Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21a0a856-6a45-3115-9d29-6fc4b1035b0f.roa
File: 21a0a856-6a45-3115-9d29-6fc4b1035b0f.roa (raw, json)
Hash identifier: cElWPRqlHdnBL2FaAH1u4LmWuKOjlwZl4oJ5aWTHnlo=
Subject key identifier: 58:E6:4D:5C:55:55:43:88:19:97:41:EF:12:64:D7:46:6A:9E:74:FD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406BB3C59EFF27A638F1A6C720
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21a0a856-6a45-3115-9d29-6fc4b1035b0f.roa
Signing time: Fri 30 Dec 2022 19:54:08 +0000
ROA not before: Fri 30 Dec 2022 19:54:08 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6b:b3:c5:9e:ff:27:a6:38:f1:a6:c7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 30 19:54:08 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=0a649ef8-5e0a-4d88-b931-481fe95ee176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a3:cc:83:b9:f6:dc:08:f7:f2:2b:34:a9:37:
9c:ec:e8:39:57:4e:25:34:b4:26:37:c5:0e:a4:64:
84:ab:65:94:81:d8:4b:4e:74:f7:71:36:71:ba:79:
5e:c2:ba:4f:9a:15:c0:59:35:d1:e0:0a:7b:f9:7d:
b0:99:d8:73:a4:0f:ac:e6:8b:57:19:73:56:35:27:
4f:75:5b:2e:af:fd:6b:bb:67:2c:16:53:0f:86:82:
6e:b7:dc:ee:05:e6:5c:9b:d3:ce:4a:1a:19:29:f5:
8a:09:2e:3a:16:eb:1f:41:8a:08:1a:fc:8a:ba:06:
8b:5f:d6:40:18:b0:fa:b9:41:20:88:86:57:37:7b:
ae:7b:61:a6:aa:85:4a:b7:52:c7:26:f5:e1:b9:7f:
39:97:e8:84:6b:89:c2:80:5b:ae:4a:82:6c:e2:c5:
17:04:ba:5a:d9:1e:c3:8c:64:1e:90:be:c4:e9:ae:
88:30:79:e1:8d:7f:5f:7a:6b:f6:56:81:ed:9d:ba:
78:dc:f1:eb:94:43:97:46:f8:4f:5c:92:97:9e:f8:
30:62:60:d6:32:fb:31:2b:3f:6c:ef:0f:52:0c:53:
86:c7:06:99:6e:23:29:41:29:7f:b5:a1:b4:47:28:
1e:17:be:78:69:6b:65:48:0f:e5:91:a0:c7:66:d8:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E6:4D:5C:55:55:43:88:19:97:41:EF:12:64:D7:46:6A:9E:74:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21a0a856-6a45-3115-9d29-6fc4b1035b0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:82:b6:82:20:c7:38:08:9f:05:e4:45:5d:21:11:1a:98:1f:
a1:bd:ba:7a:0b:f1:33:c0:cb:97:e6:06:b3:02:05:22:c7:74:
f9:93:38:f0:7a:63:5e:b0:33:9e:4f:19:5a:fc:6c:d1:e9:59:
ba:c5:58:0b:f4:21:94:ad:d5:99:df:83:25:ef:2b:18:1a:0a:
ae:7c:2b:2a:6b:c9:fd:8a:f5:1a:b3:df:e1:98:10:5a:ac:af:
c6:2d:87:67:ad:72:23:a8:83:e4:cd:a4:3f:e5:ba:da:87:5b:
77:7e:e4:15:aa:93:10:5c:75:76:41:7a:9d:ec:72:f9:b6:10:
75:4c:b1:ef:17:43:75:47:6a:fa:dd:0f:c3:40:30:10:6b:b5:
d9:48:4d:00:03:07:0f:c9:10:2f:f6:fc:60:b2:62:78:9d:30:
72:f1:25:c3:a7:48:10:b1:51:43:19:86:08:2c:71:39:73:3c:
a9:65:60:ca:52:76:dd:6c:5e:88:b0:cc:8a:f1:9a:37:40:28:
61:72:a7:07:29:94:7b:30:18:0e:8e:2b:91:17:94:77:ca:da:
cf:b5:8a:e9:0e:b8:d3:07:b7:06:15:02:4f:a9:7d:9c:7d:1e:
fb:24:8e:38:9b:70:a8:53:10:25:a9:26:88:ad:a9:ef:7d:78:
52:47:37:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:10 2025 by rpki-client