Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72c1965b-91f7-3ec8-9fde-6e3eed75630e.roa
File: 72c1965b-91f7-3ec8-9fde-6e3eed75630e.roa (raw, json)
Hash identifier: KMizaGfpKCmI4OuW9lX35U+CM7CjnkgPs/fy0xcjsp4=
Subject key identifier: CA:10:05:B8:FA:C4:01:B4:54:E6:8E:9A:D2:C5:E5:41:A4:80:28:A1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584073BA790B964B73A9DD257DC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72c1965b-91f7-3ec8-9fde-6e3eed75630e.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 198.13.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:ba:79:0b:96:4b:73:a9:dd:25:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=81d55ca4-7d59-4784-a68b-d368d5c35f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:d6:d0:b3:77:76:65:51:48:9e:7d:62:a4:
ff:dc:e0:d5:52:83:be:dd:6f:f1:81:6d:f2:85:99:
dc:2d:02:5f:a6:89:15:55:0a:da:ce:36:0c:26:8b:
1f:59:9e:43:43:c8:b3:82:30:af:12:6a:cb:6d:59:
24:c7:51:8c:2b:c5:1c:9c:aa:4b:6b:3b:f4:a9:ba:
8d:6a:fe:7c:c7:ec:c3:6f:e7:55:f6:b7:f0:9e:41:
70:37:c4:70:5f:55:5f:18:39:75:82:95:98:c2:68:
a7:fe:c4:a1:a6:f9:6c:ca:e8:3e:55:f2:7e:48:f3:
ed:12:4a:a3:a6:b6:83:6a:79:99:1c:0e:10:6f:9e:
2f:74:28:c7:40:4b:88:21:7c:ff:d6:e2:13:c5:31:
6e:b9:ac:9c:51:57:00:d4:94:15:27:a9:23:aa:1e:
a0:2b:9f:26:88:e4:95:8c:d7:e3:94:db:2a:21:21:
34:86:86:51:fe:9b:9a:ac:2b:ea:5e:3e:39:0c:7b:
78:89:2d:af:63:2e:54:fe:a4:93:3b:8e:c2:56:a6:
c9:1b:75:d5:04:f6:68:14:a3:38:d8:4e:38:be:31:
1f:62:e1:d9:0a:ec:f9:7c:88:d4:d5:28:c1:44:65:
36:1e:d5:d7:60:ed:52:93:39:15:b0:1b:37:ba:94:
7a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:10:05:B8:FA:C4:01:B4:54:E6:8E:9A:D2:C5:E5:41:A4:80:28:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72c1965b-91f7-3ec8-9fde-6e3eed75630e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.13.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:52:f6:8e:6c:8f:70:35:d6:16:34:e2:63:22:86:14:24:80:
85:c3:6d:e8:55:4c:dd:d1:c1:d2:b7:f9:9a:bc:a3:f3:9c:e2:
f7:27:5c:3c:60:25:b4:dd:40:d7:80:fc:2e:69:61:33:b6:dd:
5f:94:60:01:a8:ce:95:91:db:e2:9c:ae:e6:64:f4:18:45:0e:
a6:5d:7b:3f:eb:78:65:81:c9:a2:f6:44:35:0f:5b:3e:59:f9:
09:33:48:75:70:98:8f:63:b8:d9:de:ab:ef:f0:69:a1:7f:6e:
c1:7f:ba:5e:dc:6c:68:59:81:bf:33:73:36:03:b4:cf:66:ab:
e9:44:9b:60:8b:d3:65:89:5c:f0:a8:46:c7:0d:8f:9d:fb:a3:
57:7e:52:e6:c0:85:47:75:3f:99:e1:56:19:23:cf:de:c5:d0:
d1:96:9f:9b:93:97:85:81:6d:06:29:71:e3:e4:c6:c2:68:58:
66:d9:c4:52:22:22:39:75:d9:89:ba:39:d5:1e:28:d7:6c:d0:
c7:fe:ca:d0:21:d4:db:8e:ec:8a:63:45:06:49:5a:80:5d:0f:
e0:21:d7:4c:c1:5e:18:57:38:ff:0d:3b:d6:c3:58:99:ab:d5:
47:e7:0f:6f:63:3e:84:10:ca:b0:c9:ee:84:e3:08:61:54:f6:
39:bf:e4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:58 2025 by rpki-client