Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23de62a9-3451-3765-8d18-50ebc0959cfa.roa
File: 23de62a9-3451-3765-8d18-50ebc0959cfa.roa (raw, json)
Hash identifier: cT+ggcRV5Eg8ZXjgokiIqI2Agc5RWqLzD0RqgiSddxs=
Subject key identifier: 85:14:5F:72:4E:9B:3B:D2:C0:EA:6D:10:12:E2:CD:D8:1A:42:8F:DE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FE6FA6DEB8CFA31C3C9F06D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23de62a9-3451-3765-8d18-50ebc0959cfa.roa
Signing time: Sun 13 Nov 2022 12:00:00 +0000
ROA not before: Sun 13 Nov 2022 12:00:00 +0000
ROA not after: Mon 19 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 98.130.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:e6:fa:6d:eb:8c:fa:31:c3:c9:f0:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 13 12:00:00 2022 GMT
Not After : Dec 19 05:00:00 2022 GMT
Subject: CN=8cdb7526-ee52-4557-a16c-f7439fd27bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:7b:4e:c4:21:e9:08:9c:b2:69:df:30:1c:
4f:a3:9b:c6:01:c4:84:2a:72:be:92:f9:50:3a:bf:
fa:a3:36:e9:ab:59:e5:bd:68:62:18:9f:b4:34:b6:
2f:16:98:b7:6b:9e:02:87:5d:6d:c2:ed:4b:9f:79:
4c:4f:65:c7:8d:83:05:68:67:25:69:c6:5a:ae:39:
93:15:ce:f8:f9:1f:18:e1:f5:ed:c6:a6:82:98:1d:
94:cd:4a:fc:8a:30:5a:72:61:b4:11:5a:21:72:72:
ca:d4:3a:fa:76:98:62:66:6f:cb:b1:2f:59:ed:26:
d7:35:55:8f:8d:58:63:e5:73:a4:fe:82:7c:5b:54:
47:da:0d:b1:dc:78:e4:77:70:5a:0e:5c:40:ed:2d:
59:8e:f1:3c:19:a7:f3:2c:04:da:44:49:bb:00:04:
0d:00:f9:93:c8:a5:6e:12:23:65:1b:34:7e:05:9e:
20:dd:e7:05:4f:24:f1:39:3a:14:2c:35:51:d5:ae:
35:ea:63:0e:eb:75:02:52:d0:2a:b4:2f:73:50:14:
02:18:8d:6c:5b:ac:14:40:38:b3:ca:e9:fb:e3:22:
22:3e:21:d1:a7:bd:a7:3e:4f:f0:b0:db:34:46:88:
a4:91:dc:19:5c:2b:41:dc:fb:67:e1:e1:8c:49:f7:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:14:5F:72:4E:9B:3B:D2:C0:EA:6D:10:12:E2:CD:D8:1A:42:8F:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23de62a9-3451-3765-8d18-50ebc0959cfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
98.130.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:7e:db:67:92:7a:c7:87:94:c6:56:90:2e:0b:ca:28:0d:ca:
35:6d:7b:b6:40:10:09:01:74:a6:8e:a0:39:90:21:26:76:83:
82:27:70:e4:a6:25:08:d4:73:f1:01:55:45:37:e5:6c:00:b5:
fe:0f:22:de:2d:1c:95:ff:ca:d4:99:95:c4:04:5d:be:bd:ec:
2e:34:51:e2:f9:8d:40:00:6a:cb:30:5e:0d:17:46:c6:31:10:
a9:94:4a:33:ed:cf:93:64:33:66:f6:1f:26:53:65:d6:94:0a:
40:21:e6:73:53:fd:70:b3:5d:3e:ff:0d:b2:7a:f7:11:0e:1d:
61:79:aa:e7:99:0f:05:f3:42:16:89:84:eb:22:99:20:84:90:
a7:49:e2:0c:d8:4f:9d:ea:9f:13:00:2d:3e:e6:9f:af:2f:b9:
89:bb:8b:35:79:b2:d6:1c:19:98:ee:c4:e0:d4:e6:b4:da:c7:
89:bf:6c:b8:0d:57:29:f3:db:15:ed:47:1b:66:ff:dd:1f:48:
e7:8d:ae:f0:50:bf:25:21:7c:1f:fb:10:f7:de:fd:21:6e:b2:
50:d5:9b:6e:ea:b9:cc:87:99:d9:38:63:16:1a:9d:5e:ff:97:
37:2c:3f:fc:f1:dc:02:83:fb:e5:d4:77:fb:fc:9e:7f:2b:d7:
cb:54:63:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:41 2025 by rpki-client