Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8388d3ef-f957-3f5c-8cd5-bcdf53cd7d2b.roa
File: 8388d3ef-f957-3f5c-8cd5-bcdf53cd7d2b.roa (raw, json)
Hash identifier: HqDs2xKaf9voPc+qF1vQpRcthKMFx7n3kNoyveDg4uc=
Subject key identifier: 52:3B:3E:EA:7E:DB:25:DA:F4:C1:95:12:F5:3F:DE:BE:4E:9A:1E:7A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DD19C9EE9AA2AB092618A6EC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8388d3ef-f957-3f5c-8cd5-bcdf53cd7d2b.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d1:9c:9e:e9:aa:2a:b0:92:61:8a:6e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=e68ab23f-daae-48bd-82a3-5dbf4fef861d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:34:8f:3f:7a:ee:74:a4:a4:6e:dc:5c:23:
f6:0f:76:43:79:3c:21:93:00:e1:01:1e:85:33:0b:
7d:6f:e3:1b:5a:f3:70:ae:9f:a1:5b:ef:dd:9d:e6:
27:c3:f3:67:68:a1:ee:3d:84:b1:48:45:e4:66:23:
6d:a2:1a:e7:ec:71:f8:b4:d8:68:06:b3:42:23:18:
5d:ca:f3:8b:49:fc:05:e5:91:3f:ff:35:0b:87:84:
38:4c:aa:43:fd:c0:cf:98:e9:41:71:0d:5d:dc:cf:
f3:eb:6f:49:ca:7d:ef:2f:1d:ae:a5:8f:c1:76:a4:
39:19:6d:38:85:a2:02:ce:7f:64:0f:1d:78:e7:c7:
4c:30:6e:12:05:fa:f1:46:8a:c3:4b:0d:ce:90:51:
2e:e4:80:c0:2f:8c:95:56:0e:7d:dc:70:da:c1:1d:
cb:1d:81:1a:05:84:be:90:01:a1:e8:82:59:86:30:
ed:a6:a6:2c:c6:b2:98:a5:d3:68:0c:9a:f5:29:df:
c2:9f:c6:28:f3:95:95:d7:4e:6f:02:a5:1e:67:22:
2c:1d:ef:8e:d1:94:70:7c:dc:ca:87:7c:2c:f5:ed:
d9:33:ba:69:c1:8c:4a:5e:b6:c3:5d:29:c1:bd:11:
2e:10:4f:d7:00:6c:65:08:64:7a:8f:67:5d:a6:1b:
f8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3B:3E:EA:7E:DB:25:DA:F4:C1:95:12:F5:3F:DE:BE:4E:9A:1E:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8388d3ef-f957-3f5c-8cd5-bcdf53cd7d2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:40:b1:ce:8e:81:d3:f1:27:76:5f:e1:13:ef:3d:d8:1b:20:
e9:33:b4:a3:f2:46:e6:d1:15:e9:8a:5a:54:59:98:3d:40:a8:
54:f6:dd:04:eb:54:cf:38:ec:69:f3:87:e9:56:68:70:a9:ad:
37:27:b2:15:12:fa:ca:d1:99:3a:f6:43:46:4e:9d:2b:16:b5:
41:02:ce:59:f5:3a:c3:81:7a:0e:3a:47:0f:12:7d:97:bc:01:
a9:1a:15:2e:ca:56:87:ac:39:fd:d6:58:b0:68:3d:f7:4c:98:
74:18:e0:84:5c:71:00:aa:1e:bc:63:2f:a0:49:a4:64:65:02:
63:89:4f:10:e7:40:44:b9:42:87:fd:7d:f0:2a:e3:95:59:47:
7b:61:89:0e:fd:ce:16:c8:0e:40:fc:9b:ea:e6:a0:a5:7d:ab:
9c:0f:84:1b:bf:56:5d:e5:40:0d:82:fd:55:c9:d7:25:39:1d:
18:83:ac:29:5a:5f:8a:f1:14:e2:73:46:07:9f:e4:77:c3:8d:
80:b7:ac:25:46:93:db:13:eb:0a:45:82:4f:22:3e:ba:aa:76:
3a:6a:7a:31:b7:ff:47:46:2b:16:3b:88:4d:fe:1d:54:fb:1d:
dc:30:df:16:fa:87:67:a6:10:fa:65:34:22:0d:27:1f:67:66:
7f:6b:e5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:19 2025 by rpki-client