Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/288b4349-cfba-3eb8-84be-ad43d95a5cee.roa
File: 288b4349-cfba-3eb8-84be-ad43d95a5cee.roa (raw, json)
Hash identifier: ComarMX3FN0/vAUnACmU/Exv46aXpTz5bVTSP3UjyUs=
Subject key identifier: 53:FF:7E:F2:EA:9D:CE:53:05:7D:D0:F0:F3:00:80:D6:05:89:5C:C1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E93764D7837E00AA7D37DDBF0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/288b4349-cfba-3eb8-84be-ad43d95a5cee.roa
Signing time: Thu 14 Jul 2022 21:12:08 +0000
ROA not before: Thu 14 Jul 2022 21:12:08 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:93:76:4d:78:37:e0:0a:a7:d3:7d:db:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 14 21:12:08 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=23825170-4095-4c9c-9de6-42f0a58a1b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:a9:71:89:22:fa:cd:34:ba:02:64:94:7d:
15:45:15:45:de:7b:48:12:e1:d0:6c:96:23:20:49:
85:c1:ad:1e:1b:df:ef:dd:46:14:c3:7c:97:55:11:
b8:2e:bf:bb:68:52:d2:3e:ba:f7:7c:b5:14:8a:be:
e3:1d:60:a9:e9:5b:83:89:a3:04:26:e8:86:36:03:
b3:57:b0:f2:5d:1f:04:28:4e:85:01:37:6a:81:1e:
78:ad:6f:38:d9:9c:75:04:ce:c1:80:b5:a1:a1:02:
5a:62:48:9d:b9:45:b9:87:cb:d4:ff:c7:a6:ab:54:
65:f4:03:33:d4:4c:40:75:8c:f9:93:51:52:74:ca:
6c:98:4e:2e:cf:84:19:9d:d3:6c:59:ed:18:3e:07:
23:d0:20:b7:5f:25:d7:e7:ca:a4:ef:36:a7:68:23:
07:8a:b9:31:a1:31:47:e3:86:a2:1d:e7:52:d3:0c:
af:f5:1d:f0:88:8c:24:d1:12:80:f9:7f:66:2c:1c:
a1:51:76:5c:a3:53:06:0a:90:b3:57:42:f7:1e:61:
70:f1:5c:85:7e:08:08:6a:be:fd:4c:7e:29:a8:62:
73:67:3b:85:d5:1e:14:22:8f:7d:5a:ce:88:7e:40:
5a:04:cc:31:6b:fb:e4:58:f4:a3:18:41:92:26:f0:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FF:7E:F2:EA:9D:CE:53:05:7D:D0:F0:F3:00:80:D6:05:89:5C:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/288b4349-cfba-3eb8-84be-ad43d95a5cee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:bd:8e:cb:18:25:e4:0d:19:bb:03:9c:9a:31:42:da:62:02:
46:38:2b:a0:21:79:e0:74:ba:ae:7f:19:2f:fa:a9:68:a6:b7:
95:d0:77:b2:06:16:90:df:2f:5a:71:1e:29:fb:9b:ef:f8:97:
da:ae:e9:35:ab:26:d6:9c:f3:07:51:b2:dc:8d:dc:c7:f1:89:
c8:5a:5c:d3:87:07:84:47:23:1c:a4:16:00:bc:d6:46:d5:6e:
8b:b3:94:a4:1a:35:b6:9e:fc:b6:78:dd:3d:db:4c:49:06:e8:
0c:52:7a:c5:d2:a5:53:84:5b:d7:03:0c:6c:2e:55:7a:1e:d0:
03:37:56:6c:7c:d6:47:a9:bc:25:01:a9:25:6b:22:5b:6d:73:
c8:cc:6c:fe:2a:08:f0:5f:4b:62:d4:8a:84:e8:35:6c:d7:48:
45:bf:9e:d1:a3:85:d2:13:40:7f:18:80:02:27:3b:f5:ba:b1:
b1:2b:31:d1:27:60:cc:95:fc:bd:88:21:08:7c:2f:37:c5:49:
05:35:21:5d:60:81:5a:6a:a9:b3:52:0f:3f:df:29:0a:dc:81:
a2:54:5d:ab:80:21:07:d6:9e:b3:ea:56:fa:05:af:26:42:f7:
b0:7f:b4:5d:d6:8c:3f:ba:e3:6a:68:5b:67:11:12:b0:a7:62:
f3:45:31:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:19:01 2025 by rpki-client