Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c7a8dc6-3154-3058-8851-635ffb0dfda8.roa
File: 3c7a8dc6-3154-3058-8851-635ffb0dfda8.roa (raw, json)
Hash identifier: EsFHYdRXYVaG2jHmg7bTUpzYknz/GUJE7aKTkP7uHSc=
Subject key identifier: 4E:4F:A0:26:4C:20:28:54:E8:27:23:8C:10:5F:79:B2:2D:24:D2:69
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402A1107FAAB9AF4FEEF3D1500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c7a8dc6-3154-3058-8851-635ffb0dfda8.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 148.99.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2a:11:07:fa:ab:9a:f4:fe:ef:3d:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=c74e6ff7-82f7-481d-b0c5-a28f5de166fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:55:7a:52:ed:e0:89:30:02:5d:4b:3a:ba:
bf:2b:f3:c4:53:80:4e:45:89:84:53:86:15:89:a8:
68:50:be:7d:e6:e3:56:7a:7c:7c:2f:0a:ed:b3:4e:
f1:73:85:5c:4e:6b:5b:5d:a8:50:bf:41:15:3a:a8:
fa:16:4e:97:55:1a:e7:b2:22:8d:7a:9b:d1:62:f9:
73:c0:83:b1:0a:b0:86:be:1f:91:10:1b:30:1d:df:
b5:39:fe:e7:e1:b8:52:16:4b:7f:d3:39:fb:c8:e7:
96:52:49:8e:34:31:6f:70:0e:17:9f:bd:34:b6:be:
5c:9f:cc:56:36:24:fc:de:84:79:3e:e4:64:bf:5c:
61:92:4f:40:45:5d:41:4e:3f:87:dd:d4:31:49:21:
c4:10:3a:68:33:02:4c:b4:aa:2b:3b:66:fa:c0:65:
29:39:fc:ed:aa:3b:a6:95:12:22:6c:e3:5c:da:70:
71:42:d4:23:d4:f5:4d:27:1c:b4:58:40:64:59:ee:
18:f6:7a:1d:b6:44:ac:4c:7f:23:60:f1:c6:f9:e0:
b0:f1:d6:65:16:16:63:61:e4:11:43:54:5e:be:f9:
19:e3:09:b4:23:23:fd:c3:16:88:e6:2b:cd:be:44:
38:52:64:3e:fa:e3:90:d7:e9:4f:f9:26:10:b4:ac:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4F:A0:26:4C:20:28:54:E8:27:23:8C:10:5F:79:B2:2D:24:D2:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c7a8dc6-3154-3058-8851-635ffb0dfda8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
148.99.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:a3:24:38:f6:a7:62:0d:74:a1:68:2b:9d:e5:b7:81:1f:e1:
43:30:b5:fe:8d:47:61:cd:38:95:2b:70:b0:af:ec:ba:c4:b6:
66:b1:df:58:b9:47:b3:01:26:a9:ad:a1:64:ba:68:3e:f8:5f:
91:54:c3:20:f6:17:0b:0e:ff:8c:18:cc:21:fb:a8:06:dc:be:
4c:6f:27:3a:97:95:fe:57:7c:81:fe:0b:be:e8:db:b9:37:72:
7f:11:ab:c8:c1:41:8b:20:7b:43:bd:52:cd:35:de:30:b4:a3:
35:f4:fa:f4:b7:5f:fc:34:8d:ee:3d:46:a2:79:84:c9:c3:ba:
a7:06:e9:d8:4b:72:e8:cf:ec:01:6f:04:3b:29:e3:b3:82:ab:
08:3e:34:f1:14:a8:9f:05:93:6b:7f:55:5c:cb:fe:88:e5:29:
8d:63:03:05:bc:19:90:92:02:37:b1:0d:ad:20:76:5a:49:ce:
67:d6:a7:53:0a:0f:e7:15:d8:ce:10:02:de:ee:d6:6b:88:ef:
0f:20:d4:33:93:37:ba:09:54:1d:d6:12:5c:e8:b9:db:6e:4b:
b1:2a:97:41:58:da:b3:50:85:ed:a4:d9:45:f2:a5:8a:53:16:
39:38:3b:84:25:a7:7d:87:20:a0:53:55:21:70:48:4b:c6:4c:
5c:c4:c5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:14 2025 by rpki-client