Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86022ca8-5de5-3fee-8ce8-257fc7ea4752.roa
File: 86022ca8-5de5-3fee-8ce8-257fc7ea4752.roa (raw, json)
Hash identifier: hXcXGRDPAKcInyElGZ7y1aBZWQ6mk/aBwPJEn5SImDg=
Subject key identifier: D9:66:65:65:1F:57:C1:41:6D:66:19:56:22:72:59:79:4F:49:0D:5F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA523DD9847F66668D13F3380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86022ca8-5de5-3fee-8ce8-257fc7ea4752.roa
Signing time: Fri 21 Oct 2022 16:30:08 +0000
ROA not before: Fri 21 Oct 2022 16:30:08 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 99.141.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a5:23:dd:98:47:f6:66:68:d1:3f:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 21 16:30:08 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=2812b119-748b-45d7-86a2-258ea1cdbdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:fa:53:08:89:ea:ac:4d:d1:0d:62:28:f2:
d2:09:c6:e4:da:51:80:19:06:e0:06:06:e3:d6:fc:
c2:a3:5c:c3:7a:da:e5:b9:1c:9e:4d:11:bd:39:91:
1b:54:e5:3a:85:e7:cf:a3:78:6f:06:2e:ba:6a:24:
80:78:cc:28:dc:7b:74:72:43:a7:ae:ca:cc:b1:11:
da:d6:f2:cb:11:91:1d:f5:59:b7:dc:04:62:d1:17:
2a:23:31:0f:73:77:c7:d0:0c:7c:54:1c:61:bc:82:
02:7c:03:9d:b2:c5:59:10:f0:ce:62:36:9f:f2:9f:
25:72:43:5a:6c:e6:35:d4:70:62:df:d1:8d:69:82:
88:2e:de:6e:c0:ac:72:a7:11:bb:b9:f1:cf:36:a3:
4d:f2:be:d4:9e:40:e5:b5:bf:07:e2:0f:30:48:bd:
46:22:49:33:99:5f:aa:3f:5f:a4:10:44:f1:73:2a:
ad:d9:5b:64:c5:8b:27:3f:55:c6:f5:49:90:99:ca:
90:e6:10:86:18:a3:5b:50:c9:32:57:07:01:b3:87:
29:37:f2:6c:f0:ac:5a:51:b8:4d:43:60:c7:2d:be:
ef:4d:c3:76:f2:6e:e2:98:8b:ed:fb:49:7d:83:b9:
15:f0:2f:01:21:ae:b2:54:60:f1:dd:b7:f4:5b:cf:
ca:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:66:65:65:1F:57:C1:41:6D:66:19:56:22:72:59:79:4F:49:0D:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86022ca8-5de5-3fee-8ce8-257fc7ea4752.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.141.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:1a:44:62:eb:2e:c1:d0:c5:fe:7b:48:4a:96:66:d5:61:fb:
1b:98:61:b1:64:9e:27:23:99:33:2a:d5:49:32:f0:6e:e5:64:
6b:6b:39:4d:6b:7e:8f:5f:6a:c1:8b:4a:8b:0e:f0:dd:ae:cf:
2e:57:0e:ea:bc:9a:59:f5:25:99:9f:08:2a:d2:66:e5:42:2f:
4d:fc:c1:74:c5:39:36:be:e6:18:c8:f9:41:6a:6e:d3:75:5b:
38:d1:85:c5:5f:44:04:bf:96:38:be:a2:a2:d2:fb:ab:99:e8:
4e:26:0c:45:7e:e8:31:51:8f:13:4b:3f:3c:97:21:fb:8d:25:
1e:ef:7c:35:2e:73:1a:c3:f9:7f:28:e3:f4:5b:74:f6:4f:7f:
b9:88:7c:24:c9:61:04:22:1f:76:ab:0c:7d:ae:d8:87:be:47:
c8:db:bf:19:72:7b:52:4e:78:d4:43:0e:13:7d:68:2f:3d:25:
89:7f:6b:f4:c9:5e:1e:84:e8:83:86:7e:e7:0c:de:a4:bc:a2:
6d:a4:e7:4d:0a:41:f8:ba:79:99:ff:88:2f:1e:91:e6:42:ec:
12:e6:9d:cd:74:2a:ba:90:10:75:68:98:a8:5c:4c:82:17:51:
c2:d5:bb:15:07:86:0e:e2:55:f9:c7:3a:51:e1:ae:19:e3:06:
f9:e1:f1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:07 2025 by rpki-client