Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/252a57e8-2fef-3a9b-83c7-e5d75c6daca5.roa
File: 252a57e8-2fef-3a9b-83c7-e5d75c6daca5.roa (raw, json)
Hash identifier: 0XeRWZHbydAoiJ2/tPz8SmfVBE3t+2YBI8ZPDLKX2gA=
Subject key identifier: 9B:5B:72:BD:3E:49:01:F2:76:14:B2:23:76:61:08:2D:55:75:D5:F9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD1E52B2E07533BF52C5096C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/252a57e8-2fef-3a9b-83c7-e5d75c6daca5.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 99.87.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d1:e5:2b:2e:07:53:3b:f5:2c:50:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=7f17e31f-a571-4bf0-81a2-bab1c9eb7df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fe:07:1c:42:05:b0:08:1a:64:b9:2e:c0:af:
f3:0a:73:e5:c9:61:1c:6b:73:72:b4:0a:94:93:9e:
b5:96:dc:d0:d2:4b:62:46:da:2d:3f:62:87:09:08:
6f:34:8e:2f:ca:a9:8a:78:45:84:42:9c:97:19:96:
aa:9b:d4:57:46:9f:ea:c2:9e:c9:4f:26:a9:3e:f8:
d1:aa:53:38:27:b6:49:a9:cf:d8:73:a8:c8:33:69:
fd:ef:3b:77:8e:f3:e6:44:d6:49:69:d6:28:2e:66:
80:05:26:07:7c:43:46:3a:ed:cb:af:58:d7:51:ac:
6e:a4:92:83:51:5d:bd:12:57:af:f8:e3:35:93:81:
72:2d:3f:99:d2:84:22:a7:41:bd:05:a9:8f:1a:ab:
85:44:04:0d:3f:54:12:b7:09:de:f0:9a:71:cb:c8:
95:85:fa:4b:a5:3e:7c:01:a1:b4:f7:37:f0:9f:d5:
49:e5:a4:4f:c9:d2:99:3d:1c:17:91:b9:30:80:45:
3b:23:f6:ee:21:9a:83:74:54:c7:32:53:11:11:90:
5b:bc:c3:7f:86:ec:35:ba:52:c0:85:4b:a6:b6:86:
e0:22:d9:03:90:2f:e7:c5:e3:f5:97:b8:53:11:14:
04:5d:14:42:06:e1:06:32:53:c9:5d:53:ff:6b:03:
b0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5B:72:BD:3E:49:01:F2:76:14:B2:23:76:61:08:2D:55:75:D5:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/252a57e8-2fef-3a9b-83c7-e5d75c6daca5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.87.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:44:5b:91:66:db:b0:44:92:8d:07:41:59:63:31:f8:ff:bd:
cf:f8:b2:ee:e1:ea:2d:43:c9:fc:39:2c:b5:5e:f5:27:e7:58:
c7:95:19:c6:55:ce:1f:b6:ac:1e:cb:69:75:68:b5:90:1e:a9:
c7:3f:fb:93:81:16:88:30:86:93:7d:a1:e6:62:3f:b8:86:eb:
35:97:f6:28:45:73:3d:61:31:e9:74:4d:52:06:be:ec:66:91:
38:05:29:38:83:85:2f:5f:17:44:a7:66:86:e5:4f:78:19:4e:
6a:1f:de:80:1b:1a:2b:4e:cd:06:a1:af:54:1e:88:2a:bd:97:
cb:29:8b:e1:a3:f7:59:c4:a2:28:b5:31:1d:34:b8:9d:ff:ee:
dd:c1:86:01:52:da:e8:f7:19:21:ce:1e:ed:cf:9d:3c:0e:b6:
98:e1:4c:90:bf:38:f3:15:3e:6f:f7:aa:ca:b4:79:c4:34:56:
00:cc:02:66:67:d1:73:83:45:02:0c:c6:7e:a1:e8:0c:a7:d1:
6e:ff:30:02:9a:c0:78:8f:41:be:e9:0f:4d:4e:5d:a3:8c:b5:
45:b7:a4:f0:b8:d5:c6:46:54:41:40:9d:46:23:d9:e6:72:6b:
82:e4:67:76:24:df:f7:4d:36:9f:dc:95:bd:69:2b:2d:1c:14:
91:61:c7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:32:53 2025 by rpki-client