Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/800ba987-3ccc-346b-9628-f4297f0ac578.roa
File: 800ba987-3ccc-346b-9628-f4297f0ac578.roa (raw, json)
Hash identifier: ReeQKTnrFHusK/V7ueu+ZjJraawQ4XJZt7QLhlIrdn0=
Subject key identifier: 11:A2:8F:DC:43:96:B5:ED:F7:9E:69:3C:20:5A:D5:73:FA:60:48:13
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EE2FF8515D3F54F1399FC4F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/800ba987-3ccc-346b-9628-f4297f0ac578.roa
Signing time: Fri 12 Aug 2022 14:42:08 +0000
ROA not before: Fri 12 Aug 2022 14:42:08 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e2:ff:85:15:d3:f5:4f:13:99:fc:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 12 14:42:08 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=815f3b74-dba3-4788-88a8-ade51118dc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:94:36:fd:11:d8:30:96:e1:6e:98:22:c0:2e:
1b:f5:ae:b0:65:77:97:e0:7f:0d:61:b8:33:86:63:
84:28:da:03:c6:e3:cd:2e:34:27:5c:80:a3:7e:68:
ac:f2:5b:d4:5a:13:4d:75:39:9d:17:ed:11:b7:03:
18:31:15:95:2b:c9:7a:a6:76:45:ab:60:b5:6f:c9:
d9:80:6b:4e:7c:4e:97:92:95:cc:61:89:0e:16:36:
80:d4:21:6c:40:ec:eb:4f:11:20:e4:70:66:1c:55:
31:8c:68:02:a0:9e:7f:ca:8b:00:c0:5e:13:df:be:
9b:d1:cd:c1:cf:03:65:9b:9d:b1:45:be:48:4b:a3:
dd:8f:ee:07:28:da:ab:6b:41:76:9a:9b:90:3a:d2:
c0:d4:d0:cb:6d:f7:e1:b3:7a:3c:06:28:a1:38:7e:
c1:d2:08:2a:65:af:80:0b:6f:fe:7b:ad:a1:85:ed:
13:21:3c:ba:0e:12:d5:46:cb:c7:ed:fe:80:f7:ea:
7c:e3:2c:0b:4b:5e:05:d0:08:fe:87:4d:64:6f:8e:
43:3b:f6:10:30:78:78:89:7b:6c:8b:88:a2:37:7a:
1f:38:22:8c:68:2f:0d:dd:40:63:66:4d:7a:e6:7b:
27:8e:d5:a7:50:ba:87:ac:97:3d:05:4c:58:c7:e9:
b1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A2:8F:DC:43:96:B5:ED:F7:9E:69:3C:20:5A:D5:73:FA:60:48:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/800ba987-3ccc-346b-9628-f4297f0ac578.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:98:e3:e9:02:70:ba:bf:74:bc:e3:04:24:c9:ce:b0:af:03:
81:f3:23:db:64:58:51:9e:e3:25:2c:40:01:b7:18:cb:9e:eb:
6f:ba:19:91:11:e1:9e:56:c9:2a:8b:da:f5:24:04:e7:c1:c1:
25:87:3d:2e:e4:99:c1:82:7c:cf:34:45:e1:a3:be:ff:9e:88:
23:5a:4a:cb:c6:f8:d2:78:72:a8:f6:65:a2:dd:32:d4:c6:ca:
7d:1b:9a:57:26:7c:b0:21:71:cf:9e:43:6c:50:68:aa:f9:93:
a5:2e:05:3e:40:ec:82:11:c2:90:b6:1b:67:bd:c3:70:07:a3:
78:57:13:a4:c3:dc:79:30:cc:41:e7:1d:25:a0:7d:70:42:1f:
89:1c:1f:d1:3a:4d:36:c8:f3:a0:24:49:fb:2f:3c:5d:50:f8:
4b:f1:28:0d:c1:4d:01:2b:3e:09:16:01:7a:34:25:cd:48:6d:
e0:01:22:ed:c3:06:03:5c:61:05:4d:57:05:6f:cc:c0:b1:70:
4c:0d:67:3b:57:fb:bb:0f:ff:ad:a4:b3:6c:da:74:05:2e:91:
e9:dc:41:ec:35:3c:ac:bd:28:70:7b:e6:c0:1c:39:a8:58:f4:
46:11:d4:da:c0:a4:21:2e:1c:98:21:e1:36:df:b0:8c:b8:40:
55:36:ec:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:56 2025 by rpki-client