Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5800dd12-9213-348d-9586-f9df887c55c7.roa
File: 5800dd12-9213-348d-9586-f9df887c55c7.roa (raw, json)
Hash identifier: DyNPLzu95hk6d5w2fXQsvt8z1lfQmFATGJKa6dmSjFY=
Subject key identifier: 51:77:FA:74:7F:7F:C1:46:7E:2E:AC:5E:39:E1:BA:A4:3C:E7:94:D0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6E35C140CE1E82EA14277A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5800dd12-9213-348d-9586-f9df887c55c7.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 99.85.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6e:35:c1:40:ce:1e:82:ea:14:27:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=36fcb173-fe3f-4519-95c8-dd36f007c046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:70:48:03:e6:ad:c8:7a:2c:ff:bd:d9:e2:af:
e1:c0:f1:14:f0:32:b2:d5:59:bb:d5:be:f8:11:54:
3a:91:ba:1c:52:79:77:82:c2:63:6f:3b:de:65:e0:
97:5b:25:81:a5:2e:d5:10:dc:16:b2:b7:29:59:e5:
d8:88:ef:07:fb:85:66:9e:07:d5:af:1b:57:84:39:
2b:04:08:ad:24:fd:bb:db:66:0d:c2:a9:9f:4d:e7:
56:9a:82:fa:a8:34:41:bc:cf:e3:90:61:80:4d:b5:
c0:2e:e1:5a:d3:43:fa:fb:29:f5:94:62:15:38:f2:
da:5b:30:e3:80:71:75:42:71:c3:34:1a:c6:b2:5a:
f1:c8:3d:a5:2b:d1:5d:97:fd:f4:ed:88:01:18:7b:
e8:2f:c8:22:41:59:49:59:a0:7f:40:3a:e2:3c:57:
99:3d:f1:a7:7a:48:83:97:6c:e2:92:9c:4d:48:fc:
d9:0f:46:48:61:bd:33:1b:ef:51:56:6b:5f:61:22:
aa:d4:89:a0:f3:a8:da:40:03:8c:bf:dd:da:41:1d:
73:b9:80:75:ed:0a:1b:56:58:0f:41:c5:3d:69:0e:
c9:5b:3a:78:87:3f:43:1d:17:d7:1b:cc:a1:36:b7:
a4:bf:77:3d:01:c5:b5:20:d7:16:3d:f3:2a:77:e4:
a5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:77:FA:74:7F:7F:C1:46:7E:2E:AC:5E:39:E1:BA:A4:3C:E7:94:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5800dd12-9213-348d-9586-f9df887c55c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.85.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:6f:ac:82:a7:49:11:bf:36:d1:27:b5:a3:fe:53:e4:5a:00:
79:37:3d:4c:a3:41:12:84:e6:ca:38:34:9c:19:97:68:9b:67:
58:0e:0d:2b:4a:43:ef:35:3b:9e:42:6a:0b:a4:f4:9d:60:c5:
7c:6e:ac:57:a8:4a:35:3a:75:f8:ce:1a:94:ec:40:8a:5a:70:
53:2b:2e:6e:6f:6b:7f:5f:83:ac:c4:26:0c:ca:17:69:0d:6f:
33:a3:5e:98:07:f8:1f:75:b3:87:4b:e3:75:d4:d9:42:29:6f:
20:bd:0b:19:54:34:b1:94:6e:e5:ad:4f:60:88:92:73:3a:68:
5f:a0:04:ac:73:3b:6d:c7:ac:21:97:80:21:eb:18:5e:8f:61:
70:1b:8d:fc:e2:96:70:85:de:fe:7a:0f:62:46:b0:c3:d2:bb:
df:d2:2e:6a:71:3b:b5:a5:dd:73:1c:72:d4:44:a0:26:bb:ea:
c0:59:a3:f1:55:3a:7a:1e:55:de:5d:ae:fe:d2:07:cc:d2:6f:
af:5b:b8:e0:97:73:fd:67:ce:90:57:2a:a7:4a:f3:36:e9:9e:
1b:6b:50:53:2c:07:26:b8:41:ec:97:a4:b2:f2:b2:2d:2d:76:
5b:d8:d7:5e:12:21:08:15:f3:d0:86:b5:a0:15:08:ff:0c:fe:
aa:da:f4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:42 2025 by rpki-client