Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a8dd795-1fb8-315b-8735-dfeebd3704dd.roa
File: 7a8dd795-1fb8-315b-8735-dfeebd3704dd.roa (raw, json)
Hash identifier: Js1xpa7zuDv/7xCdotqa5jY5fdZRkB9T24ho9Lp9aGY=
Subject key identifier: 70:75:DF:F6:BF:EE:BD:EB:60:74:A5:C0:83:C3:A8:B9:DC:C3:C2:57
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584044AD1AD19322C09822F832C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a8dd795-1fb8-315b-8735-dfeebd3704dd.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 99.78.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:44:ad:1a:d1:93:22:c0:98:22:f8:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=abef7860-932f-4680-9681-0bc029b23870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fe:24:c0:be:60:be:a9:b8:50:2b:26:b6:5f:
25:b3:ba:3f:46:f1:a9:9f:75:7c:96:32:3a:5e:6b:
3f:1a:42:f9:a9:3d:50:cd:9d:1e:89:b2:35:6d:7c:
96:4d:21:43:bb:49:79:2e:ca:93:34:5d:9a:f4:aa:
1b:1d:ba:9a:ed:9b:6c:34:5a:b5:19:61:6c:82:26:
01:0d:d1:6b:b6:91:e9:0a:42:29:61:82:38:bf:58:
c2:e3:97:f8:48:01:08:27:61:af:77:f8:f2:80:03:
1a:e2:49:51:39:9b:c9:f9:7a:c3:60:9b:14:ee:43:
8a:47:34:5e:6b:bd:a3:68:60:05:52:d0:66:70:47:
92:28:49:5d:14:3a:ae:2e:34:12:b2:21:2d:41:92:
0c:6f:0a:63:d0:3a:e2:f5:d4:af:55:1d:2c:b9:6d:
a9:43:32:fd:ea:4e:d9:02:36:21:e5:17:c0:27:19:
d3:cc:13:40:6d:a6:bd:01:0b:5a:5a:9d:79:3b:ff:
32:ec:53:d3:45:5a:d2:c0:60:13:7a:d6:31:0c:26:
7c:cf:4c:4c:99:8f:65:01:6b:bb:86:10:60:25:40:
eb:fe:a0:4d:8c:86:0e:b9:51:bd:21:51:01:ad:0f:
0f:17:16:42:7e:6f:00:06:66:16:2e:8c:9b:4c:0c:
9f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:75:DF:F6:BF:EE:BD:EB:60:74:A5:C0:83:C3:A8:B9:DC:C3:C2:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a8dd795-1fb8-315b-8735-dfeebd3704dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.78.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:c3:d0:f1:c1:3d:8b:67:2a:77:17:3d:4e:d1:db:a4:37:ce:
8a:eb:cd:fe:1e:b8:57:7b:fb:92:5d:bc:cc:bc:82:d0:03:4c:
8b:9d:12:d5:23:98:14:36:6f:58:29:f2:5f:c6:f4:a9:e0:b1:
78:cb:3c:19:b9:41:87:55:2d:91:bf:90:81:19:3d:e9:90:4f:
78:f9:89:61:19:88:f9:c3:75:de:c3:b1:2a:00:1b:2e:ec:ea:
72:8d:38:98:66:bb:d8:85:1c:d3:7b:58:29:69:cf:c1:e6:cc:
e8:08:57:b0:35:b1:11:12:f2:8c:34:08:51:fc:6b:31:fb:ba:
6b:b4:6d:32:6b:24:45:b6:0a:b9:06:2f:ee:0a:c6:7f:52:13:
39:0b:93:e2:e4:2c:3a:e8:66:b8:52:3e:a6:c5:ab:a4:cd:44:
d4:2f:6a:f0:be:d2:2b:d4:c8:d4:99:c1:b4:13:98:29:bf:a9:
e1:9f:e6:f8:e5:2b:fd:05:d0:ad:2f:bc:54:1d:11:53:8f:ab:
f0:fc:ff:64:4d:dc:8a:90:42:ef:7a:e5:5c:b6:de:33:06:c9:
6a:9c:7a:03:23:01:ba:2d:d1:e3:4d:c9:4a:f4:b0:b1:1a:55:
21:41:d8:55:11:bf:09:f9:bf:8c:8f:19:fe:36:91:81:4b:3a:
17:6c:ab:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:31 2025 by rpki-client