Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34f0d9c2-dfd1-3de4-8c8f-8b9b435c3c61.roa
File: 34f0d9c2-dfd1-3de4-8c8f-8b9b435c3c61.roa (raw, json)
Hash identifier: EJlLXejrQ1OjwFnc0K4Qmez6Ukn9pdUGuPm6F7onQ60=
Subject key identifier: 85:6C:D0:55:5A:52:FE:C9:EB:16:8E:91:C9:93:EC:CA:C8:53:0A:77
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840388C9F8BEB9833EF7FF7D640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34f0d9c2-dfd1-3de4-8c8f-8b9b435c3c61.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 98.131.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:38:8c:9f:8b:eb:98:33:ef:7f:f7:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=d03dbee7-5c9a-449a-a4d0-7aa6606199e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:8f:28:c1:3a:08:9d:31:f2:de:4c:01:82:
2d:b3:22:81:e8:ee:e5:9f:63:99:1f:cd:37:97:7c:
dc:24:84:d3:2a:3e:af:06:6e:47:71:07:93:cf:4c:
af:89:83:11:91:f8:29:b8:56:3c:78:f7:22:f1:bb:
07:88:0a:d2:c2:54:2e:85:02:86:00:72:fd:cd:67:
8e:7b:0f:fa:58:6c:89:b9:fd:b6:78:a3:03:89:24:
fa:30:36:b4:99:18:ea:02:4f:e6:58:ec:6e:01:bc:
91:32:2d:8d:bb:51:ed:fb:b5:c3:66:b9:e2:f3:8d:
2a:74:af:87:bd:06:64:75:bc:c0:09:a7:13:ad:9c:
27:f9:3b:fa:1b:4c:0f:e5:8f:45:e8:94:1c:c6:d1:
69:e6:d4:60:e0:53:5e:4a:8a:3b:41:a1:44:b7:33:
f9:f8:51:77:61:6e:d3:b7:18:ac:8e:1a:6e:e3:b4:
c5:92:60:b6:8a:bb:e3:8e:39:14:3f:c5:58:91:ad:
96:9e:26:98:3c:30:69:da:85:57:3f:24:39:ea:af:
70:e1:5e:4e:47:91:f3:d4:fe:60:ba:88:f4:17:bb:
ea:bc:93:b1:e9:a7:4f:55:e1:1b:02:eb:06:96:58:
d3:15:2c:6e:50:0f:8a:68:0a:57:61:68:96:b8:3b:
76:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6C:D0:55:5A:52:FE:C9:EB:16:8E:91:C9:93:EC:CA:C8:53:0A:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34f0d9c2-dfd1-3de4-8c8f-8b9b435c3c61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
98.131.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:bd:33:06:4f:3b:fe:72:74:c4:5c:57:2c:be:9a:ce:55:82:
61:9c:17:9f:4c:35:f5:a3:2a:e0:3f:4d:8a:fc:c5:09:01:ad:
f2:8e:9e:ca:90:89:3b:67:da:40:83:bc:a8:ec:0d:a8:23:db:
d2:02:49:d8:d1:31:cb:24:6d:9b:9d:7f:da:97:f5:a1:aa:d5:
58:b2:83:68:6b:06:e0:5b:4a:95:a1:22:79:23:86:3e:12:01:
8f:fd:8a:db:6f:cd:d0:7a:18:79:e6:73:63:5a:83:b3:8f:e0:
15:98:2e:92:b1:59:98:f4:ee:08:b4:20:e1:ae:40:15:8f:95:
0b:a4:ad:41:17:91:76:e7:65:03:83:6f:42:d0:ab:0d:a1:c1:
f2:a6:14:16:2a:2a:e9:d3:cd:59:99:74:46:af:39:e8:b5:88:
54:29:0b:7a:79:ce:3c:5c:89:25:36:c1:a3:71:e8:d1:94:03:
e4:39:3a:04:93:71:b0:38:82:96:60:66:43:8d:3f:8c:a2:d3:
4c:fc:2e:67:58:1d:b1:0f:c0:6f:ef:cd:fa:00:45:5e:1f:dc:
ed:81:5c:93:93:91:29:ed:72:2a:3b:cf:e6:13:0b:07:4a:85:
24:98:c1:48:2f:57:09:b7:fa:65:ce:8f:43:d7:01:63:61:b2:
74:b9:2e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:46 2025 by rpki-client