Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d29c2c7-3de1-3480-b9a7-80607c8d12d5.roa
File: 3d29c2c7-3de1-3480-b9a7-80607c8d12d5.roa (raw, json)
Hash identifier: WFgANb9ZOVKyQ0cjX7kvEjB84+iITKZX+OtHk9+YIDs=
Subject key identifier: B7:75:25:1E:94:66:C8:6F:D9:EF:A3:70:02:58:13:25:85:9A:93:2B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F5944A6520E4711D74F43CF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d29c2c7-3de1-3480-b9a7-80607c8d12d5.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 198.200.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:59:44:a6:52:0e:47:11:d7:4f:43:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=6d808006-65a5-477e-9b8f-9857f268ad6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:23:12:0c:56:61:a4:51:8e:c6:52:3c:ad:
c7:de:b7:9e:7d:33:6d:77:a0:63:15:fb:1f:9d:fd:
d5:33:a9:03:96:8f:1c:26:e2:0e:32:f6:cc:5c:e9:
8a:8f:33:ef:0b:60:c3:97:d2:89:23:9f:56:60:28:
19:59:e0:70:a8:63:82:1e:56:8e:ce:24:29:b2:86:
0b:77:73:b1:72:dd:9f:53:cb:60:45:bc:43:40:4b:
e0:31:e5:22:99:ea:67:94:2b:e1:2b:5d:9b:b3:c6:
6c:54:84:c0:ed:90:31:0a:ac:2c:c5:7c:00:72:ba:
d6:eb:8a:94:c8:46:16:8c:1a:af:41:a4:a9:23:b4:
a8:9b:29:97:3d:c1:b2:95:b3:69:59:66:3a:53:4b:
98:15:bf:57:e7:02:86:fe:7f:09:df:db:01:62:5f:
b6:34:5c:c8:d4:4f:23:50:ef:08:5c:94:99:4f:09:
b8:2a:7e:3f:de:03:38:31:ce:e1:95:6f:b3:a9:5c:
55:b1:81:9b:c3:64:2d:e0:75:c9:60:8b:93:7f:6c:
1d:01:45:35:dc:bd:8f:89:0b:f5:dd:55:ad:55:d0:
26:15:81:70:cc:0b:e2:fa:0f:f5:53:2f:19:92:71:
1e:a2:52:92:eb:ae:53:6d:35:c9:56:cd:75:4c:ed:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:75:25:1E:94:66:C8:6F:D9:EF:A3:70:02:58:13:25:85:9A:93:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d29c2c7-3de1-3480-b9a7-80607c8d12d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.200.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:77:fe:bf:4e:93:74:47:35:4e:47:96:6d:1c:fc:a0:86:e2:
fb:0f:57:e2:32:6b:ed:c8:32:21:64:2d:f6:08:37:0c:34:59:
3e:35:4a:1d:f6:89:34:64:00:e8:b0:64:ec:ba:0c:92:ac:76:
2a:08:b6:ff:49:0d:15:0e:ff:c8:05:4f:04:a2:3c:97:8a:3e:
4c:be:f0:ca:0f:40:87:34:90:9c:f6:0c:0a:36:4d:a0:15:95:
33:b4:e3:7c:52:1b:38:25:30:c3:ed:09:2d:03:6e:be:eb:8b:
02:8b:5f:14:92:3d:09:1f:73:ad:25:f3:d0:7c:32:16:25:82:
79:08:c8:71:20:f2:a5:ea:07:8c:a4:17:df:59:55:15:c0:c4:
f5:6c:e0:ce:ef:3b:92:80:d1:3a:17:fe:ec:94:d3:c7:31:19:
6d:57:8b:f6:b7:38:a5:41:44:3d:c8:43:09:1a:0e:33:f4:a6:
0e:b9:cb:97:22:ec:0b:65:d1:b5:e6:d4:d5:9c:a2:78:65:44:
97:26:58:34:52:c7:16:4b:dd:45:38:6c:91:15:d8:e3:20:92:
98:20:3a:df:e4:57:44:d8:3e:99:06:1c:a3:cf:e0:22:85:22:
a7:f2:32:0f:83:64:b3:85:71:d2:55:f7:64:1e:62:10:26:93:
2a:c4:b1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:32 2025 by rpki-client