Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/50853a65-8c01-3ec7-9ca1-6d3501f3c1a8.roa
File: 50853a65-8c01-3ec7-9ca1-6d3501f3c1a8.roa (raw, json)
Hash identifier: +npObtVKbdN9vFIDIYMuUVvwa+c87MpyZTpuU5mR3b8=
Subject key identifier: A9:53:A8:31:5A:8B:8D:D5:44:E8:07:32:5F:FD:A5:5C:D4:8B:DE:B2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840780FC308EA882D92782EB240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/50853a65-8c01-3ec7-9ca1-6d3501f3c1a8.roa
Signing time: Wed 04 Jan 2023 12:00:00 +0000
ROA not before: Wed 04 Jan 2023 12:00:00 +0000
ROA not after: Thu 09 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 128.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:78:0f:c3:08:ea:88:2d:92:78:2e:b2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 4 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2023 GMT
Subject: CN=2ea519d2-b542-4b75-b6c3-1dfec8dd3cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2e:e5:b3:9e:0b:78:ae:9d:5f:c1:51:30:69:
f3:bb:78:d2:13:18:75:9a:c9:53:c0:70:30:4a:d9:
75:9e:4f:28:4b:84:12:f3:a7:67:6d:e1:e5:9f:c9:
e9:4e:7a:d5:52:22:47:de:e8:40:df:fe:1f:5b:63:
44:53:19:a9:70:72:30:1f:6d:86:2c:bf:f6:a9:e0:
b4:78:30:93:37:9b:f9:bb:f3:2c:bd:1c:46:61:bd:
1d:b4:83:e1:52:6b:95:8e:90:4d:9f:4c:75:36:e7:
4f:db:56:ca:b2:b2:d0:f8:96:78:c6:32:74:96:03:
3e:83:02:df:54:e9:4f:fc:f1:24:6c:de:1b:ce:ac:
49:d9:57:3f:20:a8:17:dc:21:21:e3:36:a1:ed:06:
f1:10:ac:0a:50:99:54:2f:62:13:70:75:ab:4e:61:
9c:b3:6a:ff:e4:ff:f2:9f:98:ca:16:94:2e:22:70:
4e:81:b3:9e:2a:58:1a:44:23:d2:57:f6:01:0e:76:
75:63:46:0d:8b:60:8c:37:9d:47:2b:f1:f7:7a:19:
f5:6c:4d:fc:02:ae:a5:dc:27:90:f8:0a:34:85:fc:
8b:4e:3b:92:df:0b:4d:fe:bc:dd:23:93:e5:b4:1e:
d5:8a:11:98:86:40:81:f3:5f:d0:07:36:08:a7:87:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:53:A8:31:5A:8B:8D:D5:44:E8:07:32:5F:FD:A5:5C:D4:8B:DE:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/50853a65-8c01-3ec7-9ca1-6d3501f3c1a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:03:6a:26:7f:58:de:a8:f7:2c:1e:49:f7:41:05:4c:02:2d:
67:ea:9d:3e:ce:fb:96:14:4a:6b:af:1f:ef:ac:39:40:bb:1c:
fe:be:af:07:3e:d0:27:7a:ab:f4:89:b6:1e:92:1a:47:7c:92:
ab:42:69:51:33:67:42:d6:22:a3:a9:5d:f4:81:f8:f1:9f:76:
19:8f:5b:c9:61:42:df:aa:7c:11:81:40:55:57:52:07:56:35:
74:e3:7d:92:9a:e6:d4:10:74:12:cf:29:53:b6:00:a3:ad:ff:
5b:01:04:4d:f5:93:57:2e:93:4c:83:38:ff:06:aa:6b:1d:04:
6a:03:bc:fa:f3:ba:32:42:69:fa:18:16:9a:2b:4a:9c:cf:46:
59:09:8e:d3:03:9d:ff:7a:e7:1f:7e:92:6d:b6:6a:85:65:02:
9f:df:78:6d:58:c3:3d:a4:33:7e:ad:24:4a:d0:23:96:8c:f9:
85:d1:7c:a3:c9:2a:34:17:49:1d:11:74:62:82:3e:0e:e1:13:
8b:89:bc:15:ea:a1:71:89:2f:20:e5:34:ca:76:75:4a:d6:e5:
a0:62:7a:fb:d7:d1:41:05:36:6f:11:0a:1e:d8:24:2d:5f:c5:
50:92:50:9d:6a:17:06:da:7f:15:f3:15:e7:fb:eb:eb:6b:60:
0e:43:3e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:14:57 2025 by rpki-client