Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85e4fc90-0ddf-3651-bee3-98ccc5e2bda3.roa
File: 85e4fc90-0ddf-3651-bee3-98ccc5e2bda3.roa (raw, json)
Hash identifier: zffLR3Q1eHbMZJcNJNWveqTKlcwg2zLjcf/PHUx+JYc=
Subject key identifier: 46:55:35:A4:3B:DB:14:EB:45:14:B6:A3:A9:DC:E9:2C:CE:02:F6:F9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2A1BAF14B01098A23FA62D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85e4fc90-0ddf-3651-bee3-98ccc5e2bda3.roa
Signing time: Tue 08 Mar 2022 05:00:00 +0000
ROA not before: Tue 08 Mar 2022 05:00:00 +0000
ROA not after: Tue 12 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 2600:1f00::/24 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2a:1b:af:14:b0:10:98:a2:3f:a6:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 8 05:00:00 2022 GMT
Not After : Apr 12 04:00:00 2022 GMT
Subject: CN=38776d00-6d7b-4f3c-a8c7-f25109d3a70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ff:fd:68:e3:7b:07:fd:12:86:c7:7b:b7:a0:
bc:53:8a:bb:e1:e6:8d:a7:b6:ea:f0:22:c1:2c:76:
cd:5c:44:4e:e4:3d:de:de:4d:f1:41:b0:ed:0f:09:
53:42:1e:2f:f2:6a:fa:59:75:35:1a:e3:35:70:3a:
61:9d:2f:b2:8b:fb:52:d9:bb:5b:e8:1c:51:5e:2e:
ac:bb:dc:64:1a:31:66:b4:a2:d8:35:98:cd:81:9f:
b3:11:f4:27:b7:96:f7:92:dc:c4:b7:57:d8:f3:6d:
0a:64:a3:0b:89:27:4a:a7:30:66:af:74:3f:50:07:
0f:7e:59:46:7e:a5:30:13:18:c9:eb:6c:fd:4b:ab:
36:7d:db:89:53:1b:0c:02:93:07:39:37:35:4c:4d:
fa:67:62:75:d3:7b:43:47:5a:9a:34:e7:23:de:c2:
8b:32:a5:9c:07:96:a7:fa:62:48:08:58:6b:40:54:
b2:9f:c8:5b:6b:41:15:52:e7:56:61:0d:ca:56:e1:
31:33:ee:6d:42:64:7b:19:5b:20:a3:54:dd:35:24:
05:32:0c:b8:53:9a:53:ed:91:6c:e0:e5:e4:d7:72:
28:63:ba:b8:41:a5:87:e1:8b:d7:0f:a8:ab:c2:df:
5c:05:30:76:a0:d1:42:d7:7b:02:54:bb:9a:fc:77:
39:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:55:35:A4:3B:DB:14:EB:45:14:B6:A3:A9:DC:E9:2C:CE:02:F6:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85e4fc90-0ddf-3651-bee3-98ccc5e2bda3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00::/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:82:b5:9a:fc:44:fd:01:bb:b4:cb:31:73:f1:28:49:64:d1:
04:01:2f:b0:a0:1e:73:10:9b:27:9b:9e:10:8b:fd:e9:ea:8b:
7c:54:a2:87:6f:28:73:2b:78:03:93:4d:4b:50:a7:2a:1b:bd:
67:35:3f:3b:d9:77:b1:e9:36:6c:6a:b5:23:4a:d2:8a:05:59:
0f:83:01:d9:6d:30:15:dc:c3:26:8d:35:98:f4:86:02:16:e4:
27:a7:fd:44:70:47:ab:3d:ff:fe:7d:7e:41:5d:9b:15:70:81:
3c:54:f4:44:84:10:d5:0f:bc:eb:a9:17:b6:11:77:2e:5c:d5:
a4:5f:16:57:ab:d4:ca:a9:ce:eb:31:77:2c:53:0d:33:f7:a9:
72:70:36:6e:5f:17:e6:02:e5:f9:a7:47:98:fc:ee:88:6a:ea:
8d:d8:1a:8e:74:fa:95:e7:56:fb:9a:90:89:c5:87:79:00:54:
e0:ca:e3:9b:e2:b6:08:72:05:78:97:62:5a:ac:4b:da:7d:e7:
13:97:cf:22:c8:b2:81:cd:27:aa:1a:8c:fe:9f:59:92:ee:60:
00:11:d8:f6:32:54:dd:dd:de:e0:80:20:8c:de:0d:27:b2:b9:
a1:2b:00:10:a6:c4:7a:e5:16:71:67:37:d3:f8:49:f6:7f:32:
97:74:39:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:20 2025 by rpki-client