Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86ff3496-4011-3453-9a9d-2de3a46232c2.roa
File: 86ff3496-4011-3453-9a9d-2de3a46232c2.roa (raw, json)
Hash identifier: dlD2iTU3MoSti+bbV2VhObQUXQF6w/DxcG0eHQCV7ZA=
Subject key identifier: D6:11:00:BF:D5:26:31:05:EE:6F:22:84:8C:1D:15:0E:D8:97:B0:77
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D1BEDCB289EA02DA38AB3E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86ff3496-4011-3453-9a9d-2de3a46232c2.roa
Signing time: Sun 05 Feb 2023 12:00:00 +0000
ROA not before: Sun 05 Feb 2023 12:00:00 +0000
ROA not after: Mon 13 Mar 2023 04:00:00 +0000
asID: 8987
IP address blocks: 141.231.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d1:be:dc:b2:89:ea:02:da:38:ab:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 5 12:00:00 2023 GMT
Not After : Mar 13 04:00:00 2023 GMT
Subject: CN=cbdbf1e4-eeee-423d-aba6-e9191864f483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:1c:b3:73:67:54:eb:f9:da:0f:6c:b8:37:
fb:02:ab:b5:08:6d:58:54:53:4d:d2:37:e9:86:b6:
27:8d:3f:05:c2:cd:96:32:31:e1:2e:e8:df:3b:b1:
37:19:d9:c8:92:60:f7:01:50:f7:f9:ea:88:85:b3:
e8:85:ae:0b:a8:b2:5b:6e:7f:6b:ad:c8:24:78:65:
bf:0e:4b:6d:5a:19:e8:b6:1d:49:dc:5b:62:48:ef:
e8:5f:94:e7:48:99:61:21:d3:06:52:5a:71:e9:c2:
26:bf:ad:00:b1:67:11:d9:dd:e7:f8:ba:78:c5:36:
7e:a2:b8:2f:5d:dd:74:5d:fe:01:b1:f7:93:0c:b1:
8f:42:3b:e5:f3:04:e4:ce:50:2a:f3:bb:0f:7b:c0:
27:35:70:c3:a6:f2:31:5a:9e:fe:7f:94:e5:60:2a:
dc:13:d5:91:de:98:3d:87:18:03:1d:e5:fd:ef:52:
92:9f:97:99:55:74:ce:bc:f8:e7:08:93:ee:4e:df:
cc:65:41:57:a8:1c:90:13:af:10:28:7a:84:17:75:
5c:2f:5e:4f:bc:d6:07:1e:f3:64:c2:50:f1:43:1b:
36:ae:60:b4:74:8c:25:89:6f:13:59:a3:0c:29:8a:
5b:a0:74:0d:de:d6:3b:9d:41:d1:31:e7:95:64:28:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:11:00:BF:D5:26:31:05:EE:6F:22:84:8C:1D:15:0E:D8:97:B0:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86ff3496-4011-3453-9a9d-2de3a46232c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
141.231.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:f6:c3:22:2a:f0:21:08:43:0c:02:9f:8f:b3:29:cf:10:14:
32:bb:1b:bd:81:de:27:ad:2e:58:c1:90:ac:dd:70:46:9a:5e:
14:62:b6:3d:33:94:c0:c9:6a:43:a5:1e:fc:8c:56:ab:5f:7e:
c3:ef:61:ea:04:c3:9b:fe:d4:c9:da:0f:77:aa:52:a9:8c:e8:
e0:0c:15:45:3e:b4:7c:01:95:5b:cc:19:02:dc:fc:5a:67:98:
9b:34:0f:a5:27:bb:b5:08:c2:a2:0e:d4:ba:f7:03:99:e5:98:
53:12:a7:b5:44:1c:08:03:86:6e:da:0c:76:ec:8b:04:f1:f6:
b7:e8:bb:b2:78:23:98:df:a8:de:4b:63:ed:f8:4d:57:23:26:
d8:30:51:d7:c3:4d:ff:c2:54:3d:1a:de:d1:d7:ec:d7:c7:0a:
6d:77:b6:62:dd:da:85:d7:44:57:a1:52:80:f8:3e:b8:bd:c5:
89:04:51:e8:64:7c:83:70:77:33:1b:b0:8d:9c:b6:0f:a1:76:
b1:01:ab:37:ba:73:2e:fa:60:69:2f:0d:84:bc:2d:93:b3:af:
68:82:41:fc:38:73:72:55:9a:6c:46:dd:ba:1a:5c:35:02:52:
5f:5a:0b:b4:95:7d:ef:e4:f3:f9:1e:0e:d5:fb:82:af:75:ca:
fe:b0:29:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:25 2025 by rpki-client