Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38411124-4c0a-3fc7-8d7c-607d47633d77.roa
File: 38411124-4c0a-3fc7-8d7c-607d47633d77.roa (raw, json)
Hash identifier: HE3X7u+oCy7GqM7ZVPc0JIs9x92S0vP4RgnS9dm7YNI=
Subject key identifier: 33:B7:FC:B9:37:60:96:30:CA:97:C3:27:41:A7:41:F5:59:AB:C9:72
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F55A25749E89E72C8EB915780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38411124-4c0a-3fc7-8d7c-607d47633d77.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 99.84.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:55:a2:57:49:e8:9e:72:c8:eb:91:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=d11704bb-767c-4546-a11c-15790301f7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:69:32:4f:13:e5:22:18:21:84:4a:d9:ec:
12:70:30:e6:ea:4e:94:1f:8e:83:72:4a:c0:87:78:
94:81:69:84:fc:c3:ef:c6:44:96:d0:71:b4:fc:fe:
d1:16:49:68:6a:9d:98:0f:60:f0:5f:95:50:8d:3d:
31:1f:9b:3f:36:61:f4:90:8b:5d:c4:85:81:fe:49:
8d:14:2e:01:87:52:98:39:6b:7a:60:59:6f:f9:8e:
3f:43:19:2c:48:e9:be:92:02:d2:f1:2c:45:cf:b2:
1c:0e:3e:60:33:3a:e1:b8:c0:b0:6e:fa:c1:8b:df:
c4:61:ed:84:a8:bd:8f:02:20:c2:c8:8a:3f:31:c9:
22:6b:69:38:5b:27:1e:65:e8:cb:80:6b:93:71:ed:
f8:46:3a:b3:c6:32:68:e1:4e:f7:e7:a7:13:33:7a:
ae:ba:fe:c8:4b:5f:55:08:7b:d2:f4:a1:bd:3f:f5:
77:d6:7d:8f:ae:ea:99:a4:38:e5:5a:df:54:2e:a2:
18:5b:10:f9:09:50:7b:a7:0e:19:53:7e:ad:e6:df:
1f:3e:15:b8:87:0d:47:97:47:27:8a:f7:ad:56:53:
cb:9f:14:11:66:8f:44:7d:f7:01:b8:16:d3:d4:2b:
d5:68:c4:a9:72:92:a8:f6:6f:70:45:0b:d7:01:73:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B7:FC:B9:37:60:96:30:CA:97:C3:27:41:A7:41:F5:59:AB:C9:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38411124-4c0a-3fc7-8d7c-607d47633d77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.84.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:97:bf:88:9a:13:8a:a9:c0:94:c0:05:05:a2:c7:fd:c8:5d:
d8:4c:92:69:36:fb:53:f8:9e:8f:63:29:9b:0d:ee:d9:79:0f:
c2:f5:5f:b2:0f:ff:18:ee:2d:2d:df:28:7c:95:f1:f6:3f:69:
4f:01:8d:75:71:f5:52:15:b1:70:4e:6b:0c:27:e1:0d:0e:e8:
84:31:58:c5:64:f0:31:32:9b:e7:c1:1a:ef:1d:9f:20:5b:ff:
32:df:5a:98:e2:2d:fd:ef:00:78:79:b4:21:66:cf:25:66:b3:
6b:ea:1a:e5:34:6f:58:8a:b5:70:d6:ac:0e:19:d1:12:c6:51:
ac:89:cc:bf:d6:3a:f6:44:37:23:e0:fe:db:33:47:9e:5e:96:
b0:ac:c0:e9:e7:f0:e6:60:5c:d7:ca:fb:54:d9:7c:98:7b:d4:
94:b4:85:d0:d1:8c:9d:60:a4:4c:45:47:d9:d2:61:e8:2c:74:
6c:69:35:05:d3:59:85:41:c1:5c:d8:fb:6b:f5:24:bd:85:ac:
6c:61:ee:04:9c:5e:f9:4a:6a:fb:a0:b3:8a:38:94:a6:c3:dd:
d3:48:81:98:94:e4:ee:32:c3:4e:cd:70:f0:be:c9:b4:b0:81:
e5:36:72:eb:ec:29:36:d8:e2:68:e5:70:fe:bc:a4:a3:d2:37:
92:17:ca:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:28:59 2025 by rpki-client