Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/656f1300-3190-393e-ab49-1f05e75221d3.roa
File: 656f1300-3190-393e-ab49-1f05e75221d3.roa (raw, json)
Hash identifier: jsd6i1bqrzcOwOeBh2v5oHP5sa6gSH8RDnMJHR44dB0=
Subject key identifier: 2F:61:FD:20:90:3F:16:9D:1D:7C:AA:A7:F7:93:53:24:D5:7C:EE:09
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840193ABE9E48301A844B808980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/656f1300-3190-393e-ab49-1f05e75221d3.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:3a:be:9e:48:30:1a:84:4b:80:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=c00ee39a-0762-455d-8c08-8ce5bc56c83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:a6:35:73:e3:7b:9d:b8:fb:54:30:33:a5:
26:5c:e4:2f:fb:d9:ae:d8:f8:a6:56:63:cf:e2:e8:
5d:00:be:24:74:6e:02:88:01:da:23:6b:37:70:a7:
86:12:61:61:86:75:1d:5a:43:03:62:88:0d:bb:9b:
da:af:99:6e:43:62:2d:f4:71:78:16:2f:8d:06:36:
d0:43:42:a5:d8:75:ed:fb:8e:05:99:4f:66:58:34:
4f:3a:f8:10:26:8e:5e:91:f7:ad:66:73:dc:81:f6:
36:37:f2:45:74:9d:d0:fb:aa:6c:32:10:a9:0e:91:
ce:73:13:00:14:e2:09:4f:46:f9:ce:70:48:75:f8:
62:39:65:03:50:a5:1a:d3:85:3c:68:4b:4f:63:f9:
13:4c:c7:dc:80:f2:2d:a8:f0:ca:55:66:5e:1e:31:
9c:fc:21:96:f5:21:e1:97:d9:fa:21:a8:4b:e8:c7:
d4:8a:d8:96:d8:c2:43:0c:7e:db:30:44:79:45:5a:
6d:4f:8d:ab:00:2a:b4:a9:44:21:da:df:19:18:10:
09:fc:d5:5a:57:09:a7:e9:19:ce:12:85:dc:d1:f8:
4f:83:a1:52:be:0f:ec:bc:38:a8:f2:14:5a:6e:ac:
c0:cd:1c:12:ae:ed:02:a1:ad:f8:c8:c5:61:ee:bb:
f9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:61:FD:20:90:3F:16:9D:1D:7C:AA:A7:F7:93:53:24:D5:7C:EE:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/656f1300-3190-393e-ab49-1f05e75221d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:4d:b5:30:97:04:9e:ae:a2:fc:a1:a6:13:ad:f9:16:c3:66:
eb:20:f0:3d:2e:8c:31:29:6c:45:e8:62:5f:81:42:b3:26:47:
52:f3:d6:3a:a4:16:62:f8:c2:d1:b2:17:ec:d2:63:46:3a:d8:
47:04:be:d1:ba:27:4a:05:85:e1:a0:96:06:b6:d1:5e:3c:92:
71:b0:30:36:89:f7:68:88:9b:87:e2:df:59:ba:09:81:60:48:
e8:51:0a:37:84:45:8e:ca:51:32:45:0b:6f:0d:69:c0:4e:aa:
a3:20:13:e4:76:e0:30:d0:0a:20:82:ca:6f:66:9e:53:35:fe:
96:55:3f:6c:f2:01:e9:a6:53:75:77:74:45:6b:e0:f5:0c:b0:
40:9d:47:ef:c1:2f:ae:91:ee:29:1c:00:b0:dd:cf:0d:2f:31:
9d:0a:d9:6d:06:c3:b2:a5:48:6b:b7:68:33:b8:78:de:eb:63:
8a:bd:82:8c:46:99:80:67:22:e7:8c:48:51:37:a3:4c:2a:2a:
95:89:67:19:c3:65:89:75:8d:ba:8f:89:68:98:2d:71:1a:d2:
62:c8:c6:67:03:39:03:cb:7e:d8:a6:1a:ed:55:29:14:a5:8c:
0d:5f:a3:2a:0c:ef:f8:bd:2d:ea:87:80:41:8e:21:59:11:fa:
67:68:b4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:59 2025 by rpki-client