Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99f98d0b-c45b-32c9-95d6-a2e543d70be8.roa
File: 99f98d0b-c45b-32c9-95d6-a2e543d70be8.roa (raw, json)
Hash identifier: Cc/fFcsB4f/azrPVRs8zsj/RiRGZccsPUcyRt0CNTpQ=
Subject key identifier: 01:09:8E:E8:DE:6A:ED:4B:2B:A8:54:28:77:9D:F9:41:73:76:2C:4A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D7D1A8481BBD5BE3D6737EC48
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99f98d0b-c45b-32c9-95d6-a2e543d70be8.roa
Signing time: Wed 06 Apr 2022 04:00:00 +0000
ROA not before: Wed 06 Apr 2022 04:00:00 +0000
ROA not after: Wed 11 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.9.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:1a:84:81:bb:d5:be:3d:67:37:ec:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 6 04:00:00 2022 GMT
Not After : May 11 04:00:00 2022 GMT
Subject: CN=11b51623-5203-4a12-a52a-1b4367d95779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:02:ea:99:b0:62:33:f8:c8:04:85:10:05:
d3:12:d1:a4:65:2c:d1:01:ba:d6:a5:c4:80:63:3b:
78:cc:4d:1b:9c:f5:e4:3b:ab:34:ce:0f:13:d2:6f:
70:c7:62:f0:2c:26:f0:78:35:a2:34:b7:70:84:db:
73:53:de:c0:26:d4:19:de:af:ba:8e:81:03:ab:0a:
e8:50:ca:08:11:14:24:45:d5:c7:ed:9a:38:b6:80:
52:fe:85:bd:04:db:0d:06:86:95:82:09:1a:ea:30:
b3:a9:13:f8:69:33:34:5e:19:86:a0:67:8f:ff:77:
43:ed:a0:2b:d0:53:d5:fa:4e:34:2d:53:d8:9e:b8:
e7:55:03:89:62:97:ac:e0:51:b1:62:22:9b:e4:21:
6c:7e:68:bd:a8:4b:d1:5d:be:3a:de:23:58:ef:b2:
94:81:47:cd:7a:b0:fb:f5:9d:87:aa:8a:d8:65:fc:
93:68:f3:40:c0:dd:36:be:10:f8:88:85:20:9b:61:
c3:3b:fd:93:72:83:0f:5c:b1:80:a4:c3:2e:89:ce:
5f:ee:79:9f:40:40:7f:6f:28:39:a6:11:7e:6b:cc:
ce:33:eb:31:9e:b2:f1:d0:9e:d1:0a:be:47:a9:dd:
43:b0:1c:ac:72:96:a2:e2:a0:9d:54:89:82:27:15:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:09:8E:E8:DE:6A:ED:4B:2B:A8:54:28:77:9D:F9:41:73:76:2C:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99f98d0b-c45b-32c9-95d6-a2e543d70be8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.9.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:44:89:0d:83:7b:a5:73:61:91:38:f8:09:4a:e4:6f:80:a6:
34:f0:b1:c7:b6:c7:79:e7:52:3e:5a:10:c3:70:99:99:7c:4f:
93:2e:5b:af:1d:13:e0:45:4e:6b:89:d5:de:09:ba:32:7e:5a:
93:1b:14:4f:93:ff:9f:22:a7:de:74:07:ea:8d:5d:6f:5b:70:
eb:16:c7:b3:39:eb:d9:b8:57:8a:87:81:6a:1b:5b:04:7c:89:
eb:da:11:e8:ed:b4:df:e0:93:cd:3a:b9:2f:19:9d:7d:d2:73:
23:8d:40:d0:ab:ff:d5:2e:5e:f6:5b:a3:64:e2:0d:52:f8:1d:
0b:0a:d7:8b:ee:a8:f3:8a:b0:e5:f3:eb:8a:e9:40:6a:82:92:
57:f2:53:34:19:ad:4a:48:4a:17:93:0e:a7:61:f4:74:ae:fd:
16:93:ef:1c:0e:a4:05:43:fc:02:19:cb:35:e2:a9:36:fc:69:
62:d8:cd:9d:63:c5:57:cb:01:46:65:57:61:e6:fe:67:cd:66:
2e:df:e7:c8:c3:61:a2:35:2b:f0:f6:63:48:90:21:0d:3a:2f:
3f:8a:be:42:fa:15:61:a6:9c:a8:80:6f:09:e2:2d:cf:23:cd:
05:0d:cf:6e:5b:0b:dd:06:5c:ba:6e:8c:d4:41:50:69:da:a1:
fc:6e:a5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:34 2025 by rpki-client