Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82d56a0f-9cb5-3e94-80c6-c3d301dab5e8.roa
File: 82d56a0f-9cb5-3e94-80c6-c3d301dab5e8.roa (raw, json)
Hash identifier: urex1AEkYbTwI4oOiYlaCaE+VvjablhraEbZSgaFWlY=
Subject key identifier: D0:04:76:F1:4D:DB:EE:AF:E9:70:5F:E8:94:E8:0C:1B:DA:64:78:ED
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DCFE52EE8958056232A4596C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82d56a0f-9cb5-3e94-80c6-c3d301dab5e8.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Fri 10 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cf:e5:2e:e8:95:80:56:23:2a:45:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2022 GMT
Subject: CN=3533bba6-3204-4340-811d-7315b0fe6fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:98:f1:d8:8a:ee:6c:a6:d4:f3:9d:39:a6:
56:ef:b8:e3:c1:44:46:21:cb:37:9a:26:7a:eb:9f:
76:b8:40:e1:af:41:46:49:c5:23:e0:02:dc:e4:9b:
8d:31:6b:0f:dc:b3:7f:a1:70:31:d4:27:b3:7b:1b:
10:3a:47:ec:90:4a:bf:05:4b:c2:93:c6:2a:97:b5:
e6:6a:8c:d3:99:ac:da:41:d8:36:64:2b:40:3c:54:
da:2a:35:05:0d:6b:0a:af:43:67:ee:f4:fc:60:69:
08:3c:6b:f8:ef:c7:1a:4f:96:66:07:5d:f7:0b:41:
13:52:99:1a:f5:b5:82:8c:16:95:2d:3e:2a:ae:34:
b2:93:ff:8d:44:06:f2:ce:2d:a0:45:67:c9:fa:4b:
65:d1:c1:d2:c2:d1:6b:f8:7f:7b:45:24:cc:0a:82:
09:c5:95:6e:c7:1a:aa:56:a0:40:b0:b2:7d:98:fa:
21:ed:0f:ec:4a:af:8f:36:fa:2e:75:d3:aa:a9:57:
f9:cb:eb:95:ae:b4:ec:66:81:23:94:49:6e:e9:31:
2b:85:d4:bc:1e:7f:e1:00:26:f3:8b:b0:fa:f5:3a:
f9:cf:c6:06:94:bf:db:21:65:82:c9:24:84:8d:e8:
82:e1:aa:c5:8d:20:c9:79:fb:b7:54:90:4e:51:a8:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:04:76:F1:4D:DB:EE:AF:E9:70:5F:E8:94:E8:0C:1B:DA:64:78:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82d56a0f-9cb5-3e94-80c6-c3d301dab5e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:a7:56:19:ff:74:25:1e:08:77:83:75:05:23:66:a6:80:a1:
8f:9d:a5:24:d5:97:ce:bf:c8:ab:a3:9a:97:d2:98:23:d5:84:
11:c7:2b:34:8e:cf:9e:5b:4e:2d:55:ed:f8:a4:9d:b3:42:fc:
4a:84:eb:5c:40:5d:b5:86:a2:63:ec:13:8e:66:f4:7f:60:dc:
25:c9:25:65:54:0d:f5:5c:d3:91:40:d1:75:5a:bb:e9:1d:4b:
77:a9:74:eb:35:cf:dd:28:a9:90:41:b9:c7:ad:da:9d:99:76:
09:db:82:e5:c0:ba:f6:e8:da:48:25:e9:7d:75:7f:f8:95:72:
90:3f:72:a6:76:97:52:38:3c:65:3e:42:9e:46:07:53:ad:b6:
8d:6b:e0:8a:25:d7:fd:0f:ab:ed:d3:61:a7:39:65:6d:32:27:
5c:db:37:c0:6e:6d:28:24:e3:c0:9e:c3:28:23:b5:a5:b7:6c:
ad:7e:0d:31:ef:8d:5e:df:92:dd:4d:60:dd:88:55:9a:e0:31:
47:27:61:1e:a1:3c:7c:4c:5a:03:d6:7b:8c:f6:22:23:0f:57:
e8:a7:e4:c9:5a:5a:4d:8b:be:ae:30:d1:d1:14:d2:55:43:b6:
83:79:05:de:01:2d:0c:a3:93:73:65:47:a9:b7:7d:c7:15:43:
0d:ed:0b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:06 2025 by rpki-client