Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4f982701-21ae-383a-9c3d-f44a56000c1c.roa
File: 4f982701-21ae-383a-9c3d-f44a56000c1c.roa (raw, json)
Hash identifier: 9+kIRTnAmikbi0B2sN5ov/ED5FAr0DvF8UgSDrvJfr8=
Subject key identifier: 95:94:A7:61:72:E2:07:01:CF:2D:C9:53:21:8D:B2:96:1D:93:4A:10
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584027215026EC37E134FDBEF100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4f982701-21ae-383a-9c3d-f44a56000c1c.roa
Signing time: Tue 06 Dec 2022 12:00:00 +0000
ROA not before: Tue 06 Dec 2022 12:00:00 +0000
ROA not after: Wed 11 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 198.14.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:27:21:50:26:ec:37:e1:34:fd:be:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 6 12:00:00 2022 GMT
Not After : Jan 11 05:00:00 2023 GMT
Subject: CN=d96e8ddf-f3b4-403f-b32a-dbc10f60c546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:b7:cb:00:81:5c:ca:89:b7:0c:b7:cb:19:
07:3a:2c:f6:1f:10:b6:6e:fc:8e:8b:22:8a:a4:02:
35:b8:f3:13:3f:5e:44:4b:de:54:e3:49:5c:35:6a:
0c:28:c7:0d:b2:ee:c4:b8:32:d9:a3:fa:25:d9:b6:
ee:d2:7f:52:ba:49:fa:00:2b:24:e2:d7:f7:a0:96:
d7:56:35:5d:65:0e:77:47:fd:32:96:39:9c:e2:b3:
74:2a:4e:25:0e:bd:48:6f:00:e7:f6:e0:25:3e:fd:
9f:42:2b:49:b3:2a:e9:9e:df:fd:b9:f7:2a:3a:40:
e0:75:c0:82:d2:a5:5e:80:68:04:b6:09:d1:03:9a:
c8:b3:ae:c1:e8:62:97:c8:9a:f7:95:2e:81:11:0b:
b4:97:1c:fc:e8:d8:e9:a2:9d:eb:c5:df:77:46:81:
fe:60:a3:3f:3a:e3:b4:eb:b5:ef:5e:88:06:15:e5:
31:50:1f:bb:44:fb:68:ef:bb:dc:b6:7e:e0:ca:fa:
80:49:1f:6a:c5:ba:b4:7f:81:08:3d:90:e9:ab:b1:
33:dc:73:66:1d:a4:0e:2a:6e:10:99:8b:7e:f9:9e:
b3:47:03:71:f1:32:50:e0:75:5e:a1:d7:24:08:65:
cd:5a:25:f2:0a:38:d1:90:bb:ba:a0:fa:e4:dc:26:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:94:A7:61:72:E2:07:01:CF:2D:C9:53:21:8D:B2:96:1D:93:4A:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4f982701-21ae-383a-9c3d-f44a56000c1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.14.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:68:eb:2c:fb:7b:99:ae:17:a8:16:ce:31:36:92:35:17:5d:
d8:6b:de:da:97:95:71:76:25:25:da:73:e8:16:6b:b9:89:f4:
65:50:d5:1e:ec:9a:80:56:42:d1:21:05:23:62:80:d4:8d:c9:
f8:b4:a8:e7:6b:b4:5a:48:06:f9:fb:4c:a5:d0:dd:3e:eb:e5:
c9:5d:08:7c:7a:b6:13:b9:91:97:6a:19:ba:fc:d6:a2:ed:0b:
f0:ea:40:f0:9e:25:88:b3:4c:7e:c1:f4:9c:60:44:ef:d9:00:
ef:87:f7:39:d6:4c:3c:66:fc:90:6c:23:9c:59:4f:9c:06:0f:
4c:34:b4:d5:71:e5:59:cd:e4:73:88:b9:15:64:f7:3a:cf:76:
0f:94:43:7f:ea:9c:ce:28:ad:a4:aa:b2:db:30:d9:ca:1c:5e:
83:2c:c8:e4:c5:04:4c:d6:be:d4:3b:fc:ac:5a:f2:ca:00:05:
9f:57:39:26:b4:89:da:e7:4f:3d:a1:5f:3a:46:f7:2c:0e:b2:
0a:7e:9e:fa:4d:b2:ee:94:f5:29:21:aa:13:48:a3:35:1a:12:
da:e3:a9:c7:6d:84:94:39:59:81:eb:ab:cf:bb:1d:da:dc:76:
7c:06:19:df:44:5e:b4:0b:f7:5d:d1:13:c0:8f:df:5a:ab:6f:
6c:06:e5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:59 2025 by rpki-client