Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2cbdafba-c046-30ed-b48f-3eb240c61e97.roa
File: 2cbdafba-c046-30ed-b48f-3eb240c61e97.roa (raw, json)
Hash identifier: UD+vB6N3Zp0UGt+121iklP6+xIBJRR0eKKYRRPXGNbM=
Subject key identifier: D0:3D:9E:BB:F7:EF:47:EA:20:B5:EF:E6:2E:8F:DC:07:6C:58:F7:73
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD1C72E2E6F55D44D6625EBC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2cbdafba-c046-30ed-b48f-3eb240c61e97.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d1:c7:2e:2e:6f:55:d4:4d:66:25:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=49ce4bb9-629d-4285-936e-0985699b5fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:03:ed:a5:ac:e8:c4:64:4a:15:0a:b5:8d:
11:40:94:44:cf:ee:77:00:4a:b8:4b:86:05:e0:96:
14:05:24:e7:6e:f9:ba:75:79:0e:62:1a:72:a5:67:
7e:82:fb:24:a4:45:6e:17:a5:dd:10:90:bd:93:9d:
76:4d:f6:2c:eb:3d:95:2d:ed:c9:87:75:0c:d1:7e:
5e:89:48:05:ef:6a:9e:f5:06:47:c5:a6:7b:2f:85:
ce:b1:0a:f0:09:4c:b9:18:69:f8:54:8d:c3:52:b1:
a2:a8:7a:56:f9:bb:44:41:3a:cb:6e:63:7d:80:79:
f7:13:96:6a:b5:e7:34:e6:43:d3:06:1a:3e:a3:3b:
b9:40:ae:24:9b:af:fe:8b:98:23:4c:25:03:0e:eb:
6d:e8:78:ea:bc:1b:55:c2:d9:5c:b6:78:ba:3f:7b:
0e:37:dc:c8:4a:4f:e8:13:71:aa:46:56:0a:0a:24:
83:6f:32:3f:08:30:90:9e:86:0f:c9:f1:4c:a4:f4:
de:70:65:ee:78:1b:0a:35:07:a6:b2:c6:a4:1e:e8:
40:13:5d:e1:e0:63:5f:17:13:f3:97:0a:21:d8:37:
fc:b0:76:c8:34:c9:79:51:fd:44:36:45:5a:42:e4:
12:82:9c:0e:40:1e:6f:a6:e0:1f:00:b3:5a:b3:94:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:9E:BB:F7:EF:47:EA:20:B5:EF:E6:2E:8F:DC:07:6C:58:F7:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2cbdafba-c046-30ed-b48f-3eb240c61e97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:c9:d4:ea:86:2e:3e:18:e1:8a:d6:ad:81:28:04:bc:2c:3b:
56:8f:e1:1c:fd:ae:bf:a8:24:03:ca:3a:af:d5:cb:e9:f1:7a:
de:06:c4:76:bf:66:42:f1:4e:55:9d:11:c4:f8:d1:32:00:06:
6d:aa:1d:c9:ff:72:65:1d:17:1c:79:7d:a9:db:e7:03:9c:d0:
31:5f:78:19:9d:86:8a:af:70:a3:65:89:99:ba:31:be:71:a5:
5d:b4:2b:a4:17:d5:d6:aa:ec:3b:fa:b6:5f:b2:75:51:a8:23:
67:78:f3:94:92:b7:e3:b7:b3:5e:12:3f:77:cd:52:ba:60:66:
64:48:21:19:9b:db:b3:5a:b4:26:9d:c8:fc:03:03:45:04:fc:
9d:ca:9d:57:65:9b:76:33:a0:94:7a:fe:72:12:ea:52:b5:bd:
96:80:cb:1b:32:aa:3f:5a:be:04:06:be:03:b4:10:51:fb:09:
f9:69:26:0b:bb:ed:28:8e:2b:1d:39:c1:b9:8d:b2:d6:eb:85:
52:b8:f7:6e:f1:be:71:ab:42:32:fd:0c:6c:bb:16:18:00:01:
2f:de:0e:c0:cd:b0:b1:9a:77:97:77:0d:b7:e5:2d:a6:49:70:
5d:ed:ad:ac:1c:5a:cf:2e:23:f2:a9:b3:79:f6:4f:e9:6b:7a:
64:72:68:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:57 2025 by rpki-client