Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2cafc9be-8e52-36bc-9281-ecc91b2ea868.roa
File: 2cafc9be-8e52-36bc-9281-ecc91b2ea868.roa (raw, json)
Hash identifier: UkQbW9qtH539rESzuS/nmodkSK3ML3iWTZv1Avq9r1M=
Subject key identifier: EE:96:C2:D4:50:98:E1:8C:16:EA:A1:F7:04:16:64:39:13:22:A2:6C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DB4D2457BABB5CBADED449F40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2cafc9be-8e52-36bc-9281-ecc91b2ea868.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 31 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 198.14.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:d2:45:7b:ab:b5:cb:ad:ed:44:9f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : May 31 04:00:00 2022 GMT
Subject: CN=05ef4537-4e79-45ad-a19b-1cdfc513e030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:88:7a:cb:87:38:eb:d4:1b:a9:03:e3:65:aa:
77:97:cb:e2:78:1d:d2:88:62:0a:bd:4f:50:23:da:
e7:f8:3c:69:27:af:b0:7b:0b:88:1c:8f:77:28:47:
7d:d9:cc:d3:84:6e:56:7b:d7:a2:43:20:d2:58:06:
74:b2:23:82:51:f5:f5:ce:04:a9:02:dd:c2:c0:db:
fd:9c:4b:3f:78:5d:6e:e8:5d:9f:35:d1:89:ac:6b:
b1:ba:2a:fc:9e:b5:75:72:a3:b9:2e:49:ca:d6:c6:
7a:db:77:f8:18:ed:bf:b3:5a:2a:cf:5b:07:20:9a:
ff:f2:20:db:94:21:b5:3b:5e:a9:bb:fa:2f:35:bd:
ea:c1:94:49:41:b7:73:f8:de:c1:eb:f0:bc:26:69:
fc:ad:cd:10:d7:e5:4d:77:90:cc:5f:65:e4:79:f0:
11:80:91:2d:7f:d0:93:5f:fa:f9:fb:eb:b8:83:35:
16:d3:e6:4a:4d:d1:f1:cd:42:b7:78:4e:ad:28:4b:
9d:e5:45:b0:ef:05:6d:af:4f:45:ae:57:13:4e:7a:
c4:a7:4c:f5:9e:91:57:95:2d:fc:33:07:c9:ac:73:
6d:5b:f2:0d:65:26:a1:a6:ef:bc:a2:42:85:a3:3e:
69:58:57:04:d1:e0:6e:9b:ee:77:10:06:d0:5f:5e:
69:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:96:C2:D4:50:98:E1:8C:16:EA:A1:F7:04:16:64:39:13:22:A2:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2cafc9be-8e52-36bc-9281-ecc91b2ea868.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.14.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:3f:ba:26:f4:3b:bf:0d:10:93:b0:49:ad:ae:0f:f2:c6:61:
4f:46:dd:5b:fa:90:80:a4:6c:9c:b1:5f:ea:7a:9f:ce:08:43:
e1:af:a5:a6:2a:40:9a:ed:c0:9f:35:00:58:6f:da:32:81:94:
eb:a2:bc:13:8b:9c:1c:4f:eb:b6:f5:3d:85:ee:34:40:4f:66:
2d:b5:aa:91:be:5c:e4:5a:a9:ce:0a:32:91:4f:98:18:5a:9d:
bf:45:f4:f5:dd:4d:69:ce:cc:32:05:05:e7:ae:4c:b9:13:bc:
ac:f9:eb:cd:70:8e:ab:a5:d6:90:ab:81:cf:6a:7a:dc:86:32:
a6:1c:e9:0a:a1:cc:81:25:f6:b4:99:b5:7f:17:e1:eb:8d:19:
6d:af:c1:1a:00:ce:ba:65:c9:fb:50:e7:90:41:af:17:14:3b:
fc:4b:45:4a:90:16:b6:70:2d:67:df:2b:3e:12:3c:49:f7:3c:
03:60:9d:1f:4e:78:49:22:bc:38:8f:81:11:66:48:b2:72:a9:
c7:b1:a0:f2:47:c4:36:51:0a:2e:72:a6:45:8d:05:ad:d1:a3:
81:27:ec:a9:c4:51:b1:ea:a4:aa:8b:ca:64:4a:45:9d:98:cf:
f2:a4:c4:55:3e:87:0d:ca:b2:04:72:b9:c6:51:ad:d6:8a:38:
b8:0b:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:35:59 2025 by rpki-client