Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47a0db72-c3f7-382c-adad-d75590f3c0c3.roa
File: 47a0db72-c3f7-382c-adad-d75590f3c0c3.roa (raw, json)
Hash identifier: lHMT4RyGT1h+IaRc/yC3JOgzhIaNWEGt9F8J4pmmN7g=
Subject key identifier: 42:F6:9B:01:BC:06:C6:41:FA:A6:3B:48:EE:BF:A9:1C:BC:BB:1F:38
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6E1814B1FF545CEA4DD21D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47a0db72-c3f7-382c-adad-d75590f3c0c3.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 99.150.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6e:18:14:b1:ff:54:5c:ea:4d:d2:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=655cc2c8-f8fb-4984-8d6c-b951dcb3d968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9e:be:9d:15:0e:56:cd:bd:af:10:be:42:06:
68:4a:58:1f:1e:b3:0b:ac:63:66:b2:b8:81:3e:b0:
aa:64:67:05:8e:c0:48:4e:8f:4a:d0:a2:0d:53:45:
92:79:6b:c6:64:53:03:6e:9a:ae:3a:61:ac:4d:66:
7c:b6:9f:c7:7f:bc:74:0a:76:69:a5:5e:55:56:6b:
7a:a0:fa:0b:bb:3e:a2:d4:34:95:c6:b4:c6:c6:28:
cd:03:50:11:94:73:09:93:95:b7:09:59:08:5a:7b:
1c:f8:7d:e4:16:4a:04:84:56:c1:f1:8b:89:82:ec:
e5:f3:5f:b5:15:f8:ea:64:d6:63:68:a6:3c:88:5c:
e7:c5:47:ea:fc:8a:a8:fa:72:c3:5d:7d:7e:20:1d:
6a:fd:63:5b:5d:00:b1:10:12:ee:f8:7d:0d:79:ff:
bf:ba:64:57:94:8c:a3:d9:cb:9c:23:7f:32:25:66:
22:71:d9:ed:c0:13:8f:9b:d4:32:18:a0:98:42:56:
f3:2b:b5:eb:6f:24:87:6e:cf:43:34:1a:47:d7:9b:
15:dd:d7:f1:c3:de:f8:6a:31:ae:19:8d:ce:d6:1c:
eb:a5:f3:67:a2:ed:8f:51:7e:00:e5:37:7f:f3:09:
37:52:77:15:60:5c:93:52:e4:7d:83:20:24:62:9c:
6d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F6:9B:01:BC:06:C6:41:FA:A6:3B:48:EE:BF:A9:1C:BC:BB:1F:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47a0db72-c3f7-382c-adad-d75590f3c0c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.150.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:ec:40:f0:6e:42:12:53:d9:9e:ff:2e:14:8c:ab:25:58:5f:
ef:04:9b:8b:b7:37:0e:83:3a:3d:43:ff:26:6b:a1:95:24:f2:
c5:f6:d4:c9:9f:50:47:f2:0d:b9:b1:32:2c:44:15:59:ce:0e:
51:dd:a0:97:71:37:c8:71:da:e1:a8:36:1b:c9:b8:1c:d9:ad:
f6:74:1e:b6:ee:4e:3e:d8:5f:be:90:e2:96:98:d0:78:8e:1a:
7e:fc:7f:2a:f1:30:2c:25:cb:cd:e7:50:0d:0a:3c:6e:29:f3:
1a:c4:ff:d6:ad:4d:4e:12:0f:c2:74:09:6a:00:62:00:7c:6d:
9c:8c:e6:19:07:d7:c6:1b:81:c4:c5:0c:d4:57:1a:0b:0f:89:
5b:ce:94:bf:08:b2:42:db:40:37:3a:05:f3:e6:8d:2d:b6:cb:
c6:22:3b:7d:63:58:1c:fe:ec:3a:d6:7a:6d:89:ea:76:97:db:
08:3b:54:4c:f5:74:c8:c9:ae:dd:30:f8:a7:f8:47:6a:02:bb:
ee:16:7e:f6:6d:25:ea:07:4c:87:01:54:6e:83:10:cb:88:72:
5c:d7:db:58:7d:4e:c4:25:88:db:6c:50:54:f8:43:fb:6f:38:
64:f4:b0:ef:3e:c4:74:3a:7f:6a:c2:f4:6c:eb:1c:83:3e:c7:
a0:6c:a2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:59 2025 by rpki-client