Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38caa1e8-3f69-3af9-99bc-f19cc7a9ccd2.roa
File: 38caa1e8-3f69-3af9-99bc-f19cc7a9ccd2.roa (raw, json)
Hash identifier: ojc6LQdDxWK0CxQ9Vaji3mnPYnijAih/554GA4Avvlc=
Subject key identifier: 5B:0D:95:F0:87:D3:12:CE:A5:4E:E7:80:8E:04:FE:50:FC:BC:4A:30
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F90517B947F6A52BF327D4BA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38caa1e8-3f69-3af9-99bc-f19cc7a9ccd2.roa
Signing time: Thu 13 Oct 2022 12:00:00 +0000
ROA not before: Thu 13 Oct 2022 12:00:00 +0000
ROA not after: Fri 18 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 138.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:90:51:7b:94:7f:6a:52:bf:32:7d:4b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 13 12:00:00 2022 GMT
Not After : Nov 18 05:00:00 2022 GMT
Subject: CN=b9c01e7d-0d12-4c24-ab13-ba267a04b93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:72:8d:d1:14:7e:b5:4e:a0:e7:a2:d5:43:8e:
ca:e6:9d:ad:eb:01:07:77:9c:d6:c7:d8:ae:a2:8c:
8f:94:85:bc:c1:b1:55:c1:73:a4:ad:75:c3:1f:a2:
91:1b:a5:24:2e:05:1a:c8:82:22:0b:8d:56:4f:89:
df:1a:86:6d:31:72:c3:76:ec:87:bd:07:15:f1:70:
a9:59:36:df:d0:ae:24:ba:cb:bc:15:cf:a3:fc:1f:
3f:ef:dc:25:4c:00:b9:b5:20:a5:77:5f:d5:67:0d:
db:29:c5:fb:2d:73:8d:e1:2c:7d:d1:70:3b:e5:8e:
98:44:24:80:1a:37:b6:93:94:b1:5d:95:0c:d0:80:
f3:c7:81:4b:33:10:b8:65:e6:24:87:56:b8:b5:56:
a5:2e:d7:f6:ae:87:f0:28:9c:7f:1b:9c:1a:5a:d6:
67:7d:4d:a4:40:d6:e3:ec:9c:ff:2b:c8:08:b8:03:
a1:86:08:74:f5:b3:1d:f5:f9:d8:94:ca:ed:47:b8:
a4:ad:93:be:a6:56:67:ba:5c:05:f8:b0:cc:82:85:
47:6c:19:b5:f3:28:28:4f:a9:34:30:c5:d3:b3:01:
e5:00:b7:aa:e8:47:3d:de:cc:fd:b8:2c:fd:10:82:
ae:fb:32:ad:44:34:26:4c:f0:d3:09:32:54:a1:26:
d0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0D:95:F0:87:D3:12:CE:A5:4E:E7:80:8E:04:FE:50:FC:BC:4A:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38caa1e8-3f69-3af9-99bc-f19cc7a9ccd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
138.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:af:02:58:6f:d6:4d:a5:bb:a2:e3:cc:4e:ca:49:b7:da:07:
0f:7b:e2:b0:6a:cb:bb:ce:03:34:de:03:50:e6:e2:5f:6d:6b:
71:fc:93:81:d5:ec:e8:08:48:09:ba:fa:96:14:ad:9a:da:6c:
0e:c2:86:dc:89:b6:65:04:fb:c0:72:f0:8f:99:a4:ad:d7:76:
7f:8c:0f:dc:5d:5c:fb:71:c1:e8:ee:bc:f4:58:b7:39:4b:1c:
96:c0:b1:e1:43:2b:86:58:3e:b1:42:71:35:17:d0:2d:69:a4:
76:64:ed:55:1f:93:03:73:97:60:e1:c7:f6:a4:54:e0:6f:66:
31:b4:c1:7c:fd:07:74:99:41:ce:34:15:bd:db:32:96:03:f8:
88:16:55:0f:7e:cf:6c:5c:fc:b7:dc:2d:20:b6:97:30:58:93:
cd:6f:e9:db:60:98:53:87:ec:04:82:f7:f0:6a:94:f2:58:e1:
91:9f:67:11:12:7f:97:77:f8:f6:06:05:aa:c0:e8:00:49:fc:
d0:24:39:0e:ee:9d:c4:e1:c2:fc:dd:80:66:37:c2:0d:be:49:
28:67:44:ab:d8:49:62:02:1d:db:74:e7:c1:45:c5:9a:41:a1:
f7:93:cb:69:b0:97:bf:44:0e:9b:c2:72:18:b5:55:eb:58:1b:
fb:af:2b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:18 2025 by rpki-client