Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2825892f-d0d6-3802-9ead-c5565d587bfd.roa
File: 2825892f-d0d6-3802-9ead-c5565d587bfd.roa (raw, json)
Hash identifier: KdRYjNT8OQN3xqNDdC9UGhgGbwqMqOiI2vAnIWcVE64=
Subject key identifier: 03:2E:D0:44:99:36:51:37:46:17:13:76:A7:3E:B2:46:4C:E8:EC:A7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A26532CA4ED46C924B62940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2825892f-d0d6-3802-9ead-c5565d587bfd.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 98.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:26:53:2c:a4:ed:46:c9:24:b6:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=c4206a8f-608c-4bcf-bb11-078980c8e401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:37:60:e1:1a:38:62:f5:7f:6d:c9:aa:fb:fa:
90:6a:eb:b3:83:ba:2b:fa:a5:be:c6:39:e0:a0:d8:
05:01:e7:57:40:83:4c:80:83:2f:1e:d3:49:ea:7b:
3a:5d:fc:16:04:89:0e:25:20:46:d1:48:3a:94:29:
4d:a4:c5:1c:53:00:43:91:27:b4:16:cc:3e:c0:80:
4c:8b:72:62:2c:74:48:bc:ec:dd:fa:3c:92:05:0d:
c7:7b:1a:05:8d:71:7a:33:bf:c8:80:88:e3:64:88:
6c:53:77:45:92:e4:86:13:dd:b8:82:c6:ea:52:9b:
e5:df:c8:55:d5:bb:f6:eb:8c:07:ed:28:e8:ad:47:
ad:87:7e:66:22:2f:09:50:2f:4b:de:a9:a1:84:85:
41:d3:b3:19:fd:7c:5d:1f:f0:5a:87:6a:8b:1b:0d:
99:ad:d9:aa:46:b7:db:5f:8a:b3:7e:2a:04:85:b0:
42:18:35:4c:fd:9c:09:07:75:a8:a4:45:9e:d9:46:
e9:05:95:15:5d:ec:2c:45:c3:94:3c:dd:29:7d:0f:
3d:be:4d:ea:13:6b:45:4c:fb:4e:37:73:94:60:d9:
c5:4d:fc:f7:96:37:3d:10:4b:44:a3:b9:f7:d8:df:
f8:26:bc:23:18:20:b5:dd:ed:da:97:e6:83:54:e2:
18:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2E:D0:44:99:36:51:37:46:17:13:76:A7:3E:B2:46:4C:E8:EC:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2825892f-d0d6-3802-9ead-c5565d587bfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
98.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:27:be:35:d2:f3:b4:a5:39:48:f4:47:b9:04:ba:3d:5a:71:
5b:d3:0e:c0:49:83:1a:a2:b7:a4:f3:c4:df:c1:c9:4c:66:19:
7e:5a:c9:30:e5:27:09:ea:44:ac:7d:a2:33:19:51:f1:37:a3:
d0:11:94:2d:63:4c:0b:58:ed:3d:ee:ed:b0:df:59:16:cd:57:
17:f2:2f:b4:97:e5:70:e4:31:fe:e3:87:ce:d3:ea:d2:a0:c5:
25:d2:ab:4d:3a:9a:53:c1:e9:24:c4:58:d1:ca:5f:97:59:97:
fd:90:9e:18:8e:77:98:b0:c0:76:82:17:72:25:8b:cb:1a:69:
10:55:c5:60:09:f5:44:ff:1f:27:a3:39:6a:a0:cf:9b:98:9d:
8e:7a:be:e4:74:d4:96:39:9d:93:8f:73:16:b7:91:80:28:7d:
f5:68:a6:cf:6c:ea:57:56:c5:a6:b6:e4:fa:a6:95:6b:95:ae:
61:a1:05:8d:7f:1d:7a:c6:d9:be:03:df:3e:50:b3:13:ef:d2:
6a:6c:58:69:df:fa:45:c9:13:83:a5:9c:0f:3e:5e:bf:0e:78:
74:7f:a7:c1:c0:9d:f9:78:f8:d7:02:7d:21:02:e3:db:2f:57:
a0:08:c9:97:25:2e:db:03:8d:06:90:28:19:0e:87:d0:7e:d7:
05:fb:f8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:18 2025 by rpki-client