Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34e2834f-53bc-339b-89c8-fb1f40b007ba.roa
File: 34e2834f-53bc-339b-89c8-fb1f40b007ba.roa (raw, json)
Hash identifier: 1oQZlqBizbqFC4PtlY8jjmfgX0TlzwfG7f8exueD9Gk=
Subject key identifier: 88:37:6D:AA:0C:DB:D5:5F:8E:CD:F5:B5:84:D2:61:80:63:AB:C2:20
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840BC9AC74B432804DFFF979360
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34e2834f-53bc-339b-89c8-fb1f40b007ba.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 99.87.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bc:9a:c7:4b:43:28:04:df:ff:97:93:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=a38d987d-4a75-4aef-98fe-feb75ff1021e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:00:b1:c4:4c:7b:8c:fb:b1:2e:03:5a:4f:b3:
5c:ff:9f:5c:e3:e0:a1:9f:57:09:39:c6:6f:82:74:
66:e3:11:9f:ed:ba:5f:1c:0b:a8:a7:f4:6e:91:37:
61:6b:fb:7c:5c:5e:91:d0:bc:ca:3a:3d:9f:ff:c4:
2c:74:f9:85:6c:e7:46:e1:07:f5:8b:27:91:4b:56:
5d:b6:89:49:de:75:8f:c8:76:ba:c0:fc:fa:6e:6b:
b1:4c:d4:dd:6e:85:c9:ea:8d:16:cf:f4:84:0b:b1:
0a:a2:0f:3a:ac:23:cc:b9:6b:73:08:c3:0d:45:ee:
46:12:68:f0:aa:e8:b8:86:90:98:94:7a:fe:39:fb:
79:c6:12:3e:9a:06:cf:b9:c2:54:ae:5e:49:c6:44:
b6:2f:d5:ce:10:fc:09:11:da:02:e2:a1:82:07:31:
4c:d8:6d:71:ba:71:ce:94:64:d2:3e:e2:9c:2d:38:
58:bf:d3:a0:18:00:62:6a:b7:aa:5c:8c:51:86:8b:
dd:ce:75:8b:79:c8:9f:5c:73:11:83:8b:57:84:0c:
ec:b5:e3:90:61:44:06:a3:4e:22:50:f7:b4:9c:8c:
c5:99:45:b4:56:92:89:d8:40:cf:de:0c:ff:65:0e:
e9:b3:a4:ca:ed:f4:1a:0d:b6:ae:ca:e6:f5:32:78:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:37:6D:AA:0C:DB:D5:5F:8E:CD:F5:B5:84:D2:61:80:63:AB:C2:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34e2834f-53bc-339b-89c8-fb1f40b007ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.87.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:76:44:8d:93:11:ca:c1:ef:9a:27:43:d9:79:8b:28:e3:87:
b5:4b:b6:fd:e3:30:7a:c8:ea:4e:d3:63:60:56:f4:d5:51:3b:
15:07:cf:9a:fc:bc:a7:3b:30:ee:93:b1:e4:ab:3d:dc:40:74:
9f:39:8b:e6:11:8f:12:9e:ef:b4:43:3a:6a:03:30:d4:a4:6f:
a6:71:c3:30:ae:18:b4:da:3d:fb:9f:cd:f9:4b:3c:6d:41:b2:
30:3d:2d:eb:95:80:a3:d2:67:9a:5f:93:b0:51:6a:29:5a:25:
71:82:d3:10:24:ac:73:ef:37:52:3b:04:cf:98:f8:1a:e3:ec:
15:ed:20:e0:09:27:ef:e2:ab:d1:2d:87:43:ae:62:4d:67:a1:
62:43:4c:73:5a:e4:f5:be:26:cb:8b:56:db:7e:e0:42:48:1e:
a0:43:12:c4:8c:c4:8f:80:dd:0b:d0:dc:d7:f6:29:c7:51:ca:
7e:52:ec:eb:65:5a:fe:58:6a:e1:51:28:e6:08:02:59:e6:55:
a4:75:4e:a2:ea:49:59:ff:58:ea:36:73:5b:f6:b9:3a:94:a2:
dd:26:d8:56:91:ed:4a:c2:67:21:ef:97:8d:8d:a3:11:09:69:
f6:99:49:69:28:6f:94:d8:87:6b:bd:80:0f:47:d5:42:9f:5d:
86:b7:92:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:50 2025 by rpki-client