Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70b3bae4-0551-3d2a-993e-8cf79f8843ae.roa
File: 70b3bae4-0551-3d2a-993e-8cf79f8843ae.roa (raw, json)
Hash identifier: BwEaDIr/lOfi7BMUo2uMhvPOabVa2G4lchVkQu+PI6k=
Subject key identifier: 29:29:3E:03:CC:E8:DD:BA:42:E6:65:33:2E:EF:99:58:E4:29:28:BD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402B1D402A400F96C81C34CFE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70b3bae4-0551-3d2a-993e-8cf79f8843ae.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 198.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2b:1d:40:2a:40:0f:96:c8:1c:34:cf:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=02b9e004-ff6c-467b-82e2-cb4a349bd80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:1c:ce:e5:1a:fd:55:04:5e:82:23:3b:3b:
7a:1c:b1:34:e5:b5:1a:3b:f2:2e:01:e4:35:8e:f4:
b1:5c:24:ec:1e:f6:b5:e9:e1:18:d8:9d:ff:fa:62:
1e:28:ce:ff:3d:c0:1e:c7:ba:e3:b8:db:a0:c0:61:
66:be:8b:2f:bf:24:71:be:33:75:5c:31:73:8d:c9:
86:2f:5a:be:96:2e:01:8c:91:1a:7a:c0:ed:ca:7d:
4f:7d:a6:02:c1:6a:05:91:a3:01:7b:80:49:54:38:
94:af:7b:af:0a:65:f5:b7:87:fe:e4:60:b8:b8:d0:
51:a4:0e:ab:2d:53:38:18:fb:a4:bd:cb:a3:60:92:
74:bf:a3:2d:4e:c2:ed:9e:71:9b:7b:69:fa:8a:47:
c8:f5:ea:67:90:a8:a6:fc:96:07:1b:e6:9a:97:cc:
8a:e7:f2:df:96:a0:ba:98:60:74:79:65:2b:a8:75:
81:9c:eb:24:63:78:2c:35:5a:e5:11:9a:96:7e:ca:
cc:b6:9b:92:41:53:81:cc:5a:76:e9:03:ba:f6:3c:
55:42:78:01:9b:95:75:8f:39:02:be:0a:df:06:eb:
bd:57:bf:a9:d3:5a:ba:7a:59:f9:ec:5c:fa:2c:28:
18:70:59:48:7b:5c:f5:5d:a3:5b:dc:19:61:ba:47:
d8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:29:3E:03:CC:E8:DD:BA:42:E6:65:33:2E:EF:99:58:E4:29:28:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70b3bae4-0551-3d2a-993e-8cf79f8843ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:91:6a:a3:0b:3a:24:cc:74:9c:c0:f7:92:88:f5:33:62:20:
71:1f:3c:81:ed:ed:0d:7d:7d:9c:80:e7:64:03:67:34:b6:9c:
7d:a8:cf:de:44:70:57:8e:b7:6a:e8:ec:ce:81:12:10:ce:d7:
69:6f:bd:46:03:31:77:ef:e0:49:d7:48:9b:48:d9:22:41:99:
b7:d8:58:91:4b:63:aa:2a:e8:04:9c:13:db:2d:1b:a7:00:f2:
89:25:38:c4:c4:b2:2d:7b:50:9d:05:85:36:3d:68:27:e7:43:
8d:ae:e4:8c:dd:d6:6e:f4:fd:43:5e:57:73:ff:68:9b:f4:fd:
be:0d:96:b6:12:aa:a6:ca:89:e8:c4:62:ae:a7:7e:a0:7e:e9:
75:be:4e:dd:aa:76:2c:a5:06:1c:db:4e:85:bc:a7:5a:bf:2b:
e4:fc:60:1d:4e:bc:68:1e:cc:97:d7:1e:d3:75:73:35:a2:b1:
3c:46:53:13:b8:8e:dd:ed:f1:1b:9c:55:c8:4d:c5:45:09:1b:
1b:0d:a2:93:5e:43:70:73:c5:db:85:28:d9:89:3d:a4:5c:83:
d2:f6:0e:71:3e:a3:a3:ab:0a:0a:9d:89:64:69:02:9b:38:33:
a4:d3:d1:f4:40:e6:1b:fe:af:46:1a:e7:a6:b4:62:5a:3b:56:
da:22:e3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:33 2025 by rpki-client