Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41ed684f-8db2-33f1-a252-447d5f663ce0.roa
File: 41ed684f-8db2-33f1-a252-447d5f663ce0.roa (raw, json)
Hash identifier: h9jwCDtIhM2ECLncZcjl4E6cNXMcM+Dni2XIrZ4cUGw=
Subject key identifier: 5A:16:E4:F6:AD:F8:B0:BC:25:D2:55:FF:25:AC:40:A3:FC:68:38:7B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406B95FA28C8400B1D7176FF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41ed684f-8db2-33f1-a252-447d5f663ce0.roa
Signing time: Fri 30 Dec 2022 19:54:08 +0000
ROA not before: Fri 30 Dec 2022 19:54:08 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 99.87.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6b:95:fa:28:c8:40:0b:1d:71:76:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 30 19:54:08 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=8601695f-573e-4033-8e70-e88caf449d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:62:f1:0b:18:18:9c:8b:07:4e:b2:b4:cb:0c:
6f:8f:44:fc:ad:cb:13:71:9f:ce:e1:c2:75:74:a7:
7e:37:31:d3:ab:78:d5:7a:db:b2:5f:b6:74:9e:62:
45:aa:77:e9:d6:4a:00:4a:ac:ef:79:b9:cf:d4:42:
5a:d8:b4:ea:f7:db:e1:65:0b:67:a8:33:21:08:ae:
3b:d7:64:58:a1:97:b1:f5:b4:dd:b2:37:36:63:24:
72:75:61:18:38:b2:4a:95:ea:06:24:97:1e:14:14:
e2:35:c0:e1:85:71:e8:34:27:50:65:6b:66:cb:6d:
f1:d2:f2:27:e5:db:4f:4f:d0:a4:f3:c6:df:8b:b3:
00:e0:ea:1a:ca:74:1d:70:68:dd:db:8e:87:3c:f9:
ba:17:19:ab:b7:65:9a:c4:9f:9a:cb:19:56:ab:2f:
26:63:4a:5b:f1:89:7e:28:c3:2a:7a:23:ae:c7:fb:
70:0a:a7:5e:ed:9d:fb:a2:01:ca:36:fa:4c:bb:ea:
f6:af:ea:f1:9a:fc:84:c7:89:ed:32:5c:e5:42:c9:
ce:46:67:d7:97:7e:28:c9:5c:24:e0:57:ec:e0:c9:
8d:14:37:92:2d:ec:57:ce:e9:24:78:ec:c1:64:c6:
03:fb:94:81:f7:5f:12:32:3e:b3:78:db:ee:0d:70:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:16:E4:F6:AD:F8:B0:BC:25:D2:55:FF:25:AC:40:A3:FC:68:38:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41ed684f-8db2-33f1-a252-447d5f663ce0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.87.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:99:c0:98:07:5e:bf:f5:87:bf:04:ab:3d:b7:7c:79:76:bd:
1c:01:76:33:88:98:41:be:63:9f:27:4e:58:76:f8:cc:df:30:
ea:11:dc:7e:59:10:55:54:2a:03:a3:fe:3a:a9:ec:f8:c6:4e:
5d:64:71:55:19:94:94:dc:ed:85:d6:7c:7d:50:03:38:01:41:
6c:97:59:7c:74:0a:a6:d3:1b:ef:8c:cc:e5:40:73:2d:f5:c7:
9b:fe:af:91:aa:47:e6:4f:72:83:75:64:a2:68:0d:65:12:90:
c8:e1:bc:13:58:6e:99:d8:69:e0:94:d5:76:4a:98:e7:01:dc:
32:d4:1c:99:5d:4d:df:86:98:0e:25:30:4c:20:e6:aa:86:f1:
04:4d:48:05:2e:a6:18:8f:cb:2e:bd:8f:49:aa:73:a4:54:a7:
c2:94:51:0c:5b:30:77:cf:6d:2d:df:4c:46:0e:66:ce:b2:2b:
ab:5d:97:85:39:df:9a:1c:d7:6c:77:59:50:4f:40:94:42:2e:
80:d7:6e:80:4d:f8:bf:d0:28:28:e2:1b:41:4c:4e:e1:a3:52:
da:3e:ba:45:79:74:82:c4:13:c8:67:64:bc:ca:1a:e2:4a:36:
57:84:3f:4b:f9:cf:6f:f0:74:4e:f4:80:69:67:3e:25:6e:c7:
4d:d5:ce:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:41 2025 by rpki-client