Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/956cb669-b9ef-33b1-9a43-ba5d6a862199.roa
File: 956cb669-b9ef-33b1-9a43-ba5d6a862199.roa (raw, json)
Hash identifier: 11P1hq10bhMyRoA+8snY8jkNCDlkDdVB+yM1DSxgQZ8=
Subject key identifier: 27:3B:C9:EE:BC:7D:6D:62:9C:B5:71:06:26:0F:07:F1:1F:F6:DD:72
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584068B4FE94A5FBCE18307ACD40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/956cb669-b9ef-33b1-9a43-ba5d6a862199.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 99.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:68:b4:fe:94:a5:fb:ce:18:30:7a:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=d0481b4a-e922-49e0-878a-ea44a64edf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:87:20:a4:bc:bf:9d:a3:fc:75:fe:7e:eb:
72:15:b9:b3:cc:c1:37:2a:45:d8:c4:2c:5b:46:f2:
14:3d:d5:21:99:a6:42:f0:b4:f5:c1:c9:24:44:61:
db:74:20:0d:57:e7:39:18:cc:e6:41:db:9d:9b:d0:
a3:ce:b1:7c:42:cf:e7:d1:5b:00:b3:c3:13:1d:3c:
2a:52:53:57:ec:cc:8b:6e:2a:f4:db:50:93:9c:0b:
16:f7:bb:4b:f6:5d:f9:11:b7:b2:3e:79:95:35:f4:
23:0e:6d:1d:76:a0:66:09:db:5e:86:b7:c7:c1:68:
47:11:73:b4:41:8b:f8:ce:3f:3e:e2:ee:e1:8f:bc:
00:19:73:27:88:69:96:7f:cb:3c:45:3e:81:d0:e8:
74:54:60:9d:ef:5b:d4:e4:db:24:85:aa:ae:87:21:
de:2d:e7:a6:4a:28:16:03:e9:a5:af:1a:75:ec:4a:
58:64:ad:ca:4e:01:78:3f:bd:b1:ea:31:12:be:63:
1a:f9:dd:5d:bf:6e:db:b0:ba:96:7b:7c:07:63:00:
06:4d:42:1e:a7:60:1c:1d:44:b3:45:0a:72:42:91:
76:f8:d7:20:cc:04:e8:0d:91:2f:92:7d:ac:c2:82:
2a:8b:68:a5:70:c9:c4:89:12:fd:90:03:b6:8e:ca:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3B:C9:EE:BC:7D:6D:62:9C:B5:71:06:26:0F:07:F1:1F:F6:DD:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/956cb669-b9ef-33b1-9a43-ba5d6a862199.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:ae:52:e7:05:4b:a2:bb:f1:c2:1e:dd:65:bd:c1:72:91:a6:
f5:6f:ed:a8:2b:24:c8:20:22:b5:26:ed:62:f6:bc:27:6c:51:
bb:0b:ad:e6:d2:09:17:62:bc:fb:b7:35:c0:80:be:6f:0a:92:
0b:2e:9e:2a:ea:16:73:ce:fc:32:ef:bf:ba:75:4e:ca:a5:1a:
f4:58:6e:42:bd:a1:b2:0f:a5:41:51:a7:41:43:c5:b2:c2:b8:
9a:cb:26:ae:ba:de:d7:de:48:82:a5:ab:7d:8c:fb:5c:59:bb:
0f:82:0f:3f:9d:ea:75:62:de:86:58:70:80:09:c5:76:a4:72:
06:96:69:9a:0d:8b:9e:4c:94:f1:90:07:00:c0:d3:1e:b3:b3:
92:c0:dd:19:da:84:3f:7a:10:cb:19:3a:32:ad:c2:19:af:4f:
16:9f:06:9a:8c:03:87:be:4d:70:e1:2b:d5:fe:a0:9f:7f:75:
e6:ce:c0:b9:56:4a:03:cf:4d:35:03:da:ec:42:14:94:26:18:
32:37:a4:29:f4:90:a4:5d:b4:07:d4:a7:6a:f9:eb:55:69:9b:
32:45:5a:ca:4a:14:35:05:dd:e3:8e:da:22:c2:38:62:e3:17:
30:00:62:d7:f0:4d:ff:b9:d6:68:fd:9b:af:44:65:43:c4:0b:
de:a9:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:25 2025 by rpki-client