Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/684ff1a4-c48f-3bd2-b049-793c1fd51f2f.roa
File: 684ff1a4-c48f-3bd2-b049-793c1fd51f2f.roa (raw, json)
Hash identifier: zq2LI9DDU4A1AxPp08+8zfLvHdTpAgaAIgc7wVLhCj8=
Subject key identifier: 99:2B:59:1A:A2:6C:02:EF:6D:C5:B0:D2:D2:8C:25:04:B3:BC:B0:3F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D81C95F1D74F3549C8118ED00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/684ff1a4-c48f-3bd2-b049-793c1fd51f2f.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 2620:107:4000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:c9:5f:1d:74:f3:54:9c:81:18:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=df193eef-d80d-433c-8459-e28196fc0b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f5:f5:6f:63:48:c6:7e:fe:b2:9d:da:74:b7:
6c:d2:5d:fa:65:29:48:93:74:97:bc:ee:c5:cd:af:
22:99:f0:d6:3a:53:00:c2:39:e0:47:3d:fa:ee:90:
eb:e4:7f:7d:92:25:ac:c3:81:04:57:ea:56:0b:49:
16:c7:88:47:41:8c:17:47:95:bd:e9:fa:63:73:bc:
4f:97:f3:c8:ce:3d:6f:f4:bc:b4:2c:eb:66:44:4c:
1f:03:cb:12:f0:36:0f:fe:16:03:0a:5c:8b:28:0d:
9a:f1:2b:79:09:20:73:58:83:2d:bd:55:ab:67:8e:
97:0b:4f:f7:00:8b:06:8f:39:18:e7:f6:e1:e6:88:
7b:2f:e1:25:fd:3c:55:cb:4b:1a:6b:59:39:19:7f:
f2:a5:68:29:26:ea:2f:b4:be:50:08:f9:52:48:91:
cc:fd:c4:0c:a6:34:31:8a:4c:87:f9:18:48:4f:2d:
f3:55:0d:be:d3:b3:03:b8:24:6f:bf:d7:b0:23:42:
1d:02:5e:32:dc:4d:c0:e7:a5:0c:d2:b3:ae:44:03:
22:ba:fa:3c:be:d5:b5:61:87:28:53:e7:f2:fd:24:
df:54:a6:ac:e1:13:1f:32:6d:c9:08:1e:13:96:cb:
64:b6:2e:1a:62:d8:6d:e4:55:9f:68:fe:d1:c3:fc:
87:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2B:59:1A:A2:6C:02:EF:6D:C5:B0:D2:D2:8C:25:04:B3:BC:B0:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/684ff1a4-c48f-3bd2-b049-793c1fd51f2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:107:4000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:2a:b0:71:2d:6f:b5:1d:78:eb:29:d2:03:79:17:0e:f3:2e:
89:a5:92:b5:cd:35:7c:0e:36:0a:a6:58:06:d8:60:15:33:dc:
bb:81:69:3e:57:7b:3e:22:80:5d:d9:f4:2c:7a:14:bd:5b:5a:
cb:ac:9b:0b:c6:f9:cd:2e:3d:43:e1:7c:35:2e:75:1f:93:c7:
42:c6:7e:87:7d:3e:04:ea:c5:e6:0a:bb:13:db:92:97:28:05:
76:5b:75:c8:04:1a:b4:1b:80:cb:74:14:16:14:fa:de:76:f0:
dd:e4:a6:5e:2b:d3:07:07:ca:06:9e:b6:4f:e1:59:b7:85:8b:
bc:8e:a5:52:44:a8:9d:89:ef:4f:a5:c5:92:23:e5:31:25:40:
b6:9c:f7:3b:b2:6e:e7:a3:f3:c9:45:09:08:1c:6b:8b:bd:41:
0c:27:06:c1:20:cb:8b:ae:83:c0:58:a1:9e:19:cb:1e:03:6a:
2b:5b:af:9e:5f:fc:71:b2:89:de:d3:a8:e7:7b:c0:c0:9e:66:
45:50:cc:e6:be:60:6d:b2:4a:a9:e5:3e:11:c4:67:b6:17:99:
22:ae:05:21:e4:6b:d5:31:12:79:23:46:7f:2a:b6:8b:b2:d6:
30:30:19:09:7d:88:c6:33:0d:22:ee:27:11:84:51:20:dc:0c:
e4:b5:97:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:11 2025 by rpki-client