Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/512330ce-8227-3d8a-ae0e-e3be52c4e621.roa
File: 512330ce-8227-3d8a-ae0e-e3be52c4e621.roa (raw, json)
Hash identifier: a2pLfMoK4wQDMJQFX6MymNSzinN0D6TQUOexyqX8+Xw=
Subject key identifier: 72:16:F2:21:A3:E2:E2:F2:8A:EA:5D:6B:A9:56:81:11:0F:E3:EC:48
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D8161C8433B672628CD0C4C40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/512330ce-8227-3d8a-ae0e-e3be52c4e621.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:61:c8:43:3b:67:26:28:cd:0c:4c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=5479c857-96f1-4a53-83fe-b31376fc7c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:d5:a1:80:64:0b:c2:44:93:8d:8e:7b:58:
d1:62:b8:39:80:d8:c3:95:a0:13:b8:bc:cf:20:22:
f1:51:92:59:26:5f:c5:c2:5b:df:d7:9f:57:5c:e1:
79:6d:be:89:e3:aa:ab:6f:1c:c4:6a:84:3a:72:e9:
a1:d1:64:51:f8:de:fc:8f:92:cd:73:e1:4b:37:14:
30:4a:1b:8e:e8:f7:25:a7:b5:7a:43:69:86:f8:91:
d7:00:8c:1e:52:09:f7:bc:99:32:22:b2:d4:71:42:
ba:c5:e2:e6:f2:eb:82:2a:b0:c5:43:a3:45:f3:1f:
25:4a:b9:57:6c:2d:10:e0:c9:e2:10:71:74:a2:9d:
a4:38:6f:f3:5a:5c:de:fe:f0:0f:74:a8:57:ad:89:
aa:af:67:db:96:70:b4:0c:1e:df:32:a2:be:d1:59:
cb:c2:d6:61:cd:4a:34:c3:38:6c:ef:36:4b:c0:9f:
00:e8:b4:67:59:52:4b:69:81:25:4b:62:73:b1:7e:
9b:0f:f6:7d:45:65:9f:9b:b1:01:44:bd:df:dc:31:
9c:ff:20:75:59:75:79:ec:8e:fb:77:17:55:ac:1d:
95:98:46:6b:41:c3:16:1f:4f:b0:79:5a:00:43:12:
b3:c3:c4:d0:32:00:1f:ce:d9:f9:b7:ca:1d:29:9e:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:16:F2:21:A3:E2:E2:F2:8A:EA:5D:6B:A9:56:81:11:0F:E3:EC:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/512330ce-8227-3d8a-ae0e-e3be52c4e621.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:fa:49:f4:8c:1f:74:58:85:ea:2a:0b:9c:2b:31:7e:f9:c8:
30:f6:f2:db:44:a6:75:10:3b:7f:9b:67:02:e7:00:74:bd:87:
7f:51:6b:dc:85:e7:70:0d:7a:7e:92:04:09:3d:b8:fa:6f:09:
41:bc:84:87:0d:48:de:86:d3:5d:c2:b0:cc:f1:07:f5:23:b0:
f6:8b:8f:1d:3e:38:e0:ce:49:e5:2b:18:0e:1c:1b:f9:5b:05:
05:83:07:b2:0c:a5:63:5a:90:b9:c2:e4:02:13:3d:7a:a3:cc:
94:06:df:4b:c5:13:b0:9b:28:4d:7b:c4:56:d0:fc:a3:dd:37:
81:1f:39:e8:e1:08:95:ca:28:26:d1:f1:fa:8f:8e:26:e5:c3:
4f:a0:78:b0:c9:5a:5e:14:c6:3b:00:bb:b6:da:6d:5a:ca:b8:
82:8d:d9:cd:10:56:64:41:c2:15:a8:82:bc:66:5d:f7:38:7d:
fd:f4:f6:a9:1a:80:fc:63:c8:b7:e2:95:ef:c8:b9:02:8b:de:
4c:a8:a5:f6:a5:6f:54:f1:15:ca:07:55:99:ca:ac:bb:e8:fe:
aa:c0:72:d6:01:b7:36:d4:31:ae:67:d3:71:8c:66:53:0c:e5:
e4:e8:e2:8f:53:7d:3e:97:a4:20:68:b4:1d:24:64:b2:79:d5:
ba:8e:86:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:06 2025 by rpki-client