Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cd9b8a9-d6b7-34d8-99da-60be266e9469.roa
File: 8cd9b8a9-d6b7-34d8-99da-60be266e9469.roa (raw, json)
Hash identifier: 80QP1E51kxVADk+XFI91uLRzQznreH3bmg/fnxRrAA0=
Subject key identifier: 7D:10:A6:3D:54:99:2A:F2:F0:99:D1:D1:CF:53:E1:09:83:EB:D5:9A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409032C7CC280DF9B608C11D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cd9b8a9-d6b7-34d8-99da-60be266e9469.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 130.80.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:90:32:c7:cc:28:0d:f9:b6:08:c1:1d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=ce4c4aba-cf60-47da-bb5f-257de5189010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6a:63:a1:76:0e:a8:bf:09:b4:3e:64:6c:ec:
7c:41:66:d7:7e:06:d3:be:80:db:bb:08:17:aa:f1:
6c:e2:85:05:45:0c:d0:2a:6a:05:77:3a:d0:a7:80:
09:90:79:a6:c6:f9:47:59:04:a2:db:7c:2e:ee:9f:
aa:d1:dd:d8:88:c5:93:f9:58:d9:54:9b:fe:6d:c6:
43:50:70:41:da:67:3f:b5:47:e1:af:bb:fd:d2:52:
47:c6:89:d1:9e:58:37:1d:c5:b8:9f:7d:f9:19:2a:
e1:81:7c:a4:54:00:8e:2d:aa:4c:1c:32:b4:d0:76:
7a:b9:01:e6:c1:4d:bf:95:19:37:a2:47:83:23:d1:
48:31:d4:47:5c:c9:35:60:74:9e:18:84:80:ae:eb:
5e:f8:a6:5d:3c:69:fa:3a:43:93:3c:65:a7:f8:86:
17:69:d1:3c:bf:8e:94:9a:7d:21:d0:7a:f1:22:21:
d7:40:39:e0:6f:51:d4:a0:1d:41:98:6f:72:7d:01:
6b:42:d9:8d:47:9f:28:21:16:85:38:35:ab:ce:1d:
70:87:48:51:2d:6b:bf:23:13:91:2e:ef:a4:57:b6:
8e:ad:8c:ff:89:87:a5:f9:49:6e:60:27:ef:87:12:
1e:aa:8d:36:cc:ac:78:79:7a:e9:48:a9:50:b0:9e:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:10:A6:3D:54:99:2A:F2:F0:99:D1:D1:CF:53:E1:09:83:EB:D5:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cd9b8a9-d6b7-34d8-99da-60be266e9469.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.80.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:00:1c:36:43:3b:63:22:c2:3a:54:a8:8e:2e:dd:d9:94:0c:
74:d0:0f:01:dd:59:92:3d:91:9c:a5:94:e3:56:18:ab:b4:06:
17:70:10:6b:6f:d4:de:49:1a:56:af:fd:c7:04:0b:ec:f9:f6:
61:77:1b:26:e8:8f:39:c6:3b:59:29:b5:34:b6:a6:82:d1:0d:
76:f4:4e:5c:21:84:35:63:0a:7e:19:1f:e8:0b:c1:d2:37:8e:
ed:6e:cd:42:c3:4a:49:40:18:83:94:69:59:ec:19:f7:5c:4f:
46:01:5a:92:6f:bc:1b:a6:3b:c7:de:51:6f:ed:2d:c8:f1:c1:
e9:2f:bb:7b:16:d3:c2:82:d6:90:cd:ed:9d:76:46:50:23:21:
b2:b3:26:a3:98:10:bb:4f:93:98:38:32:69:2b:b9:1f:c4:03:
44:da:df:6e:ee:cc:49:24:78:80:73:b9:6b:86:4e:50:d1:3a:
55:ff:ec:5a:20:98:8c:ec:a7:b6:34:0a:c0:1e:23:0a:6a:f9:
e4:c1:76:5f:3d:20:1b:28:5c:4f:f1:54:d4:be:cf:d3:9b:c4:
28:a0:6e:fe:aa:64:08:fb:c5:84:59:13:0c:35:d3:53:fa:4c:
2c:37:10:a8:2a:88:9b:c9:f7:5c:6a:eb:7c:32:6f:f4:27:91:
9b:7e:be:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:21:49 2025 by rpki-client