Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7230ac33-08d8-3d54-af8e-952c3dded552.roa
File: 7230ac33-08d8-3d54-af8e-952c3dded552.roa (raw, json)
Hash identifier: 9tobW5aiei8+MCZgaTjfb6ogonC1CnUc6JE1bWf0Lig=
Subject key identifier: FD:A1:C6:9E:25:49:81:D8:3E:84:18:51:BA:96:B2:72:08:5C:70:CC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E51378D00149D9A40D5899200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7230ac33-08d8-3d54-af8e-952c3dded552.roa
Signing time: Mon 20 Jun 2022 12:00:00 +0000
ROA not before: Mon 20 Jun 2022 12:00:00 +0000
ROA not after: Tue 26 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 198.13.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:51:37:8d:00:14:9d:9a:40:d5:89:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 20 12:00:00 2022 GMT
Not After : Jul 26 04:00:00 2022 GMT
Subject: CN=4b25baf1-7da6-4da5-bc47-72a8e5e27c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:86:7d:0e:d5:3a:40:7e:1f:7b:89:62:f4:bd:
af:8a:e3:ef:c6:f5:72:ce:a6:e4:2e:17:2c:da:79:
49:1e:c3:c2:53:e9:28:d7:65:63:3d:4e:76:18:a7:
28:39:31:82:c6:77:4f:2b:75:a4:57:5e:71:6c:e4:
e0:4d:93:d1:5b:dc:a7:a4:23:c3:4c:99:a8:a1:2d:
68:2f:09:66:a5:9c:be:ff:24:87:b1:8b:04:96:cd:
f7:9f:17:fd:f6:c8:51:7b:dc:1a:cd:d2:11:c7:66:
83:9c:5f:ac:34:ce:cc:09:ed:fa:79:9c:cf:c3:71:
d8:36:5b:9a:53:8d:ca:17:fd:c2:40:61:d8:55:5c:
7e:d6:35:65:be:68:aa:13:5e:ef:7a:54:7b:48:06:
93:32:d4:6b:49:19:c1:8f:72:d8:ac:b0:ca:9f:cf:
e7:61:fc:b0:1f:6e:96:10:a7:25:8b:ea:24:b7:5b:
f3:36:ce:94:4d:9c:8e:1e:10:e1:2b:e9:ad:18:cf:
e9:83:aa:53:1d:92:2f:40:05:20:b6:26:fd:a3:33:
d7:26:54:43:56:73:2d:b5:7f:3e:52:55:5b:ef:cf:
a0:b8:0e:90:fe:7b:2d:5c:71:f9:35:d3:2e:05:59:
3f:1c:c5:b7:2a:ca:89:75:65:17:2c:b3:42:ee:87:
86:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A1:C6:9E:25:49:81:D8:3E:84:18:51:BA:96:B2:72:08:5C:70:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7230ac33-08d8-3d54-af8e-952c3dded552.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.13.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:18:58:fe:c0:60:de:7d:99:20:46:6f:9a:dd:fa:e1:fe:7f:
52:a0:ea:74:96:bd:bf:1c:91:27:13:ce:e4:46:15:99:ed:05:
2a:cd:6e:c1:6c:7f:fd:f8:90:8a:f3:50:9f:92:a6:f5:d8:4a:
f7:bb:bc:db:96:21:6b:d5:18:e0:b4:cb:78:93:94:77:fa:5e:
24:4c:43:e0:c0:6d:b2:a8:ec:93:63:9c:49:ac:5e:d3:e8:9d:
b1:8d:2b:19:94:07:ec:c7:99:b0:30:89:ce:fb:04:8a:93:11:
2e:0a:6f:15:58:84:96:fd:24:96:ba:e9:f7:2d:75:cf:ca:d2:
a9:cd:c5:a7:1a:b6:0a:e8:96:6e:31:6f:d4:59:b9:da:56:2d:
d8:a8:35:67:f0:a1:a0:0f:07:73:3e:30:5f:00:2c:b3:72:0c:
f8:d5:1d:fb:f7:f7:43:bc:7e:d0:3e:88:72:1f:d1:cb:77:57:
77:0c:a5:fb:64:f6:81:28:c6:3d:23:d6:c1:d9:10:f7:cd:ce:
9e:dd:81:fa:b3:18:80:82:b1:db:90:cc:68:08:49:67:2e:57:
db:3c:50:12:8c:ef:65:55:6a:52:c9:27:f3:c7:dc:d8:3e:0b:
8d:4b:a8:f5:2e:95:b0:63:e4:6a:34:5a:d9:0c:fc:71:fc:47:
8c:7d:88:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:19:58 2025 by rpki-client