Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5707eb38-bff8-38d7-ab5b-bf07faadfcd5.roa
File: 5707eb38-bff8-38d7-ab5b-bf07faadfcd5.roa (raw, json)
Hash identifier: ItMzpGty3AyCxXml8E/EGiT4SGqRPCPagAci8iX3re4=
Subject key identifier: 3F:F2:DC:CB:2A:75:7E:C1:A0:DA:AF:D5:48:6A:50:DE:6C:A6:1F:8D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584053EA1955FD8FB1C19456D800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5707eb38-bff8-38d7-ab5b-bf07faadfcd5.roa
Signing time: Thu 22 Dec 2022 12:00:00 +0000
ROA not before: Thu 22 Dec 2022 12:00:00 +0000
ROA not after: Fri 27 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 138.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:53:ea:19:55:fd:8f:b1:c1:94:56:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 22 12:00:00 2022 GMT
Not After : Jan 27 05:00:00 2023 GMT
Subject: CN=aebbebc8-59c7-4c75-9d7d-0d58c4e84039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d1:72:f0:76:e9:4a:8d:dc:b4:f5:4f:f5:98:
ae:2c:eb:74:0b:cf:ad:76:61:8b:34:89:86:92:71:
99:87:9e:44:f9:26:04:44:cc:77:15:a1:ea:53:b8:
a4:e1:5c:01:af:4b:d8:cd:d9:11:5b:b9:89:cf:b7:
8f:8d:eb:e9:fe:74:30:c3:0c:08:5a:ad:5e:e7:94:
74:4a:e2:c5:85:62:ac:cb:94:13:41:3b:6d:69:6e:
29:fc:07:98:a8:25:d9:19:86:db:2f:83:6b:b0:9d:
b4:3c:5b:a1:19:38:1e:6a:97:5e:38:04:7c:04:09:
60:b1:d7:0b:c5:92:f7:82:15:dc:2b:f9:be:1a:95:
93:9b:a0:f7:12:32:70:e9:5c:15:bb:c9:87:fd:5d:
d0:fd:27:21:5a:0a:11:4c:4a:57:67:6d:41:d0:77:
53:59:e1:ec:3d:fd:ac:ed:eb:ae:a0:9b:b2:1b:25:
d0:d1:4d:52:4b:49:57:d9:d5:87:85:0d:83:9e:41:
98:85:fa:e7:c9:66:11:50:c8:b4:21:04:1e:8b:d6:
84:10:ec:14:da:5c:47:1a:c4:eb:cb:19:38:04:56:
d7:92:09:c9:d8:7c:04:4d:27:49:79:6f:4a:f2:de:
81:1b:40:af:c7:60:4d:35:5d:1a:28:e9:18:93:aa:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F2:DC:CB:2A:75:7E:C1:A0:DA:AF:D5:48:6A:50:DE:6C:A6:1F:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5707eb38-bff8-38d7-ab5b-bf07faadfcd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
138.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:88:42:bd:ca:98:10:30:57:9b:c2:65:a5:22:71:24:2c:9c:
3f:59:b6:21:07:78:a2:9e:c0:3d:02:b7:65:5f:13:ce:ce:bd:
24:6b:7d:a1:31:7c:77:47:35:dd:33:f2:2c:52:02:e9:1a:96:
1e:65:bf:40:f1:4e:39:6c:e8:c9:86:55:c7:b6:f5:68:29:b5:
03:f8:d6:95:ba:8a:07:91:14:19:42:1d:9c:8a:85:6a:f3:28:
6e:1d:39:c5:ed:58:fd:b3:ef:df:50:05:b6:49:07:28:21:53:
28:6d:79:c5:cd:e9:37:07:91:43:73:98:44:e6:73:89:54:c6:
a2:0b:14:58:78:6a:a7:8d:19:cd:f9:09:0a:67:5f:be:ec:5e:
84:6c:f1:46:99:0d:93:1d:6e:fc:72:a3:1f:97:4b:b8:61:aa:
4d:13:c3:d3:5a:11:56:8c:d0:4d:b5:e4:33:ca:84:94:30:7a:
70:11:3c:e0:7e:01:7d:9e:a3:b1:00:b7:8f:b2:33:62:f1:ac:
8f:c7:7f:3c:49:0f:2a:56:4f:48:6c:38:61:cd:ff:1c:38:af:
4c:01:54:08:52:a4:db:64:2d:16:46:44:34:36:b4:03:e4:64:
01:d9:05:70:70:af:88:ad:e2:c8:db:fc:40:f4:6f:34:78:84:
e6:fe:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:07 2025 by rpki-client