Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f6e3118-c8dd-359c-b5e7-1f3d5213836c.roa
File: 1f6e3118-c8dd-359c-b5e7-1f3d5213836c.roa (raw, json)
Hash identifier: oKQHW4ozHtAAKDZgCKBtfTL696ijKN4oETtiMmKqGBQ=
Subject key identifier: D0:ED:F6:73:48:A7:61:F4:EA:D4:DA:6E:6C:BD:52:1C:6B:A2:73:B8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DAA177101D88646D74C771400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f6e3118-c8dd-359c-b5e7-1f3d5213836c.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:aa:17:71:01:d8:86:46:d7:4c:77:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=127607c7-543d-4798-9197-d6fc243cafcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:5f:c2:8e:86:f4:ab:4d:df:b5:dd:82:b3:
83:c0:58:26:3d:a0:b5:9a:dc:89:85:e2:3f:34:d4:
69:af:56:cd:e8:11:8f:58:04:2c:e1:7e:08:5d:a4:
5b:d6:42:e9:9e:89:5f:a7:fb:c2:3c:43:a7:49:45:
20:bc:b6:56:01:66:f8:b5:8d:36:f3:e7:2e:44:f7:
31:9e:5d:00:44:09:bd:b6:3d:51:01:06:f4:7d:a5:
58:a6:d4:39:fd:0b:c1:0e:00:6b:ca:39:e5:d5:ed:
66:bc:99:64:ff:b7:f4:15:39:0e:f7:23:d8:62:9a:
84:17:5d:b4:30:d2:03:88:7a:ec:0b:af:b4:9d:b3:
c6:e4:0a:aa:5e:8c:67:f3:e9:bc:5b:ae:04:20:15:
6b:95:0a:7a:f3:d4:ac:98:8c:08:c9:6e:65:8a:31:
f0:34:45:a9:06:d0:3d:a2:d9:64:e7:76:fa:53:78:
06:bc:22:8b:d5:dd:8d:8a:46:7f:06:a9:3a:99:f8:
c2:3a:a2:95:74:da:66:6f:57:ee:22:3c:fc:24:cc:
99:6a:c6:f3:ca:70:b9:5b:8e:85:ec:d2:2a:64:35:
b0:11:7d:a5:56:f4:ba:ab:f1:af:76:53:80:c6:37:
53:00:60:a9:f6:03:a2:8c:95:67:7e:a6:58:bf:c4:
05:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:ED:F6:73:48:A7:61:F4:EA:D4:DA:6E:6C:BD:52:1C:6B:A2:73:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f6e3118-c8dd-359c-b5e7-1f3d5213836c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:a6:46:ca:61:ea:de:ac:c7:d2:56:b1:b9:2d:12:fa:a1:c5:
0c:27:fe:93:12:51:56:e3:a1:d7:bd:7b:1e:61:a6:25:49:02:
8c:a7:69:9b:f0:e9:f5:0e:98:16:f2:5a:1a:96:0f:87:b1:cc:
87:41:4d:e7:bc:e2:1b:51:4a:10:1a:f0:ca:45:e1:4f:e2:d9:
1a:3b:ad:36:11:80:f8:6a:d7:d5:ef:57:8a:04:fb:cb:3a:ce:
5e:72:20:a2:10:9d:a8:a5:8b:0d:05:af:aa:8b:0d:a1:24:bc:
e0:d1:f1:02:0d:04:80:4a:04:ac:0e:77:5c:16:75:c5:bb:40:
33:91:05:4e:e5:b1:b0:77:1f:dc:7f:30:9e:f2:99:b4:97:46:
60:aa:4e:45:88:f0:be:e1:b6:43:de:4d:18:41:f2:04:51:e9:
3f:c5:37:14:0c:60:99:22:b4:71:95:df:19:60:88:d9:35:8d:
36:a1:1b:bd:17:ab:64:3b:fc:6a:4e:5d:23:b6:42:32:30:12:
c3:2b:b3:92:64:ca:b3:3d:01:b7:83:14:2c:cc:31:5e:62:b7:
97:b6:f7:91:e0:a3:6b:9a:4d:c1:58:01:d9:70:20:bd:ac:cc:
c7:9e:ec:c0:cf:ee:6b:5c:b5:59:c0:6d:f1:10:ec:1d:62:30:
3e:c7:03:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:03:36 2025 by rpki-client