:45:23:d4:36:84:f8:eb:
2f:2c:b9:4a:d7:a5:ba:4d:6e:a8:fc:5e:64:13:c1:
bd:d6:45:be:57:50:fb:c8:c8:28:77:f2:4f:32:14:
57:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:59:A4:66:EA:C2:59:9B:77:7A:0C:D2:5D:34:2D:50:3F:CF:C3:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ec2f1ae-c265-3246-a7c4-e4c0ffab6d80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.4.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:4c:62:8f:2a:9a:b1:68:07:d7:2d:c9:9d:98:bd:97:41:2d:
fe:89:5a:29:8c:0f:22:ee:40:da:c5:ae:ec:cd:a1:dd:a2:46:
cb:9a:f5:e2:e8:21:8c:b1:c0:5f:ca:4f:8e:49:08:58:1a:93:
66:dc:0d:a4:f5:44:b4:5e:82:a8:da:84:03:7c:dc:45:c7:58:
37:69:8c:88:02:3a:d0:8c:1c:87:77:94:12:2d:64:26:f1:7e:
da:7d:1b:5f:5e:8b:d2:69:7c:af:a1:4e:33:84:33:15:28:50:
a0:7d:14:01:60:bb:28:a0:ac:85:52:48:c4:60:e9:6a:3e:d2:
40:d7:e0:ab:b7:5e:cc:cd:60:06:be:de:d1:5d:9c:0f:58:e8:
ce:97:cd:06:11:2a:72:6d:0c:4f:be:c9:d2:2e:44:1b:a5:37:
2e:51:f4:ed:79:aa:23:3b:ab:ca:b6:cf:03:30:07:58:ca:9b:
b3:94:bb:1e:96:dd:b2:71:5f:e8:4f:75:e3:38:bc:65:79:39:
2f:69:6a:c6:79:9b:51:a1:92:4b:45:a8:de:31:6e:ab:dd:03:
49:79:31:74:d3:51:33:18:a7:be:e9:d2:ad:54:c0:f0:5c:eb:
c5:1c:3a:c3:9e:e0:48:26:ef:d6:1c:d0:29:99:05:8d:be:b2:
4d:5c:f2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:42 2025 by rpki-client