Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c6e7be3-a7d5-3eef-bd1e-90096f05e033.roa
File: 2c6e7be3-a7d5-3eef-bd1e-90096f05e033.roa (raw, json)
Hash identifier: o8ms3jsAU3fx+JCepHU/EIPn9DOsb1edJCqfMkYkfpQ=
Subject key identifier: 24:7A:77:70:BF:2D:6C:5B:5B:99:00:7D:18:37:92:09:A3:9D:65:0F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CA0F7097A74F0E00FF042DF40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c6e7be3-a7d5-3eef-bd1e-90096f05e033.roa
Signing time: Tue 18 Jan 2022 05:00:00 +0000
ROA not before: Tue 18 Jan 2022 05:00:00 +0000
ROA not after: Tue 22 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 135.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a0:f7:09:7a:74:f0:e0:0f:f0:42:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 18 05:00:00 2022 GMT
Not After : Feb 22 05:00:00 2022 GMT
Subject: CN=7d659602-756f-4cc8-9905-b03bacd5478b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9e:67:09:28:a3:25:eb:ae:47:3d:bf:2a:bc:
7a:2a:47:55:44:70:c7:39:ba:a8:72:9b:5c:db:52:
24:86:cf:50:60:de:05:2f:2d:a1:74:83:7f:f2:60:
2c:35:b2:24:40:d4:13:d2:b0:38:c2:71:9c:f4:ac:
5a:2a:5d:9e:da:6b:fc:0a:71:ef:2e:37:d6:79:f1:
df:83:f0:6d:71:3e:f8:d5:92:1e:5f:43:19:95:3c:
3b:cf:13:e0:a2:e7:2f:48:fe:92:b2:f9:04:cf:a5:
ba:f1:e7:85:d7:b9:60:5e:77:07:ba:98:df:91:e2:
36:d3:e9:8c:9f:58:6a:42:72:9e:57:1b:ab:c5:75:
39:1f:2d:fa:a5:00:44:ab:38:d9:b5:68:ef:24:bf:
0b:4d:0b:13:18:26:83:59:c6:d8:b5:b6:7c:1d:7d:
c9:57:fa:28:16:4f:a1:c7:a1:ec:12:9b:ef:c8:3f:
c7:70:cc:67:da:5e:71:1b:8b:a8:ad:08:42:2e:71:
04:c9:5d:16:e1:09:f2:74:e4:8b:c2:7b:1c:87:62:
1a:78:b5:4e:16:c9:e3:13:20:62:fa:52:c1:57:a4:
3e:17:16:70:b8:1e:22:52:92:f1:02:a9:33:96:d8:
31:7c:e6:0d:fc:0d:f3:bd:1c:d3:3a:1e:4d:cb:76:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7A:77:70:BF:2D:6C:5B:5B:99:00:7D:18:37:92:09:A3:9D:65:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c6e7be3-a7d5-3eef-bd1e-90096f05e033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
135.22.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:5b:28:f1:87:9c:d4:6a:7a:57:ba:ca:6a:4e:13:56:41:b3:
c7:d3:c1:e9:73:ab:b9:11:99:5d:cf:a9:d9:c9:98:a9:37:53:
75:42:b1:ca:5f:f7:49:a1:55:36:e5:36:cc:57:cd:3a:b1:fe:
4d:4b:a9:b8:27:c1:63:ba:c2:76:bf:e9:9f:77:e2:3b:01:27:
aa:e7:35:2d:1d:4a:db:2f:82:ed:fa:70:0a:b3:87:45:e6:a4:
b3:f9:6e:e6:e1:e9:43:2a:ce:71:50:46:0b:f0:31:4d:d2:02:
2c:4c:c9:fa:d6:24:a2:c5:d3:46:a1:3d:49:51:1a:96:c5:c7:
ee:98:ae:98:4a:a2:47:23:27:86:c7:1f:2c:c0:a6:0f:45:95:
be:5d:b5:34:4e:f1:78:2c:7a:4f:71:4c:48:32:84:f0:66:3d:
f6:4b:a1:b3:cb:9a:4b:a9:7d:66:33:69:a6:72:11:46:f4:2e:
1c:b5:1a:17:89:dc:f6:af:6b:c8:47:01:db:4f:5f:0f:73:87:
78:98:35:83:f6:e7:72:71:7a:11:d1:15:87:e2:e3:a7:f7:8c:
bf:3f:13:87:f9:db:7e:a3:de:2f:6f:9b:61:e6:a9:b8:87:d4:
8c:9b:0b:6b:73:6b:9f:31:f7:e5:88:c6:f2:cf:74:df:10:8d:
0c:e1:7e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:09:05 2025 by rpki-client