Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47e56c6b-72a5-3610-b2a5-603638aa37b6.roa
File: 47e56c6b-72a5-3610-b2a5-603638aa37b6.roa (raw, json)
Hash identifier: c/1gBwF7o8FN7hbg3IdiKERUB+tAHVu8cTq1k8iL+H8=
Subject key identifier: B9:10:B8:D5:70:E7:F5:77:45:94:EE:1A:DA:F8:83:99:40:C8:93:49
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCAF20922D9B2A1F9A505FEC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47e56c6b-72a5-3610-b2a5-603638aa37b6.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ca:f2:09:22:d9:b2:a1:f9:a5:05:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=88b48f73-2ecb-4b46-ac3e-053efc648b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:07:77:d9:e2:64:a6:19:45:e0:f2:02:5c:40:
d7:a6:b1:23:e9:d4:77:d6:7a:09:6b:50:5f:04:07:
31:cf:90:d3:2d:88:42:09:0b:6a:0b:6d:37:be:c5:
7a:77:3f:da:5b:19:38:8c:6e:b2:99:27:4e:21:84:
cb:86:f9:e3:10:e4:6f:9c:5c:09:88:37:71:c7:64:
86:9c:d5:0b:2b:4e:6a:47:f3:33:69:56:f5:ac:3c:
55:e5:ec:15:e1:9f:e0:d4:40:eb:4b:d9:d9:52:e4:
3a:3d:b4:00:4e:d8:80:7f:94:d0:ce:47:0b:ee:3d:
79:e1:1b:1e:d6:d9:74:a5:b8:63:76:68:9e:d1:ad:
fc:9e:44:2b:2f:63:3a:de:62:87:ff:97:47:4d:50:
3b:35:5e:2d:fc:fb:a0:92:b5:09:ac:2e:31:01:20:
f1:83:14:20:78:f6:eb:00:c6:de:a4:7f:d7:ca:c3:
0f:e3:99:ec:6e:5d:2f:24:25:9a:94:c2:0b:fa:24:
42:dc:9b:ec:c7:c7:7e:9e:88:ef:bf:47:a9:fe:78:
63:be:93:c9:aa:56:7c:f8:b2:00:aa:22:33:78:f4:
39:b0:b9:c9:97:47:af:08:92:35:ef:e9:cb:d7:bd:
7c:86:82:be:83:b8:e3:bc:46:0c:68:24:87:ca:5c:
c4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:10:B8:D5:70:E7:F5:77:45:94:EE:1A:DA:F8:83:99:40:C8:93:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47e56c6b-72a5-3610-b2a5-603638aa37b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:a5:7a:40:a6:ca:63:f0:9c:77:2b:04:c4:69:85:03:dc:f6:
33:64:8c:35:29:09:46:1b:82:be:ce:15:d1:fe:c2:98:0f:13:
bb:ec:fd:3b:0c:6c:7c:a7:2d:c3:86:6a:ec:8e:31:17:bd:80:
83:bc:0f:ac:eb:ac:73:48:dd:dd:be:5f:4e:c3:0c:34:dc:c6:
61:8c:6e:5b:85:a2:09:5c:b6:dd:69:0a:4c:8e:ef:11:4b:70:
59:8b:8a:5f:69:a7:f1:ab:9c:bc:1f:11:07:d9:79:57:ba:6b:
9b:e7:20:da:78:f7:87:94:d4:c4:3a:0b:3f:22:72:28:01:d7:
79:79:7c:8f:bf:99:01:52:00:58:27:5b:45:ae:bb:d8:48:0d:
f8:0a:2e:bc:39:05:ba:63:ad:89:32:07:b2:a3:7b:53:8d:9e:
21:9e:e9:ea:79:7d:25:16:10:e5:18:b6:b9:77:01:b8:dc:9c:
32:8c:75:92:23:c7:6b:cd:25:a9:e9:44:f6:0e:f4:14:a5:e2:
9f:64:31:de:a3:4a:a6:42:a3:24:4c:f0:18:0c:aa:b6:25:24:
20:e2:ba:72:af:03:e9:d5:69:f5:a6:73:c4:b9:9c:4b:e4:ae:
70:ff:c7:b8:92:82:68:59:54:eb:b8:03:ee:d8:78:32:7e:2f:
6f:39:96:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:14:50 2025 by rpki-client