Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6cd9805c-c81e-34f4-90ca-95c752910fee.roa
File: 6cd9805c-c81e-34f4-90ca-95c752910fee.roa (raw, json)
Hash identifier: YrcaLFwmoEoNs2BwBCV90fCRfuh2vkepXGH5qzfElYI=
Subject key identifier: D1:37:AA:8D:7E:08:18:95:82:05:28:F7:6B:7E:63:69:82:71:5F:DF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FFFEDE531E732986CFA1C1B20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6cd9805c-c81e-34f4-90ca-95c752910fee.roa
Signing time: Tue 22 Nov 2022 12:00:00 +0000
ROA not before: Tue 22 Nov 2022 12:00:00 +0000
ROA not after: Wed 28 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 198.14.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ff:ed:e5:31:e7:32:98:6c:fa:1c:1b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 22 12:00:00 2022 GMT
Not After : Dec 28 05:00:00 2022 GMT
Subject: CN=5ff48cb7-5aaf-4022-8f2d-35d027554779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8a:66:6e:79:a8:9a:b8:19:82:3d:95:f8:ab:
c0:47:b5:cd:c3:a6:35:aa:1e:18:5e:f8:45:9e:dc:
c8:cb:15:5d:4b:fc:04:16:7b:45:b5:f3:25:f7:41:
11:69:49:15:80:21:f1:ab:9e:a0:2b:82:7e:23:b7:
08:cb:8f:25:2e:32:56:02:2b:5f:1c:37:b4:88:55:
c4:ac:8f:01:8f:46:61:7b:48:c6:af:15:46:2d:01:
c6:e1:d9:97:fd:35:3a:18:90:2a:86:fe:d3:89:37:
1a:0f:11:90:6e:d3:71:9a:e1:df:0b:e9:6a:44:68:
b0:88:1e:e7:25:80:ab:8e:e2:65:20:3d:cd:a2:93:
6e:fc:95:f2:bf:c9:d2:de:54:cd:f0:a9:34:1d:28:
8c:99:5f:bb:87:ed:7d:ec:22:38:45:91:a3:d2:d8:
ed:76:e1:5c:f2:20:53:82:86:fa:ed:7d:b0:1c:fd:
d2:4d:86:a1:ff:45:1e:7e:8f:97:19:ba:56:9d:f6:
96:59:2c:81:04:fd:91:be:fd:bd:5b:84:f0:54:b4:
cc:f2:1d:ab:ef:99:0e:90:14:30:40:70:96:d4:95:
e1:15:0f:b9:54:bd:e7:84:d3:2e:47:34:98:1f:90:
53:84:01:f7:39:2c:14:c1:be:7d:06:bc:c1:29:26:
14:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:37:AA:8D:7E:08:18:95:82:05:28:F7:6B:7E:63:69:82:71:5F:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6cd9805c-c81e-34f4-90ca-95c752910fee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.14.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:74:26:2b:07:0e:42:76:04:ec:39:a0:b8:57:e9:0f:2a:b1:
da:ed:2d:7b:39:7f:f5:c1:3c:ed:5f:fd:12:2a:fe:99:13:36:
b8:c4:ab:8f:42:6f:82:55:9e:2f:32:b7:f7:e7:b6:6e:b1:bc:
20:74:33:b9:f5:4e:3f:99:f9:71:67:17:13:75:e6:fe:ff:fa:
6e:4c:8c:4e:2f:f3:79:89:67:9a:f8:28:d8:f2:9f:39:74:8c:
c2:14:c9:64:94:af:a0:91:a6:9a:e9:e4:8d:3f:2d:85:67:2d:
de:03:c7:bc:17:ef:49:ef:d5:1d:27:e5:01:54:47:ee:fa:e8:
bc:37:b8:2e:cf:04:9d:8d:bc:a0:58:ab:f8:88:d2:6e:55:96:
1c:71:5b:f8:f9:45:df:2e:b5:f8:8f:f4:f3:ee:d0:27:22:e0:
d2:38:09:39:64:c8:73:5c:5d:ac:9d:22:fa:44:a0:8b:d6:48:
d3:1e:10:20:23:fc:57:7b:26:7e:56:30:6c:fa:ba:04:89:e6:
37:fb:64:5d:f7:70:55:63:fd:6b:2a:bb:21:f6:97:bb:06:bc:
4f:64:67:1b:0d:04:f0:db:d2:30:57:91:2e:dc:03:04:89:7c:
20:bb:74:e0:00:b5:c6:eb:98:7d:9d:de:b5:b1:d2:ae:82:4e:
e5:88:ee:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:43 2025 by rpki-client