Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ca9f496-b216-31f4-bf16-2cb4bc27ee64.roa
File: 2ca9f496-b216-31f4-bf16-2cb4bc27ee64.roa (raw, json)
Hash identifier: ubJIQEfWC/whka3QwGY0ENPVc/70xDCkRsLaDKE4khQ=
Subject key identifier: F3:04:A1:7C:E1:FF:FA:DD:67:C8:2E:42:05:F0:0D:1E:F9:D7:F5:9A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F77569DE2E226751727892470
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ca9f496-b216-31f4-bf16-2cb4bc27ee64.roa
Signing time: Tue 04 Oct 2022 12:00:00 +0000
ROA not before: Tue 04 Oct 2022 12:00:00 +0000
ROA not after: Wed 09 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 129.235.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:77:56:9d:e2:e2:26:75:17:27:89:24:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 4 12:00:00 2022 GMT
Not After : Nov 9 05:00:00 2022 GMT
Subject: CN=cb91f7a8-b394-471b-9bf4-417ab778e89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:22:f8:68:78:5b:c4:29:8c:c9:75:96:36:f9:
47:39:6e:0c:33:0e:d2:73:6f:1f:b0:5b:60:a7:13:
f7:7a:56:6c:61:ae:96:9c:c2:ae:48:7c:44:c5:b7:
3c:54:b3:e7:91:f5:4c:81:98:af:6b:21:de:90:5f:
20:c4:d4:a1:6e:c9:34:b7:4d:59:91:c0:86:3b:da:
7c:78:e0:6f:98:76:aa:f5:2e:fc:e4:0d:ba:5d:65:
3b:f2:42:9b:54:d5:69:74:34:e3:2e:84:93:69:60:
0b:8a:a2:72:2f:5b:9a:69:18:e1:c2:d8:35:fa:45:
a5:63:c0:d4:35:16:1a:b4:a7:f7:93:ad:cb:1c:cb:
b5:fc:3e:bd:c3:7b:2c:72:f1:57:fc:19:9f:26:44:
f2:bf:f0:e7:6a:ee:7a:1b:25:0e:00:9a:cd:90:84:
f7:2b:3d:15:86:ed:44:a9:7f:54:89:e7:50:ce:a3:
55:58:79:66:c1:d7:d4:eb:68:70:27:2d:9b:56:0f:
53:f9:c9:1a:a2:34:ed:e2:08:e4:3b:16:76:a1:3b:
30:36:1f:e2:16:c9:70:c8:7d:88:80:bf:24:71:5b:
7c:e1:4e:20:04:7c:44:31:83:4b:dc:ff:2a:6e:e2:
cc:35:73:7c:20:95:c9:27:8d:bf:df:33:bd:89:67:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:04:A1:7C:E1:FF:FA:DD:67:C8:2E:42:05:F0:0D:1E:F9:D7:F5:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ca9f496-b216-31f4-bf16-2cb4bc27ee64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
129.235.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:90:2e:95:66:61:3d:94:fa:94:71:ce:87:58:6f:f2:c8:bd:
7f:51:37:dd:ed:24:5e:e5:45:72:ed:dc:59:7a:55:6f:ba:5e:
17:fe:c3:0e:eb:c9:e3:20:6c:27:f4:de:e7:4d:29:dd:73:2d:
08:e9:27:44:88:78:81:2d:9b:f6:87:9c:08:b3:e5:f0:b7:d0:
56:fd:ae:0b:25:d7:3d:cd:ce:b3:8c:b7:21:c4:48:9d:7e:fd:
89:d2:46:8a:5e:15:10:20:be:0e:04:2f:85:4c:b7:6b:fc:60:
7a:91:78:d8:68:23:1e:3b:18:98:9f:94:de:ea:1a:ca:7d:89:
51:83:5c:80:19:a3:7e:c8:87:63:3f:90:2e:0e:d2:76:6e:71:
57:12:82:ec:ff:47:a7:82:92:be:58:4c:79:db:27:53:fa:3a:
cd:cc:ff:fb:01:9f:5a:75:2e:c0:26:cc:24:11:30:fd:46:ce:
24:60:ea:5a:95:de:da:74:26:7c:0e:a5:dd:42:3a:06:4f:92:
37:2b:dc:cf:ea:3f:25:48:06:02:17:dd:71:64:12:10:0e:9b:
f4:c7:87:e0:40:71:ad:d0:86:3c:74:43:57:43:e4:eb:15:da:
1d:49:72:91:c9:71:30:b4:ee:a5:6b:a2:63:d8:81:21:7d:71:
64:46:d1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:09 2025 by rpki-client