Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5adf0bc0-8db3-3a7c-85b9-f12220ce1ae3.roa
File: 5adf0bc0-8db3-3a7c-85b9-f12220ce1ae3.roa (raw, json)
Hash identifier: 0MWMocKhvLt6sDRFokh1KAGC3joBr5MuB/xOeuhDOP8=
Subject key identifier: 50:3F:C2:3D:5A:C0:12:B8:7C:61:30:D2:00:25:09:20:6B:F3:07:AE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C69B6DCCCAE418E5501E8700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5adf0bc0-8db3-3a7c-85b9-f12220ce1ae3.roa
Signing time: Wed 01 Feb 2023 12:00:00 +0000
ROA not before: Wed 01 Feb 2023 12:00:00 +0000
ROA not after: Thu 09 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 128.212.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c6:9b:6d:cc:ca:e4:18:e5:50:1e:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 12:00:00 2023 GMT
Not After : Mar 9 05:00:00 2023 GMT
Subject: CN=30cd13b7-6b24-48be-bf9a-6bc0ce355765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:c7:fb:e9:7f:67:85:62:f8:b9:5b:03:9f:
33:47:74:5a:ce:d4:6b:47:08:e6:13:ed:47:53:77:
a4:21:f3:74:8e:55:cd:2e:43:1c:58:33:95:79:22:
9e:59:3c:28:65:e7:db:6a:8a:97:ac:23:4f:c7:66:
9f:2d:35:53:2e:b4:f9:f3:fc:d8:2a:48:7c:c5:44:
57:c9:80:c0:c9:49:89:6e:7e:9a:8f:07:dc:c3:21:
4f:6c:30:05:69:18:53:9d:03:2d:41:a0:87:ac:8c:
28:d1:48:8a:a1:9f:cb:17:49:ed:d4:6c:6f:88:67:
bf:15:e0:e0:a0:67:b6:18:46:a7:b4:52:07:90:4e:
2e:f1:93:8e:75:3e:26:ed:f8:f4:e9:22:8a:a4:5d:
21:75:54:67:3e:db:62:cc:80:55:9f:be:91:e8:93:
b7:62:7e:78:eb:47:94:28:50:21:e5:ab:a1:c0:18:
c2:4a:71:ae:6e:4e:d3:21:1d:54:92:fb:de:de:f6:
53:0f:73:62:3c:d7:da:81:8a:7f:2b:1a:25:dd:99:
b2:ed:c8:67:8f:2b:cf:e1:a7:e8:89:00:80:71:1b:
47:c7:0b:72:7b:1a:c5:61:d0:19:7b:e6:07:4b:97:
9c:09:26:c7:09:cd:17:11:67:ab:f7:51:e5:e1:61:
b8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3F:C2:3D:5A:C0:12:B8:7C:61:30:D2:00:25:09:20:6B:F3:07:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5adf0bc0-8db3-3a7c-85b9-f12220ce1ae3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.212.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:23:15:ff:a4:c9:00:44:25:dd:b2:40:08:dd:b6:c4:24:2d:
63:c7:d7:fb:89:f7:6e:90:14:d8:cd:d9:3c:90:67:6c:90:f6:
c3:ee:37:0c:0d:75:38:6c:eb:2e:3c:22:d5:60:df:77:a2:62:
58:09:e1:82:58:eb:3b:98:db:c0:aa:e3:39:76:1b:0c:6a:84:
73:5d:ec:aa:8f:bb:eb:a2:be:b0:0b:cb:58:09:d9:21:df:08:
aa:88:9f:1a:22:25:fc:90:c7:de:fd:f2:b4:36:cf:0f:ce:d9:
10:dd:e7:a4:b9:30:94:2e:70:a9:b1:ab:76:3e:ab:15:1b:62:
84:30:0f:89:90:7f:5b:f2:24:fa:86:fd:0a:d4:14:a2:49:6d:
e7:23:61:24:e4:96:72:34:5b:06:aa:bb:ff:f5:2e:4d:70:fa:
cc:6e:38:b2:b2:44:2a:21:fa:79:3b:ae:ed:07:2a:c7:b1:4d:
e9:f5:d8:37:49:5d:54:2e:cc:fe:95:7f:80:15:28:f0:4f:36:
a9:a9:83:04:44:a1:c7:83:dd:9b:e9:64:40:a8:d2:24:6c:9f:
34:43:c0:98:d2:ab:33:91:82:f0:6a:7a:ee:45:2d:d7:48:12:
5b:d3:a2:9a:8e:bd:eb:10:b3:1b:92:55:97:77:97:06:30:53:
0b:1b:5b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:08 2025 by rpki-client