Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7aac01be-442a-302a-bf71-986917d16629.roa
File: 7aac01be-442a-302a-bf71-986917d16629.roa (raw, json)
Hash identifier: BX7Vx1scfx1EAeJxISNYBuCypXD4Rf8i3eJVDrOOAJE=
Subject key identifier: 45:87:31:D8:DC:17:11:B9:8B:DD:82:33:3B:7E:BD:93:DC:E6:89:37
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DD195327D94E833D56B8CA480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7aac01be-442a-302a-bf71-986917d16629.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 108.128.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d1:95:32:7d:94:e8:33:d5:6b:8c:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=7aabf4aa-93b0-411d-a5d4-9eb5f1f43238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:86:22:1a:51:ea:b7:a4:6d:f8:d1:7c:a7:80:
4c:28:3e:29:b6:ca:de:dc:f2:ed:22:71:e9:27:7d:
ae:f7:01:0f:68:22:56:a6:b2:b7:11:ea:94:5d:7b:
f2:75:df:07:90:fc:b1:b4:23:da:79:76:6b:76:e9:
c7:67:fd:f2:4d:2d:83:74:9c:70:24:b7:86:2e:d2:
2a:94:1b:4b:d8:08:36:06:18:0b:eb:3b:6f:b7:46:
85:30:84:bf:17:13:a6:cc:d0:92:e4:1f:3b:7f:a6:
b3:7a:84:65:a7:83:6e:76:3d:f3:3f:34:43:86:ef:
1c:33:34:d2:ca:03:0d:14:0c:0b:a2:af:fd:17:db:
27:58:09:a5:9f:64:45:0a:2e:bb:18:57:61:d9:a0:
43:34:5d:1e:ea:b1:bc:a4:83:51:bd:1a:39:96:36:
97:70:e0:86:18:6c:05:30:e5:a0:c5:05:dc:e0:b2:
e6:59:35:89:c6:e9:28:94:36:db:ff:f6:21:e9:cf:
1a:9f:db:0e:e7:0e:7c:f5:7c:fe:bd:d4:55:8f:ad:
9e:b4:37:a2:6c:55:cb:9b:3c:a0:cb:17:ab:0a:53:
a5:88:6a:d5:f9:4b:15:d4:ce:bc:61:dc:48:7a:3b:
f2:57:3c:29:33:26:d1:53:f1:fa:a9:6a:67:3d:0d:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:87:31:D8:DC:17:11:B9:8B:DD:82:33:3B:7E:BD:93:DC:E6:89:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7aac01be-442a-302a-bf71-986917d16629.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.128.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:74:4b:b3:5d:4e:4b:ee:f6:21:ef:64:e2:09:70:2e:1c:27:
6c:70:31:e1:33:e1:93:5b:0b:f9:48:a2:6e:c4:28:82:32:a1:
c4:4c:6d:a1:7c:1a:16:e3:35:d5:cb:c1:48:f0:75:51:43:cd:
ca:3d:2c:01:53:a3:5e:3d:5e:94:7e:61:6e:98:4d:2c:c5:b2:
c0:8a:68:55:bf:3e:5e:e9:b1:3b:f6:dd:0f:f3:ed:42:0b:4b:
2f:5a:e8:0a:f3:21:3a:db:c8:d4:48:b0:82:33:ac:1f:68:05:
7d:1d:7a:e0:f9:4d:65:d3:ba:4e:83:5f:85:d7:e3:52:36:95:
a1:58:ad:d3:6a:d4:1e:3b:79:b8:0c:37:fb:38:8c:cc:06:66:
91:d2:04:73:c4:ad:d8:b8:8a:98:88:60:d3:17:aa:fe:b5:34:
80:e1:ed:3a:12:e9:a5:be:47:b8:9f:20:be:b9:7f:41:f8:a0:
ec:af:1e:1d:a3:3f:57:d2:5f:85:7f:17:f3:55:c7:64:82:f2:
ec:f0:a8:29:43:ba:1f:7f:3d:c9:ff:f0:73:d7:2e:08:c1:c1:
69:9a:1a:8a:8e:dd:77:98:0a:d7:6c:a5:78:56:f2:ab:70:fd:
f4:ef:f3:bf:5d:2f:c4:f0:9f:28:45:6a:e5:fc:4e:b8:f4:1c:
55:e2:a1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:08 2025 by rpki-client