Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a37f88f-d963-3896-a8a0-301feaf39b58.roa
File: 7a37f88f-d963-3896-a8a0-301feaf39b58.roa (raw, json)
Hash identifier: RzBDZfK5idBMI72dNYYruscZFH6swlWIdDySXcgZMi0=
Subject key identifier: D4:AC:AB:01:FB:77:7F:4D:D8:AA:7D:37:F8:B3:34:C7:82:97:28:AD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D8143874A2CEEF2F1C8816800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a37f88f-d963-3896-a8a0-301feaf39b58.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 99.78.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:43:87:4a:2c:ee:f2:f1:c8:81:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=654a6ccf-97e0-4295-a1e3-69405df4d911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:df:b6:5f:92:4b:29:1d:94:8e:4b:93:3c:
de:8c:6e:c4:19:b2:17:a3:76:93:ba:eb:4f:bf:1c:
4c:16:7b:4e:6a:e0:4c:24:8a:44:ae:b7:22:e7:ad:
11:8f:55:0b:88:9a:d3:df:4a:86:7d:cf:bc:73:b4:
bc:6f:37:58:96:97:97:36:45:be:a5:2b:36:ef:33:
f2:38:17:cf:16:53:bb:99:8c:8c:4e:15:c0:6b:4a:
b5:8f:7e:ca:f9:fd:d3:20:c1:92:ee:0c:87:d7:02:
1e:ab:c9:8c:1b:71:cf:df:e3:4e:d4:a8:46:74:34:
fb:26:2d:53:63:35:4e:db:c1:12:96:06:38:4c:14:
8d:a9:d4:7b:a0:83:06:cd:05:1a:f2:cf:c7:b0:44:
d5:70:b9:9a:1b:96:e8:aa:17:a5:7e:35:41:c7:de:
a9:62:0f:cd:ec:70:98:02:78:33:e2:af:50:94:c4:
e3:30:ca:56:b6:a1:7d:8c:c5:83:65:ef:01:59:d2:
03:3a:7d:a6:a4:20:a4:ed:37:26:46:fe:0e:ea:97:
8c:9c:15:89:15:e2:04:7d:35:a9:98:8e:29:6e:6f:
45:bc:55:af:29:aa:24:08:6d:f7:d0:07:dd:f4:b9:
6e:73:f1:8b:36:a2:fd:93:ea:24:ca:87:30:52:ae:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AC:AB:01:FB:77:7F:4D:D8:AA:7D:37:F8:B3:34:C7:82:97:28:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a37f88f-d963-3896-a8a0-301feaf39b58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.78.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:93:2b:43:6c:d6:a9:a5:80:29:1c:cd:13:33:8b:62:e8:c3:
6f:80:fc:91:55:25:b8:c9:41:18:69:e3:50:3d:c7:db:18:af:
9d:56:af:bf:38:5b:43:80:75:75:2e:46:67:bc:25:39:05:e2:
87:f7:38:39:88:71:38:96:40:c4:ee:a4:ab:83:67:5d:28:eb:
92:a0:be:84:d4:b5:1c:5e:8b:d6:b1:d9:b7:4c:31:71:96:c7:
58:b6:f4:5c:5f:d9:ca:aa:1e:88:9d:fe:fc:0c:fa:34:43:a7:
1a:88:30:e1:aa:e6:72:e4:1e:55:71:b6:2a:7c:a4:19:2c:ec:
0a:07:14:c0:cb:41:0f:e3:34:0a:c3:12:36:af:0d:ee:cd:ca:
68:ed:af:f2:5c:7c:b0:24:2a:83:a1:42:89:cd:9a:8e:39:8d:
88:68:ac:96:b2:65:4d:e5:5c:4c:3b:69:5c:e6:fd:e1:5c:85:
fb:f3:cc:e4:1a:e1:ea:16:ca:e3:c6:4b:06:6f:6c:9c:34:5e:
c7:ed:68:ab:08:4b:f2:bb:90:2b:63:0b:50:13:e7:45:60:d6:
a0:90:c6:a2:15:60:96:9e:00:50:4d:d1:7b:46:d8:71:d8:fd:
a0:da:d4:fb:bf:64:94:6a:a7:41:f1:c0:31:7a:e8:61:cb:26:
34:6e:8e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:53 2025 by rpki-client