Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d4cc9cc-95e6-3af1-98f7-f3c699411e78.roa
File: 4d4cc9cc-95e6-3af1-98f7-f3c699411e78.roa (raw, json)
Hash identifier: +aCTfjus+rxyystpNekSB6QjX8KWkje+WHmGwJ52wq0=
Subject key identifier: 2C:45:32:62:BD:E3:00:66:F6:35:4C:F2:7A:62:55:C7:34:24:CC:4E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D338F4286396F27712DCC8980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d4cc9cc-95e6-3af1-98f7-f3c699411e78.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 2620:107:4000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:8f:42:86:39:6f:27:71:2d:cc:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=185da1aa-6cc4-42ca-8017-7648e6cea6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8d:b3:fb:68:0d:4d:01:62:22:36:51:49:dd:
4b:1c:d9:27:6c:95:7e:8d:a0:55:d7:90:b4:fe:24:
b4:98:29:89:e3:f6:a5:b1:ae:e6:40:27:36:a3:05:
71:a0:84:18:08:25:d4:cd:eb:81:65:f6:65:15:34:
a9:68:ab:56:a9:58:7f:fb:f6:38:0c:07:7c:b6:1f:
ea:8d:81:07:93:cd:7b:c9:c0:03:a1:67:2e:14:91:
c5:85:0a:ac:66:35:58:77:c0:83:53:15:e6:7e:80:
6f:a5:25:bb:01:c8:4b:5a:ad:4d:9c:c3:bc:68:25:
e6:65:db:67:11:6d:24:47:95:fc:2c:2c:d7:d8:c7:
d4:5c:a2:ce:67:67:d4:ab:8e:bc:50:ca:c3:dd:ba:
42:c8:9b:4e:16:3c:89:60:e6:59:97:dd:a7:3f:8b:
5c:1c:89:77:f7:b6:0b:3b:aa:ac:e0:16:65:dd:cb:
c1:f2:3d:80:44:49:b9:a2:f0:e3:a9:23:78:d3:2d:
11:ee:e2:ae:36:70:32:35:0c:cb:8c:ab:04:70:6f:
40:16:66:21:20:18:3c:cb:66:91:23:60:90:92:a9:
57:d0:a3:6a:db:23:58:a4:4d:20:64:89:bf:20:94:
7b:2d:f1:68:37:13:97:cf:dc:7b:d8:68:89:3f:a4:
c0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:45:32:62:BD:E3:00:66:F6:35:4C:F2:7A:62:55:C7:34:24:CC:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d4cc9cc-95e6-3af1-98f7-f3c699411e78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:107:4000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:41:06:6b:28:e4:7f:c7:0e:ba:57:2d:9e:fb:79:d6:1f:ce:
a3:25:62:bc:cb:c8:c2:cf:eb:4b:d8:3d:56:f6:fd:7d:43:98:
fe:f2:e4:9c:3a:4f:d2:9e:8a:c2:29:16:24:a4:6c:1f:92:30:
c8:37:1e:ac:56:5e:7c:28:9d:cf:9a:01:05:38:b1:10:e3:67:
3b:9d:c8:1e:65:a5:2e:31:2c:51:ab:00:f9:fc:84:af:62:42:
dc:e7:f7:1e:2d:a9:6a:c1:6d:5b:3c:4e:40:6a:00:8a:4d:e6:
f5:79:ba:e0:7f:58:fe:c5:5d:38:a7:b7:e7:36:15:3e:fe:96:
07:60:ac:49:ab:65:26:59:03:46:fb:96:2f:4e:6e:fc:17:d2:
73:8d:50:d0:54:b3:56:bf:b2:ad:fa:5e:ed:e4:43:3e:49:77:
ef:6a:15:95:38:7b:cd:c5:d5:17:a5:b2:21:0e:62:d9:9e:8a:
91:f0:2b:c2:9c:2b:01:e9:9b:6f:83:27:2b:76:73:a9:88:e5:
ad:4e:6c:78:4b:3f:90:e4:70:f3:e2:49:08:1d:3d:0f:61:42:
ca:e3:eb:b4:4c:73:1b:89:e0:3d:90:d7:7e:0e:e0:15:e1:23:
b9:83:8d:00:f3:d4:27:62:aa:0a:26:ec:2a:74:51:b8:0a:a4:
de:03:d7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:24 2025 by rpki-client