Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70e12e67-f976-3f4f-99c4-5d6c59a6d33c.roa
File: 70e12e67-f976-3f4f-99c4-5d6c59a6d33c.roa (raw, json)
Hash identifier: k7rLshvKwHXGiWHsgoG6dnKKig+8Ighr8S+pqjfZy7k=
Subject key identifier: 08:0D:97:90:54:57:DA:25:88:CC:A0:AF:3D:56:5C:BD:27:4D:49:72
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F55B14A7689BC38B59B3E0C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70e12e67-f976-3f4f-99c4-5d6c59a6d33c.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:55:b1:4a:76:89:bc:38:b5:9b:3e:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=e580f415-49ee-4c53-9ca1-36437f008a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:05:8c:e4:d7:16:a2:75:3b:eb:71:29:89:2d:
8d:b7:3d:53:56:db:da:ef:16:cb:65:67:fb:05:65:
69:6f:61:da:d3:be:f0:e5:3b:51:89:4a:a5:5d:7d:
fb:87:1e:28:bd:5a:96:91:dd:3c:df:08:2f:6d:b2:
40:34:0e:0e:20:67:ff:28:a4:99:e7:b6:93:80:64:
9a:33:fd:8b:9f:11:52:36:28:30:4b:da:2e:9e:35:
a8:a4:ad:7b:27:64:78:da:a7:09:ea:20:b6:17:dd:
2e:50:0d:31:e6:d3:cd:57:cc:e4:f9:24:ae:8a:95:
7a:9c:36:dc:c1:aa:35:c0:af:72:e5:19:5f:22:23:
80:47:b0:c0:25:0c:d9:b1:94:d0:40:dc:ad:07:31:
f0:60:5e:66:72:51:37:96:4f:af:3d:41:62:7f:42:
37:ed:55:99:81:ed:a3:85:c0:15:ee:71:b0:f1:72:
09:7a:e9:0b:c4:e3:8b:ec:40:e8:9b:21:98:62:12:
d6:e8:ea:44:76:34:6e:d0:7d:29:1a:9c:bf:f9:4b:
f6:9f:e1:fe:83:8c:9b:31:8d:3f:bf:14:71:bf:59:
df:96:58:2d:ae:72:9d:a6:7a:61:a7:42:e7:ad:8d:
5f:25:1f:88:ce:b0:03:47:de:e1:f6:31:87:15:ee:
bc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0D:97:90:54:57:DA:25:88:CC:A0:AF:3D:56:5C:BD:27:4D:49:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70e12e67-f976-3f4f-99c4-5d6c59a6d33c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:95:e7:93:4b:5d:88:66:0c:20:d8:6b:72:7c:db:fc:57:b7:
a1:c7:de:99:4b:3d:79:2c:76:32:7c:48:d3:28:e0:75:51:3b:
77:56:79:15:bc:e2:aa:ee:58:7e:3b:a7:1d:8f:52:38:77:99:
e9:77:01:6d:72:a8:be:6c:07:1c:08:f5:bd:3f:92:d0:3d:47:
f6:f1:71:64:e6:c8:8b:09:13:2b:35:3d:07:3e:83:62:f2:07:
68:8e:bd:09:58:29:2f:b9:a8:38:79:c3:0d:0f:fe:bb:0a:27:
28:93:95:c9:f0:9e:c8:ae:d8:6f:f9:06:75:d7:05:e6:88:32:
a7:9d:d2:12:c0:22:04:e3:b2:74:61:92:d2:d5:48:50:f2:ed:
da:57:b0:f5:f0:c1:34:d5:5d:17:18:3d:13:ba:55:d5:88:0f:
0e:be:fb:e1:d5:89:d6:37:b0:48:65:b3:5d:9e:f9:b0:38:07:
40:0f:66:f7:6c:d9:3a:c6:c9:9e:c6:f5:1c:e8:6d:ab:e3:86:
8a:fb:03:98:95:c3:de:8d:76:26:48:0a:08:d1:ee:e0:34:21:
34:16:f7:94:cb:2a:f3:2c:0f:9e:e9:9a:62:6b:dc:6b:e4:23:
d7:ac:a2:55:8c:60:b2:c5:de:84:8f:8a:cb:ee:e7:d2:f5:e4:
30:bb:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:53:10 2025 by rpki-client