Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ebf422f-a7e0-336c-8f4a-a34513db53bb.roa
File: 6ebf422f-a7e0-336c-8f4a-a34513db53bb.roa (raw, json)
Hash identifier: JqVjJtuYLfaB6scPGR9J0VkIMOQbVQhi8xAwAjU82jc=
Subject key identifier: 82:25:FC:0C:A3:E3:84:38:15:90:29:99:9B:98:64:C8:43:C6:11:D3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E468B42983FB81876AB02A000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ebf422f-a7e0-336c-8f4a-a34513db53bb.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:46:8b:42:98:3f:b8:18:76:ab:02:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=bc381def-4115-4b47-a037-c3e2f86fd85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:53:95:4d:8d:d0:24:34:f6:25:df:9a:87:
4a:32:43:db:57:34:0c:33:21:40:52:51:ee:ec:44:
61:ce:76:a5:0a:84:57:5d:a6:a0:be:ac:34:62:77:
9d:4d:66:8e:c5:6c:ac:73:20:81:63:a6:c0:9a:bf:
04:97:ed:28:d3:e6:b2:05:50:5e:50:d3:81:c5:cc:
c6:cf:d4:b9:aa:b1:a6:f6:0b:90:09:03:62:80:62:
9e:e4:03:ec:69:00:17:7a:97:31:9a:79:f5:69:f9:
2e:07:77:b1:ff:97:a0:a0:65:d5:d8:28:39:3c:af:
c2:6b:a2:4c:f6:19:f8:3a:62:5f:02:78:32:ad:07:
b5:23:3e:c5:28:3c:4c:a1:f2:c2:5f:c4:24:6e:23:
07:fa:0d:de:45:84:b3:fe:86:77:f3:7d:ef:9d:92:
ad:77:4e:d3:b9:47:a7:7f:2b:7d:17:98:93:56:92:
83:22:d1:28:a3:63:34:eb:0e:95:18:8a:40:ee:bc:
2a:a4:1b:17:b8:b1:e4:10:37:83:ca:12:02:c1:09:
fc:7d:b8:02:57:0a:60:2a:fe:58:9b:be:3c:25:c4:
73:a2:15:60:ac:56:c2:9d:97:55:e7:62:4f:76:0c:
55:63:3c:58:b0:05:e9:2d:aa:65:b7:c5:ca:66:c1:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:25:FC:0C:A3:E3:84:38:15:90:29:99:9B:98:64:C8:43:C6:11:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ebf422f-a7e0-336c-8f4a-a34513db53bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:86:8d:56:66:66:28:b5:13:10:e5:ac:37:1d:3e:a3:3c:93:
5b:80:b2:29:ce:d9:9e:05:09:96:81:dd:0c:5d:6e:73:c1:91:
f4:66:87:ea:fd:40:45:5a:52:d1:0a:6f:e2:0e:46:bb:3d:ad:
f8:db:cc:62:fe:2a:fd:62:59:a0:0d:a5:73:b7:b9:70:38:0b:
6e:b3:a8:0b:03:d4:bc:50:86:94:26:68:f3:5b:53:cd:fd:7d:
6c:a2:69:ca:1a:36:8b:9a:33:f6:c6:d8:e8:69:88:29:de:6d:
b7:27:b1:dd:fa:07:28:2f:ab:8a:26:01:1f:6c:41:de:cb:60:
5b:87:d3:be:eb:3f:7a:86:a0:2b:c6:db:53:55:a9:07:32:09:
68:58:93:fb:68:e4:29:ff:e0:8c:c8:f3:bd:22:26:ef:43:0e:
e6:49:a8:c9:9d:4e:32:40:c6:a2:20:d0:87:57:1a:9d:2a:d1:
ab:00:a2:ed:22:1a:78:16:c7:eb:01:bc:91:d8:bc:d4:cf:e5:
15:99:b7:2d:0a:40:8b:43:64:dc:d4:f2:e6:41:df:ec:0e:c0:
bd:4e:c2:bf:80:32:71:93:b4:70:77:04:20:14:7e:dd:3a:8e:
0f:e2:7f:74:77:0f:ba:97:30:23:0f:72:df:8e:09:ed:dc:fd:
2c:9f:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:02 2025 by rpki-client