Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22633cbd-d4a1-374e-b4c2-da9b3fd91e26.roa
File: 22633cbd-d4a1-374e-b4c2-da9b3fd91e26.roa (raw, json)
Hash identifier: 2/VZBLCH3VIc4k3XZegRYO+bJyUyA4DQXPUUik2Mka0=
Subject key identifier: 5F:87:11:4B:FD:F9:94:55:3A:27:D3:27:FB:82:72:57:23:C6:A2:1E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C970CC2912626251FE1744700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22633cbd-d4a1-374e-b4c2-da9b3fd91e26.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:97:0c:c2:91:26:26:25:1f:e1:74:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=893da671-378e-4508-8615-406f0282f8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:82:0b:08:ce:42:8b:78:c6:ef:da:2a:c5:
72:5c:28:92:98:f5:f4:2e:82:13:b1:98:0f:a6:d8:
08:f7:61:49:50:41:02:56:a6:9a:fe:01:31:6e:aa:
1d:af:0a:29:18:9b:97:2b:95:17:c3:11:53:77:da:
d1:e8:6a:11:43:41:eb:b1:4d:61:30:0a:5a:57:18:
2e:ad:05:75:3e:ae:95:6a:c4:19:1f:9d:0d:8b:9e:
76:aa:30:30:97:09:70:1b:13:87:0d:54:f7:9a:0b:
e6:cc:98:e8:29:ac:3c:e8:51:76:99:77:e6:23:ea:
2a:cb:0a:fb:62:af:3f:db:27:41:cd:46:9c:ca:e2:
3a:74:4c:f6:7d:93:ef:dd:d8:f4:8e:49:e5:d7:e1:
0e:96:17:d2:38:1f:36:76:ca:6e:7d:1c:54:16:0b:
04:86:c7:ce:21:91:bc:15:bc:c8:f9:18:3f:41:3a:
60:3e:82:c0:d4:3b:d9:47:44:9d:39:44:e1:b1:79:
91:ca:e9:70:ca:0d:05:de:02:26:32:41:e3:b4:f1:
d9:47:8d:f7:bc:fb:d9:25:4d:f7:73:d7:39:90:a2:
d5:3a:7d:78:49:e6:8f:34:0d:92:cc:91:c6:6a:69:
59:a5:14:ec:92:a6:62:36:28:c5:ae:af:54:f4:87:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:87:11:4B:FD:F9:94:55:3A:27:D3:27:FB:82:72:57:23:C6:A2:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22633cbd-d4a1-374e-b4c2-da9b3fd91e26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:91:43:49:bd:ce:56:0d:2b:cb:41:0b:d7:f9:4c:33:ca:0e:
2c:93:71:91:23:1b:9f:db:80:ca:09:c4:1f:0b:a1:86:09:49:
9f:02:db:92:87:f9:6b:a7:d6:21:e6:5e:bd:eb:7d:46:fa:98:
06:3f:d9:6e:f7:ca:f2:ad:eb:15:a7:0e:2d:f1:79:c4:c1:19:
48:34:8c:93:e9:00:fe:7d:ce:41:4f:43:e4:9e:28:c8:97:8b:
cf:14:4b:2a:cf:1d:fa:3f:cb:2f:80:c6:fc:a1:7f:18:09:c2:
5e:7b:1c:eb:0e:5b:18:74:53:c2:94:70:83:60:12:fa:87:89:
cb:6d:93:84:e8:c5:dd:64:61:57:82:fc:97:f2:ac:92:ef:d7:
b0:38:64:1c:cf:62:2b:43:17:50:f5:79:c6:8d:f9:21:ee:81:
32:23:fd:3a:b6:a4:00:23:e3:e0:c3:70:8a:ba:8f:32:13:19:
e7:1f:fc:f4:94:bc:93:84:d2:86:fb:52:62:62:3d:84:01:da:
f6:d1:1d:bc:93:31:90:6b:e9:af:74:07:b2:e8:f5:89:f5:42:
ff:2f:b4:53:d0:2a:a0:80:00:e5:35:89:e5:d3:50:79:69:10:
2e:b2:37:40:71:24:7b:bd:c6:69:b7:b2:ba:1f:8e:14:05:88:
68:57:ea:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:20 2025 by rpki-client