Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49a1888f-a8cd-30e0-8cd2-8929014af84a.roa
File: 49a1888f-a8cd-30e0-8cd2-8929014af84a.roa (raw, json)
Hash identifier: yJ5ShnpWeBn3o+Rx/bif5g51TY3xl3Mbkh1h+1dGmbY=
Subject key identifier: D8:A5:C8:C9:63:B7:07:AF:54:98:4B:B4:3C:F5:6E:BE:7B:61:32:2F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBE1AD52F972894A371D06F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49a1888f-a8cd-30e0-8cd2-8929014af84a.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 198.41.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:be:1a:d5:2f:97:28:94:a3:71:d0:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=7ab3baaf-820b-4c91-a11f-bdfa1777e67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:f2:93:b4:2e:e6:2f:d1:04:7e:25:24:bb:
4c:5c:f7:75:73:9a:1d:cc:df:be:58:f4:d3:2e:69:
26:a8:0b:11:91:3c:94:79:25:6e:fa:c3:60:53:33:
41:9d:57:d6:57:87:1e:81:0f:ac:39:23:52:03:48:
02:8f:f9:dc:1e:08:2e:e3:2a:40:af:2f:c8:da:65:
b5:34:38:4e:48:b0:26:5f:c8:27:b9:e6:7e:fd:ef:
f5:01:22:d8:86:ff:30:90:ee:60:30:8a:2f:df:80:
12:1c:8f:59:34:44:17:5c:16:20:84:9f:1a:c8:fa:
74:35:e8:ed:a2:1a:22:a8:b5:11:ab:14:64:0e:2e:
9c:4c:bd:0a:96:f2:c9:de:68:ce:c6:e4:11:b9:09:
76:23:66:71:ba:1a:4c:17:76:5a:c8:74:9f:70:1d:
e8:30:b7:29:f5:da:71:da:6a:2e:f9:1d:a9:be:e9:
ef:b2:bd:96:b1:b4:41:60:60:6a:53:9f:19:c2:e9:
87:7a:c5:ff:e8:f1:e1:c1:8f:9d:6d:b2:3b:3d:8f:
27:c5:49:f6:9f:f5:4f:2d:18:90:db:db:45:9f:13:
cd:57:86:9a:39:c2:00:5e:36:34:ed:34:30:01:f9:
e9:7b:dd:c2:40:12:4e:86:0a:a3:32:a6:28:7d:40:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A5:C8:C9:63:B7:07:AF:54:98:4B:B4:3C:F5:6E:BE:7B:61:32:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49a1888f-a8cd-30e0-8cd2-8929014af84a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:98:2c:78:ff:99:8e:14:7d:4a:69:7e:6e:fc:35:be:1f:26:
85:2a:64:fb:45:13:a9:f0:e5:6e:ff:4d:ac:51:60:b6:d4:17:
a7:13:0f:98:83:0a:e4:1c:af:61:90:ca:8c:35:b2:21:43:96:
4d:09:66:d5:ce:96:68:fb:a8:3e:0c:0a:ce:69:3e:15:e9:58:
9e:ed:15:90:fd:8d:96:7b:90:e0:ec:ba:49:e2:a3:b7:91:92:
38:18:93:19:d2:a1:c7:53:26:a9:02:3e:f0:b7:5e:34:6d:af:
6d:9d:1c:72:2d:16:38:12:b3:a6:07:42:38:5e:f8:ae:f9:dc:
95:b4:d1:4d:34:63:11:84:fd:0e:a3:49:31:66:91:e8:28:ef:
c6:91:fb:11:f5:a2:c2:dc:a0:52:19:76:00:39:46:ce:bb:7c:
2c:81:a3:8d:73:67:6e:e6:64:0c:9d:97:aa:eb:00:cd:48:57:
bf:5c:3e:a0:c3:ea:2a:da:06:51:f5:82:6f:e9:07:5d:51:d7:
02:5c:48:af:ce:9e:57:3a:24:20:dd:91:eb:ae:f2:6e:57:76:
d0:67:ec:2c:3e:28:e0:64:1e:66:e9:77:1c:92:87:aa:f7:30:
02:40:a2:eb:dd:0d:a4:43:44:86:db:52:4b:79:1c:f2:0e:2b:
9a:d9:19:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:53 2025 by rpki-client