Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71a9b00b-caee-3477-a7da-cde11b9d628c.roa
File: 71a9b00b-caee-3477-a7da-cde11b9d628c.roa (raw, json)
Hash identifier: jeWyfE7kNyQCbszNOXR/gcm2jontB2O1Q87sNiLtwOw=
Subject key identifier: 5A:D1:8E:B7:41:EC:FC:AC:4C:CC:AB:AB:9E:1F:B0:1D:DC:1B:E5:D5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DAA95B6A64D7E2C5505595300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71a9b00b-caee-3477-a7da-cde11b9d628c.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 99.87.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:aa:95:b6:a6:4d:7e:2c:55:05:59:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=ebfb823f-b368-425c-a6a1-e70796f5f228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:76:85:93:95:8d:f7:fe:f5:3f:58:af:80:
18:fd:c4:95:4d:e6:e0:e2:3d:20:25:77:62:5c:de:
80:30:cb:05:b0:73:41:ff:fd:07:eb:ef:60:b9:93:
bb:6d:1d:d7:ee:ce:64:f5:42:a5:a9:81:32:1f:fd:
43:19:b7:38:04:2f:63:c2:f8:48:8a:b4:ac:69:9b:
d6:7f:95:9b:1e:73:fa:f2:20:d7:4c:0b:1b:0b:34:
89:79:ad:e8:79:d1:39:fc:7f:b5:77:32:f5:1b:e5:
8c:41:da:42:4e:38:ed:28:27:01:c4:bc:b9:27:56:
5d:73:ba:7e:9d:17:d3:f6:05:06:71:2d:19:70:c7:
91:6d:96:8d:91:f4:57:c7:df:0a:c3:c2:1c:e5:83:
47:46:ae:50:5b:4a:87:69:d7:89:d8:d5:20:de:0d:
60:e8:52:49:40:1d:8e:25:38:10:cd:2d:94:ad:01:
be:11:99:47:8d:fc:79:d9:b2:f0:25:e7:89:9b:18:
47:6b:79:a5:7b:8e:ae:5f:5d:f1:65:f9:13:5a:33:
9b:cb:eb:a7:a5:be:04:9b:0c:1d:c9:2d:e2:23:21:
83:07:c8:52:30:8a:d6:b1:c2:20:6d:71:c0:00:da:
27:08:01:e4:c7:2e:92:18:4d:aa:88:d0:e8:7f:b9:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D1:8E:B7:41:EC:FC:AC:4C:CC:AB:AB:9E:1F:B0:1D:DC:1B:E5:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71a9b00b-caee-3477-a7da-cde11b9d628c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.87.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:1c:55:4e:0f:98:e4:d6:1b:14:ab:3b:84:5b:6a:a3:9e:60:
46:f4:61:22:2d:04:d0:d4:be:d3:15:83:2a:fa:08:5c:45:ff:
0a:9b:cf:de:b1:cb:45:cf:b3:5a:e6:0f:0a:6e:01:2a:a4:eb:
e1:43:90:ab:54:97:f0:d7:f9:5a:d9:09:0a:08:48:94:6b:9f:
97:a0:0f:4c:7e:29:89:4d:9a:14:9e:81:55:a7:94:da:cf:b5:
45:d4:97:93:ea:d8:ca:a5:54:e5:d6:a9:0d:6f:4a:6d:7a:9e:
df:26:ca:8a:6d:5f:da:53:52:96:3b:2d:93:09:bd:50:7c:a0:
96:6b:43:f8:91:b6:bb:da:a9:3f:63:ca:27:f9:8f:5c:21:2b:
64:fb:0c:8b:cb:c7:71:58:44:0e:36:d7:2a:99:be:a9:96:95:
d2:16:67:80:b8:41:2f:01:00:58:57:02:37:45:6a:73:0b:57:
46:51:56:03:b3:f9:f6:f9:4b:95:a7:58:05:e5:28:6c:39:bb:
7d:f4:06:55:2b:33:34:3c:3e:d7:17:7b:5d:6f:2a:fc:50:f6:
01:5e:19:ad:ce:12:67:9a:50:87:89:84:39:6f:3b:d8:8c:0a:
a5:7e:1e:99:b4:c2:8c:7a:28:62:65:b8:23:28:6d:67:9e:6d:
eb:9d:a0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:24 2025 by rpki-client