Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f76e54c-7152-3045-b3d3-21c0c95a07d0.roa
File: 8f76e54c-7152-3045-b3d3-21c0c95a07d0.roa (raw, json)
Hash identifier: Dh1j9QcJ0dHt4SX/KnZV+AodjwwsbgwhRSQ3w+eSoy0=
Subject key identifier: AC:75:43:65:6F:A9:4A:FE:3F:EF:43:B5:07:F5:2C:04:80:85:43:FA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E1DB7337FEFCB8F27E7AD90C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f76e54c-7152-3045-b3d3-21c0c95a07d0.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 99.10.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1d:b7:33:7f:ef:cb:8f:27:e7:ad:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=6b5be2dc-9366-46a9-838e-e599b443148b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:e3:0c:81:17:09:b7:2b:f8:38:e3:75:ef:
cf:fc:6e:a7:9f:6b:23:19:6f:08:44:b0:d8:fe:5d:
3e:5a:5e:e4:cc:36:c2:e9:d5:61:59:2c:bb:01:39:
c9:05:ee:26:71:19:38:17:f9:6a:ca:89:d3:e9:2b:
9d:d1:30:ee:9c:b1:74:c8:d6:7c:3e:49:a0:08:74:
e1:3a:6c:55:8d:5f:4b:4c:b0:85:8b:44:aa:00:36:
9f:7d:48:21:2f:e8:8c:a2:7e:da:a6:fd:e0:17:35:
35:44:12:70:dd:14:f2:90:22:6b:7b:67:96:4c:c8:
5a:83:57:5c:fd:76:dc:ed:82:01:1d:cc:52:ff:36:
5d:b0:b3:fb:6c:7d:f7:92:67:5e:a1:da:f1:da:de:
23:bc:3f:03:de:5f:c8:62:72:99:45:49:bf:ca:98:
d2:9d:24:65:4c:63:28:b1:23:6d:17:7f:e1:26:44:
47:f1:5b:c9:14:00:8e:19:56:19:fd:6c:6e:ce:d7:
b9:d8:cb:a5:10:74:0a:f7:85:2c:34:a1:a3:c5:0f:
6f:33:10:5a:51:b3:e4:76:54:16:68:22:10:52:61:
3a:50:3f:fc:d4:13:f7:3b:cd:3b:c9:74:02:8b:fd:
0c:ce:b6:b7:e3:af:b7:9b:be:3f:af:ca:68:35:29:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:75:43:65:6F:A9:4A:FE:3F:EF:43:B5:07:F5:2C:04:80:85:43:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f76e54c-7152-3045-b3d3-21c0c95a07d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.10.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:f1:96:00:0d:d7:ad:07:1c:0a:22:4a:a8:70:3c:89:f7:f6:
e1:5b:21:90:4d:b5:73:f2:23:f4:2b:a6:85:66:3e:29:4d:88:
33:bd:59:8c:1e:dc:49:99:b1:b6:59:85:b4:4c:9d:f7:9b:10:
41:c1:7c:87:e2:f1:45:f6:f4:65:09:45:47:8f:2b:35:b8:80:
5f:ca:03:17:0a:39:19:ba:51:2c:09:03:99:79:54:11:6b:e5:
f3:8d:71:ac:81:a2:0b:f1:40:d9:86:2e:70:7e:ff:b8:61:7d:
8c:cb:2d:b7:15:1b:66:83:37:30:a3:54:50:32:6f:43:3e:20:
0b:c5:99:d7:32:52:87:52:ad:ae:b5:3e:48:d5:c2:52:cb:ea:
53:08:47:3f:c1:20:58:64:92:80:6f:6a:96:7a:de:13:34:6f:
fb:3a:e1:0b:51:b7:dc:fe:b2:4a:0c:19:0d:d7:e3:dc:7e:a9:
22:24:61:c8:b8:60:43:07:51:55:fb:a8:c1:05:71:e6:99:91:
e7:6f:9b:92:c8:34:be:5a:2d:21:4b:f5:c4:c3:13:45:ab:02:
17:40:19:bc:1c:ca:03:32:91:82:82:9a:c3:90:07:9e:e3:4e:
b7:6f:5f:df:74:a2:73:eb:9c:c2:e8:be:b8:78:db:6c:fc:35:
2b:1f:28:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:10:01 2025 by rpki-client