Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4480e408-4522-34c8-b435-54c3aa300eaa.roa
File: 4480e408-4522-34c8-b435-54c3aa300eaa.roa (raw, json)
Hash identifier: 4hcPIoqJboNHKTm7tsh1w1MxJKClydySPu42sIKEoBg=
Subject key identifier: 0F:56:83:4E:21:20:BE:AE:99:A4:D3:13:DE:41:9F:15:99:9E:D6:88
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCAF1EFB6EE2043678C4899C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4480e408-4522-34c8-b435-54c3aa300eaa.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 99.105.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ca:f1:ef:b6:ee:20:43:67:8c:48:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=f2dbc9d2-c336-42fd-9527-eb9146ede99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c2:26:4c:56:47:8b:81:d9:cb:91:f9:a4:60:
1f:56:ec:96:77:7b:cf:d3:f3:ef:c4:31:9d:24:02:
3c:af:1e:50:9a:4a:cb:b9:b3:f1:92:64:db:36:9c:
a7:e7:98:8d:86:ba:b5:a2:28:32:e1:10:68:cd:1e:
3d:2d:22:28:6a:41:a4:29:b6:c7:23:f2:e5:a6:6a:
51:61:bc:b0:8f:cf:a1:a7:3f:ed:df:ae:cc:ca:8a:
83:c6:34:4d:bc:3e:ab:5b:63:74:cc:b9:34:a5:f9:
59:6f:12:1d:0b:c6:96:ca:60:6f:2f:57:2e:3d:79:
ae:5f:09:79:a4:90:95:68:d6:dc:9c:db:39:ed:8e:
c3:43:6a:c7:8c:a0:c4:c5:ea:d9:31:f2:93:5a:26:
a9:48:04:25:f9:d7:cc:b5:c7:55:b6:37:db:dd:e1:
9e:58:7c:cb:22:6e:55:34:e0:3f:5a:ed:b1:07:bd:
7d:c2:b5:4a:05:46:1e:9c:e8:0b:d2:3b:21:e5:92:
93:4a:77:92:d1:e1:5b:6e:0a:02:68:4f:60:e8:79:
99:de:4c:9a:fa:33:c9:bb:22:97:cf:87:f1:fb:12:
9a:0f:45:4f:5f:d6:f3:b5:74:2b:f5:94:ca:01:7b:
1f:23:d8:e9:a3:95:68:d5:fc:7c:a7:46:94:37:93:
07:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:56:83:4E:21:20:BE:AE:99:A4:D3:13:DE:41:9F:15:99:9E:D6:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4480e408-4522-34c8-b435-54c3aa300eaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.105.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:18:9c:2e:22:60:b2:4e:0b:d9:fe:96:7a:7b:56:a7:c9:34:
b7:88:31:84:22:55:a7:76:1c:ca:41:6e:66:60:c2:49:25:cd:
d0:14:49:6c:6b:96:e1:6c:3d:73:a2:54:be:0e:71:c0:cf:3e:
76:cb:07:62:ee:77:f8:8b:ff:8d:52:b5:cc:95:ce:c4:55:88:
36:1c:29:e1:9b:3c:b3:ba:2b:ce:fa:94:e9:c7:8d:03:7d:3c:
7d:a8:b9:de:05:86:20:15:c9:ef:aa:10:1b:96:11:8a:be:d6:
57:78:7a:ef:92:6c:ce:c6:f0:e3:98:f0:42:46:9a:02:1c:ec:
8a:11:02:6d:91:cc:c0:2e:6a:d3:4b:57:77:c8:f9:a5:35:f6:
93:b1:4e:81:43:b7:c1:5b:29:7f:61:1e:25:83:a4:47:9f:ac:
d8:89:33:56:cf:b9:de:e8:2f:a1:fc:ce:cf:56:57:15:e5:02:
1d:82:1e:0f:40:63:0f:e0:da:95:d8:51:79:23:98:e0:6d:91:
f3:05:d7:e3:18:ec:94:00:bb:4c:6c:e0:fd:96:56:4a:98:da:
2e:29:f6:42:4c:06:50:5b:67:9b:9f:9f:0c:d5:48:f9:98:91:
e9:8c:e7:ab:34:c3:81:92:e2:dc:d3:aa:9a:2e:d4:fe:29:f3:
6d:f4:5c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:21:15 2025 by rpki-client