Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21b35848-4ef9-3ec4-baab-4f2942044252.roa
File: 21b35848-4ef9-3ec4-baab-4f2942044252.roa (raw, json)
Hash identifier: DrxTpnFnKbgB7QKL+Kvgr++ljTAax8PvG2M4SAcxPuE=
Subject key identifier: 96:A3:A9:A2:CB:5A:F2:30:2A:37:2E:E3:8B:7D:32:2C:A6:D7:85:83
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CD250110BF8D3D07E1D820080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21b35848-4ef9-3ec4-baab-4f2942044252.roa
Signing time: Fri 04 Feb 2022 05:00:00 +0000
ROA not before: Fri 04 Feb 2022 05:00:00 +0000
ROA not after: Fri 11 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 167.97.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:d2:50:11:0b:f8:d3:d0:7e:1d:82:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 4 05:00:00 2022 GMT
Not After : Mar 11 05:00:00 2022 GMT
Subject: CN=0ccac3ef-d349-427f-b182-2064c9031625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e1:c1:a3:f6:e6:dc:30:87:ff:7d:43:5c:33:
da:8b:7d:ed:91:d4:ed:1f:be:67:6a:fc:9c:34:e6:
52:4b:62:be:de:b3:82:90:21:4b:9b:32:c2:f0:01:
69:60:f2:99:e5:48:93:0e:43:1a:b0:77:04:8f:c0:
20:59:d8:52:65:f7:55:b7:0a:3f:74:6f:b2:53:ac:
61:c4:69:9a:c5:86:ac:b3:34:0b:69:dd:8b:d3:e4:
53:5f:fd:91:f7:96:35:05:0d:59:0e:35:92:12:8d:
96:01:97:6f:98:b2:a9:0d:1a:1f:1c:7d:5d:80:4c:
c1:f4:d3:8b:b3:c0:aa:f2:4e:4b:9e:8a:83:64:ad:
6c:dc:ca:a7:03:01:02:ed:f6:c3:1c:f9:22:09:45:
33:23:e7:7b:45:92:d5:ff:31:73:5e:11:e3:ed:d2:
6f:bb:ab:37:9a:bb:98:99:72:66:81:4d:5f:a8:35:
b2:77:5b:c4:8b:27:8f:84:00:e4:65:5b:3e:3f:bd:
ae:3f:92:46:fa:49:48:b9:45:85:f1:9d:6f:ca:f6:
70:e3:c9:2e:71:32:fa:a7:80:c5:59:f5:48:5a:b4:
e7:49:e0:c8:97:8c:9b:a7:fa:bb:18:f2:9f:ec:97:
c7:49:84:ba:e1:ae:fd:68:aa:81:fe:a1:ef:a8:0b:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A3:A9:A2:CB:5A:F2:30:2A:37:2E:E3:8B:7D:32:2C:A6:D7:85:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21b35848-4ef9-3ec4-baab-4f2942044252.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.97.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:ed:5f:58:bb:bd:37:1c:df:17:db:8b:e0:a9:a1:e2:fb:73:
5d:78:34:7a:d3:c1:4b:39:de:8d:cc:92:35:1d:57:8a:24:1a:
d3:9b:66:10:98:30:1a:91:9a:11:04:b2:47:74:29:0b:0c:6a:
24:73:ea:2a:3c:a2:a7:51:3a:6d:97:17:d3:c3:a2:f4:e2:34:
27:49:25:10:2f:b3:98:d1:98:c6:74:58:05:e6:cd:fd:3a:bb:
49:2d:dd:15:e6:cc:fc:4b:54:82:8a:e9:64:e2:dd:9e:1c:52:
f0:97:99:30:a7:8e:f7:eb:8a:98:25:e4:17:9a:84:a1:24:75:
2e:e2:bb:e9:08:5e:03:bd:96:bf:68:76:c0:f4:ec:4b:a6:f6:
06:c9:f0:f5:98:92:34:d4:05:c9:c6:25:8e:70:e3:fb:d9:9b:
ed:89:14:12:68:28:a2:a4:34:34:e6:4e:27:5c:23:41:54:b8:
34:61:13:b3:df:c0:45:cc:07:08:00:51:d1:e3:3c:37:fe:2d:
dd:ef:3a:8b:4a:10:d7:33:9b:79:1f:b4:19:68:00:83:d9:14:
38:a2:81:4c:7f:ae:9e:c7:fa:3c:20:35:81:f9:c8:1c:96:e7:
91:69:f9:e7:99:29:7e:2a:da:9e:04:35:e3:ce:5c:63:04:42:
1c:ec:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:55 2025 by rpki-client