Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39c17ed9-76f6-30a0-a791-5a394472efdd.roa
File: 39c17ed9-76f6-30a0-a791-5a394472efdd.roa (raw, json)
Hash identifier: eNthpZJ9EdECE/D5mtXEwZ8OIOvBFAGND4iG5IxCeFk=
Subject key identifier: D9:EE:4A:C8:91:BB:6D:67:6E:6A:45:B4:BF:A4:33:3D:E2:C0:A5:B1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401CCE6DBA7EC6D2205CC95940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39c17ed9-76f6-30a0-a791-5a394472efdd.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 198.200.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:ce:6d:ba:7e:c6:d2:20:5c:c9:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=e4c9a77d-949f-4317-a1d9-d1faa82ab7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:e9:e2:e2:9d:46:16:74:84:cf:cf:8c:a3:
cc:aa:b6:71:94:91:7e:29:c5:af:2a:72:f1:bf:4d:
dc:3b:2d:c1:cf:b6:1f:a0:91:81:d9:96:61:91:0d:
41:f0:17:ec:09:71:58:3f:07:f1:89:fb:f8:e5:2d:
90:73:64:e0:86:05:5f:ad:d6:60:2b:a1:93:96:0a:
60:73:09:4b:b4:19:55:87:1a:d3:b0:13:d2:2b:02:
de:8b:02:70:c8:fb:c1:8c:c2:e8:53:9a:78:13:8d:
90:d5:03:1a:29:4d:1c:a6:b7:73:4e:2c:1e:1c:be:
83:b0:59:5e:7d:d3:12:7a:f8:fb:97:10:80:bb:57:
a1:ff:53:19:48:ec:51:ae:f3:e7:9b:56:31:0a:ff:
a9:1e:44:43:55:84:2f:79:80:45:aa:8c:b6:c9:0b:
0b:ba:14:6e:69:4d:98:19:7d:26:b6:cc:44:b3:c7:
9f:4e:40:8c:b4:20:00:3d:c0:32:b3:6f:2d:5d:b1:
a3:f5:d4:30:8e:63:a0:7d:85:8f:d0:82:b8:c7:3f:
44:a6:04:32:1f:60:eb:56:50:4f:09:8a:32:01:9f:
59:b9:78:5a:4c:b3:31:68:96:33:2e:99:ed:f9:47:
57:73:87:b6:e6:2d:69:41:a0:0f:d6:70:c3:d8:dc:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EE:4A:C8:91:BB:6D:67:6E:6A:45:B4:BF:A4:33:3D:E2:C0:A5:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39c17ed9-76f6-30a0-a791-5a394472efdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.200.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:18:74:8c:a2:df:63:18:47:a5:2b:da:a2:e2:39:0a:13:e1:
f7:ac:5d:93:ec:91:0d:73:e9:c5:d6:d6:57:ad:0d:15:ab:0a:
72:d7:2a:a7:d5:b8:18:4a:dd:27:11:4c:dc:57:1f:d9:b8:4c:
2e:f0:15:8a:e6:f3:b0:98:f1:73:92:8a:f6:82:97:bd:e8:0e:
bb:c6:62:37:87:2f:6e:2a:65:99:40:95:19:da:05:9b:95:68:
dc:37:ff:0f:7c:27:d8:32:b7:08:b7:d3:00:55:a3:87:cc:13:
40:ae:5e:18:44:d5:c1:00:45:e7:9d:50:3a:8b:5b:3c:44:75:
97:6d:bf:84:84:20:e7:89:8e:e1:c2:ac:b0:31:87:4f:33:16:
9c:58:d4:d3:1b:cb:91:2c:65:22:ae:6a:2c:77:c5:bc:c8:ac:
61:16:24:02:b7:04:bb:ba:96:07:e4:ef:06:d0:32:24:ea:12:
07:b7:af:3e:4c:79:d3:f5:a5:c1:d4:d9:25:32:17:11:4e:bf:
e7:77:6b:29:9a:52:f0:a5:79:bc:e2:ca:db:a4:10:6d:37:86:
df:dc:d3:d7:e1:57:7f:2d:8d:8e:b1:dd:bc:8b:07:ea:71:d7:
39:0b:f9:ea:de:b4:7c:51:c1:38:25:fd:a2:19:1f:d9:a3:c1:
4c:dd:dd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:28 2025 by rpki-client