Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3913cd32-e754-3ce9-8334-e47a80148ae3.roa
File: 3913cd32-e754-3ce9-8334-e47a80148ae3.roa (raw, json)
Hash identifier: 0LBJobuLsig9BIPWBbW+AQ2WyKAPC1X2sgqgSLQ/St4=
Subject key identifier: D8:CA:44:BC:F5:A5:E9:58:C2:DA:9C:42:E4:AE:1A:50:1A:60:9A:BA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DA860344D222C0309E9CB1D10
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3913cd32-e754-3ce9-8334-e47a80148ae3.roa
Signing time: Thu 21 Apr 2022 12:00:00 +0000
ROA not before: Thu 21 Apr 2022 12:00:00 +0000
ROA not after: Fri 27 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 99.10.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a8:60:34:4d:22:2c:03:09:e9:cb:1d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 21 12:00:00 2022 GMT
Not After : May 27 04:00:00 2022 GMT
Subject: CN=5accd956-c35a-4599-bd75-827cef4b99fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:8c:82:8d:05:d1:59:7a:b7:ed:78:d7:c1:
e7:48:fc:93:57:5b:30:a3:e7:de:9b:3c:0e:c2:b0:
17:e8:71:23:1d:b1:df:5e:43:69:73:5c:95:e7:9e:
ec:ee:d8:78:d5:74:1f:a6:98:8d:ea:5e:3c:ab:24:
09:5c:58:8c:cd:80:89:24:88:b0:d4:9c:f2:02:23:
62:99:00:2d:21:88:45:2e:de:44:4f:fa:cf:40:dd:
65:95:5a:b2:66:e3:bc:1f:64:de:67:1a:59:13:93:
78:58:43:94:24:d3:ed:f1:6d:5f:99:df:b2:87:02:
60:50:79:89:d2:b9:af:23:b2:9f:67:18:e6:19:c2:
64:ff:fd:56:6d:fd:ac:0a:e8:8d:06:dc:61:c6:d3:
be:6b:34:e4:4a:79:59:ee:bd:93:91:3b:02:b3:7d:
0a:51:10:a6:f7:f9:42:a3:24:a6:78:14:90:dd:fc:
ec:13:4a:f0:9d:69:a2:0b:bf:71:93:f7:0e:5d:80:
9b:df:89:d8:84:55:0b:bd:54:2c:2a:0d:02:d8:e9:
d0:81:d5:35:13:c6:23:3a:b7:75:df:8f:37:07:50:
82:02:70:ff:b9:48:30:20:7b:27:39:8a:93:55:fa:
59:bb:f4:86:2e:34:72:33:a1:df:30:d9:6f:e1:25:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CA:44:BC:F5:A5:E9:58:C2:DA:9C:42:E4:AE:1A:50:1A:60:9A:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3913cd32-e754-3ce9-8334-e47a80148ae3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.10.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:48:42:61:7e:f9:01:ad:f9:fa:e3:01:fa:44:bc:85:71:96:
ac:f3:d5:0d:07:70:cc:a6:7f:1e:fe:b3:54:8a:b5:ef:89:01:
78:98:0c:68:cc:7a:bb:0b:c7:64:7b:88:24:d7:1f:6f:64:40:
00:13:3e:25:ba:b9:62:bc:03:9f:58:13:e0:c7:2a:0d:5d:8b:
4b:e1:e7:17:b4:45:75:bc:db:fe:12:f0:c4:0e:9b:98:50:30:
b1:4d:25:3d:34:3d:f2:94:1b:7a:e7:83:98:64:33:eb:b1:17:
a6:90:c7:c8:df:f7:39:d0:3f:92:2f:14:ff:ec:87:a1:bb:74:
4a:55:df:92:c4:cc:97:cd:b6:6f:55:e9:83:ff:d4:d3:0a:b3:
8b:8f:13:6a:71:41:a6:e6:45:f9:02:42:a5:12:de:77:4c:9f:
a3:bc:f0:9f:17:90:83:a4:00:7b:ce:e4:cd:43:57:4d:61:3a:
39:d7:b0:f2:6d:a3:a7:b6:c2:ea:76:34:29:51:8d:6d:3c:99:
57:ad:80:99:07:fb:c6:42:db:04:e3:73:f8:bc:95:85:2c:32:
3d:43:75:f1:3a:21:d9:21:cf:81:f3:df:37:1a:67:33:94:32:
0b:cf:54:d1:a4:a9:36:8a:e1:d6:80:ff:0d:d7:56:af:0b:d7:
56:81:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:19 2025 by rpki-client