Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/973a4016-1a68-322b-b6d6-f810e1f6ed2c.roa
File: 973a4016-1a68-322b-b6d6-f810e1f6ed2c.roa (raw, json)
Hash identifier: UCmKioibTkFHZQr5pR6ksTP+InsCd/FWdvOiIcNX7/0=
Subject key identifier: 6C:80:47:76:BE:6B:9C:7A:1E:6E:D0:61:0C:E0:2A:E2:EB:80:BD:52
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F66CA62C7E6FAA4BD198BFE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/973a4016-1a68-322b-b6d6-f810e1f6ed2c.roa
Signing time: Wed 28 Sep 2022 17:57:08 +0000
ROA not before: Wed 28 Sep 2022 17:57:08 +0000
ROA not after: Thu 03 Nov 2022 04:00:00 +0000
asID: 16509
IP address blocks: 128.212.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:66:ca:62:c7:e6:fa:a4:bd:19:8b:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 28 17:57:08 2022 GMT
Not After : Nov 3 04:00:00 2022 GMT
Subject: CN=7d30a8f0-c1d4-40b3-8a32-3bab2679ac2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:66:23:70:ef:04:b8:f4:c2:ef:14:95:69:
52:e9:6f:50:bc:55:01:bb:0b:57:1c:14:41:1a:d5:
39:89:49:31:fd:43:01:4f:a3:02:7d:51:38:8e:6c:
34:36:59:0e:a9:77:fe:c7:c5:62:02:c1:ae:1f:c6:
1f:cb:f3:cd:02:46:53:46:3a:5f:0e:61:1c:bf:71:
dd:9a:f5:e6:57:8f:40:df:8b:8e:c4:35:2f:cb:1b:
36:74:7e:4f:0e:cb:be:e0:da:c6:57:ef:85:00:f1:
d9:47:38:f0:91:ce:e5:20:de:f1:c2:1b:fb:cc:a7:
cf:50:77:19:6a:f7:12:62:1b:0c:e9:15:bb:1b:3d:
9f:3d:94:2a:f9:b0:85:5c:23:de:ea:66:fd:fa:d2:
a7:33:ae:b1:04:67:75:50:2a:48:f9:08:6e:d0:02:
fb:4a:d1:bf:80:9a:5a:0b:c9:73:b0:e9:64:5c:94:
f1:7e:1e:11:b6:1b:9b:fa:e7:f1:9d:67:bb:87:72:
b0:e4:23:e7:e0:fd:02:cb:52:65:e6:9c:05:30:5e:
8c:c8:ac:ca:9b:c9:46:96:4b:a0:3d:fd:1c:64:04:
9e:21:c0:e1:ab:66:b8:0d:cd:21:fe:39:1d:fc:5d:
51:f2:51:1b:fb:36:b8:b6:b1:47:1e:16:f7:5b:45:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:80:47:76:BE:6B:9C:7A:1E:6E:D0:61:0C:E0:2A:E2:EB:80:BD:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/973a4016-1a68-322b-b6d6-f810e1f6ed2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.212.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:fe:d7:37:b1:f8:a9:81:51:a2:9a:89:90:92:81:ef:b8:f8:
12:00:18:0c:7c:68:91:26:ed:19:ba:1a:35:c6:5c:d7:74:f0:
7a:3a:5c:3d:d5:66:58:b0:8c:bd:ce:90:3b:40:d4:09:19:00:
7b:03:fc:01:70:0d:13:0f:59:2c:8f:6d:96:dd:e4:3b:0b:cf:
98:79:23:65:c4:3f:85:56:15:a4:fc:4d:b6:d1:6c:bb:b1:02:
97:25:13:9d:a2:3f:0d:43:d3:58:b3:9c:2f:89:c1:30:c2:77:
5f:5e:80:f9:c7:bd:32:b2:31:72:53:dc:1f:6d:2d:67:d1:09:
76:27:99:38:57:6a:8f:20:58:ad:31:23:3f:ca:fc:d8:64:5c:
e5:01:3d:42:74:8b:d6:d1:ad:c2:02:16:c7:23:d6:f9:38:c1:
f0:ca:cf:0c:94:b0:35:cc:a1:66:2e:50:e2:bb:38:09:cb:69:
bc:38:28:3a:c3:18:3b:cc:4d:6b:28:e7:8a:4d:da:a8:51:59:
fb:21:18:1c:02:c3:29:41:cb:98:9d:1f:e2:d8:db:1a:29:4c:
8a:0c:46:a7:f6:c9:13:84:df:b4:54:f1:3e:25:db:df:bf:98:
dd:59:78:2b:d3:d9:d3:96:49:ad:f6:5c:dc:41:ec:77:f1:9d:
f4:a0:ab:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:53 2025 by rpki-client