Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8bea2c3f-8b65-30ab-9ec7-64279d8299e1.roa
File: 8bea2c3f-8b65-30ab-9ec7-64279d8299e1.roa (raw, json)
Hash identifier: +qwc/epBGzW/aRA3ZQA2ma/TzkbuHV7rsYeTai90LlI=
Subject key identifier: 20:2A:A4:EF:D6:36:69:08:A0:47:A5:BE:5D:F2:5B:0D:3A:C5:41:C8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E1E1F61900289C9401455FC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8bea2c3f-8b65-30ab-9ec7-64279d8299e1.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1e:1f:61:90:02:89:c9:40:14:55:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=0987718b-c7b2-4a72-b26e-e54de63609fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:ed:5d:c0:a1:11:87:2f:ce:58:0f:fd:77:
48:38:68:94:3f:6c:00:2f:ce:11:c2:fc:0f:5f:f9:
9c:ce:be:0e:42:3f:f5:82:44:ac:6c:90:b8:37:33:
ca:4a:9c:28:76:d0:8c:c3:c3:26:8d:e1:66:87:1e:
22:8e:99:ba:d8:26:c7:34:44:bd:1f:03:95:f5:33:
f4:7d:8d:ac:0d:36:2e:76:f7:c6:fc:08:30:de:a2:
84:ac:5e:f4:ae:c8:8a:22:c0:22:72:93:13:dc:f7:
4b:c5:26:43:2a:97:10:00:12:56:41:a4:47:d0:3a:
2f:77:89:ad:c5:54:59:52:0b:ca:00:f5:d6:37:dd:
70:c6:4d:d7:13:47:bb:66:19:ea:92:da:a9:b9:b3:
a9:23:67:b1:36:ce:b3:57:c5:e1:45:2d:bb:f5:fa:
c6:4f:60:71:4b:3f:8a:4b:a5:a4:2c:42:76:db:45:
bc:49:75:3e:59:48:b5:7d:30:55:cb:cf:dc:ed:65:
54:12:d8:83:47:c2:94:3d:93:68:e6:9c:05:7a:2b:
b8:1e:a6:94:eb:61:50:96:e6:7c:29:e9:c4:91:fa:
d7:cd:ec:fa:57:03:09:b3:b5:79:fb:05:c8:16:a6:
7c:0b:4f:7e:56:8d:b1:9c:5f:59:00:4e:59:32:75:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2A:A4:EF:D6:36:69:08:A0:47:A5:BE:5D:F2:5B:0D:3A:C5:41:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8bea2c3f-8b65-30ab-9ec7-64279d8299e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:7b:35:4d:32:00:9c:f6:c4:cc:9d:32:41:a8:b5:37:5c:0a:
23:5d:40:ff:e1:45:47:ba:f6:97:75:3c:8d:08:3f:f6:0d:9c:
f1:42:dc:b8:f1:44:ef:db:11:6e:ad:9e:38:2e:2e:f7:3a:2b:
f6:78:50:c0:e5:35:56:9f:2e:f7:62:b1:cd:c5:69:61:bd:ae:
33:a5:c5:ff:9e:43:4d:fb:f4:ef:b6:c7:90:4c:8a:49:d8:a0:
33:a3:62:e6:f9:2e:fd:c2:54:b7:5b:31:eb:9c:57:35:1a:01:
5b:a6:f3:7f:6b:33:14:37:5e:c4:b7:87:6f:d9:90:ac:e4:3d:
ac:f9:1e:48:83:da:10:d3:d5:34:cf:ff:f2:93:0d:02:68:19:
28:64:8d:94:8c:e6:00:d4:39:c6:5f:84:d9:89:5d:1a:3e:d0:
cd:17:4f:a1:f4:d9:e0:f8:76:83:33:85:b7:cd:4d:8a:23:9a:
3a:c2:0c:f3:ab:9e:05:7b:0d:09:a6:12:4f:dc:86:ff:78:fb:
a1:fb:5b:54:ff:fa:4a:0e:df:bb:6d:cd:a3:81:17:40:2d:4b:
e2:c6:70:eb:65:de:46:bf:d3:9c:a2:bc:b4:f6:4b:56:0a:53:
14:61:56:cd:3b:fa:97:6d:cc:af:f1:eb:71:35:56:78:d1:13:
37:5a:7d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:13 2025 by rpki-client