Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33f728c2-587a-3fa7-80a6-c9d97a27bb5d.roa
File: 33f728c2-587a-3fa7-80a6-c9d97a27bb5d.roa (raw, json)
Hash identifier: j1TDgjwvs0ptQKwWI2kQaRbXYCxkTi1f+P7GfZtqfC8=
Subject key identifier: A3:35:F6:FE:D3:A1:15:34:12:BE:4B:47:A8:0A:A0:94:B1:FE:7C:C3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC589247620293F749F163F40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33f728c2-587a-3fa7-80a6-c9d97a27bb5d.roa
Signing time: Tue 01 Nov 2022 12:00:00 +0000
ROA not before: Tue 01 Nov 2022 12:00:00 +0000
ROA not after: Wed 07 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 129.235.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c5:89:24:76:20:29:3f:74:9f:16:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 1 12:00:00 2022 GMT
Not After : Dec 7 05:00:00 2022 GMT
Subject: CN=db28edfd-ac92-4c59-9ef0-3b16c5d99afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:1d:50:8e:62:cc:00:dc:3f:52:94:ac:f7:
4e:26:f3:22:65:44:17:05:98:f5:c3:33:4a:76:9a:
a6:ed:78:ce:e2:bb:fc:ca:88:84:28:69:83:2a:cb:
eb:79:d5:a5:7b:b5:42:de:4c:b7:e6:58:3e:55:1f:
67:5a:9b:3d:c4:f9:b0:06:aa:cb:71:22:4b:93:89:
9d:24:12:85:66:8e:66:21:76:b6:17:00:dc:f5:13:
26:ac:af:38:a7:06:87:38:2c:77:0f:96:37:0f:a1:
86:a5:0b:1e:95:f7:44:54:33:9e:b4:f7:aa:c2:2c:
c9:ac:bd:4b:2e:56:76:ab:21:90:a2:52:e5:bb:d0:
36:26:b0:12:d1:8f:7c:8b:8e:b6:f4:1a:6b:70:5f:
e2:c4:12:d1:f0:73:87:01:c0:17:45:3e:4b:c7:7c:
28:85:08:84:9e:52:01:53:59:13:33:83:94:24:13:
96:09:ad:ed:bc:5f:dc:7f:77:e3:a3:d7:b7:eb:fa:
1a:a3:f1:d5:04:b7:81:62:02:80:52:b5:8c:a1:1c:
cf:c1:32:82:6f:bc:66:92:55:ba:fc:17:94:19:c9:
63:cf:a5:55:5a:54:f4:65:2d:99:22:aa:2d:c1:27:
84:22:26:4a:49:19:ca:bb:76:d8:88:38:40:e4:24:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:35:F6:FE:D3:A1:15:34:12:BE:4B:47:A8:0A:A0:94:B1:FE:7C:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33f728c2-587a-3fa7-80a6-c9d97a27bb5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
129.235.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:1b:cd:43:3b:bc:f7:19:aa:14:4e:09:5d:13:03:c8:d7:c8:
c4:c5:2e:ed:ec:79:f0:f4:ba:75:13:ad:cb:50:bd:5e:af:41:
d0:83:af:d1:96:34:09:fd:43:61:4a:0b:30:34:5d:5e:38:f2:
5b:cd:66:9f:89:20:ef:01:d8:77:90:4f:58:65:af:e0:0c:9e:
e4:e4:a8:75:71:e2:d7:49:f5:3d:01:f9:40:e6:5b:d1:ef:c7:
ab:2d:26:bc:01:41:f9:20:21:3f:35:99:c1:d4:0e:8e:da:b5:
40:ad:74:e7:07:e6:bc:f2:83:57:59:56:1c:be:f0:68:e2:d5:
31:6c:db:cc:d1:d4:e8:55:a2:31:54:bb:5b:e4:77:2e:3c:9c:
a7:da:f7:71:35:a0:e4:3d:df:7c:1f:2b:ab:43:e4:30:83:64:
54:90:7e:b3:9e:67:64:9d:68:4b:aa:74:ed:6b:d1:33:78:45:
d7:b6:21:85:6d:88:1f:38:fb:35:3f:34:cd:61:17:4c:0b:02:
f2:70:6c:32:d0:50:53:5b:41:4d:00:4f:7e:d0:9e:df:07:7f:
b3:ee:86:da:cd:ba:2b:81:c8:f2:9e:38:4b:48:aa:25:a0:78:
10:b1:a8:44:ff:93:84:a6:40:30:a6:63:c6:3b:e7:05:62:71:
ae:97:4a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:10 2025 by rpki-client