Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2af75f1a-22a0-365c-b251-7795a693330a.roa
File: 2af75f1a-22a0-365c-b251-7795a693330a.roa (raw, json)
Hash identifier: AEYiyiU3WSePPQxw6AAdSiUB3Yhig9o3J+VLQdky5ks=
Subject key identifier: 95:4A:65:8C:E2:03:BA:22:C9:C1:4E:3C:85:DE:F7:05:4B:92:BB:CE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6FE02DD2D9483BD9110FF680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2af75f1a-22a0-365c-b251-7795a693330a.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:e0:2d:d2:d9:48:3b:d9:11:0f:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=8a1499f2-b4c9-4d3e-a9fb-7b2ac2c2e0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:db:81:60:c1:7b:ba:ab:a2:cf:62:a6:ac:17:
ab:1b:10:df:f3:3b:24:a8:6a:d5:70:5f:28:06:7a:
d6:9c:90:16:88:19:80:77:5c:8e:5b:29:dc:0d:ef:
8c:90:b1:55:e7:13:18:45:12:20:59:db:19:b1:cf:
d8:3a:96:70:07:08:20:ad:30:72:f6:cb:ec:37:e1:
c2:fb:ee:10:ef:f3:8d:33:79:bd:2a:5f:b8:24:89:
45:42:2d:4e:b9:81:04:96:57:a3:2f:89:14:0d:24:
83:26:c9:69:c9:83:93:fe:38:50:cf:74:cb:a8:40:
3d:e1:ee:e9:a0:35:44:31:77:34:30:f4:a7:06:5c:
52:07:7b:05:0d:44:70:0d:83:de:10:f8:67:be:22:
ca:44:c9:d8:08:cf:6c:13:b4:07:8c:28:70:93:28:
a1:2b:5b:fa:81:5f:52:ee:e3:24:d2:ec:89:d8:f6:
51:46:34:c6:3c:1c:44:f8:90:7c:10:98:3c:db:f8:
b4:14:c8:db:f9:a5:ce:10:d5:71:8d:08:c3:f5:c6:
63:07:4d:75:72:f8:03:60:22:74:43:dc:4a:44:71:
d8:84:f6:79:83:8a:d7:09:ae:f5:2a:3a:0d:64:6f:
d2:91:a3:28:7e:97:f2:63:6d:9d:bc:86:98:21:c5:
72:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4A:65:8C:E2:03:BA:22:C9:C1:4E:3C:85:DE:F7:05:4B:92:BB:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2af75f1a-22a0-365c-b251-7795a693330a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:88:84:76:5b:10:3f:95:b9:9f:20:72:fa:4c:9e:54:4f:d1:
94:a9:4e:37:f6:5f:e5:c9:53:dc:dd:3e:6c:d3:d7:ac:91:9d:
e9:75:9a:ec:c5:1a:ed:5a:d7:05:4d:99:c8:ff:72:b5:8a:d8:
c9:3f:71:9b:e6:21:68:3c:5d:9c:d5:fc:78:a4:b8:85:04:73:
8a:90:c0:89:9b:5b:d9:8b:da:66:be:4d:14:29:52:b7:67:a1:
04:fd:dc:9e:15:b0:e2:2b:ab:1b:42:b3:b3:4a:a6:c6:da:50:
4b:a1:09:69:e5:bf:15:af:2f:fb:3a:75:4e:ce:89:42:0d:94:
0b:4e:35:c4:f5:c5:1f:da:9e:c5:c5:45:dd:0f:10:47:a0:eb:
f6:df:af:85:c5:46:26:4f:d2:42:17:3d:ae:79:c5:c3:31:05:
93:7e:e6:34:9f:66:ac:46:31:2d:4b:20:d6:e0:d9:28:c2:02:
be:16:8e:f5:bf:d4:d0:08:bd:1d:8e:6c:20:e6:60:33:80:d9:
bd:24:28:99:e4:24:12:09:65:d4:cb:3f:d8:fd:24:d6:a9:3d:
83:19:54:48:ff:05:f6:9e:64:98:aa:52:28:9d:b1:05:2e:03:
7b:ab:75:1e:a3:c3:98:91:d7:45:45:0c:13:ba:52:88:28:4d:
12:c1:50:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:27 2025 by rpki-client