Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9b957335-1a47-310a-b812-21c6a70ad503.roa
File: 9b957335-1a47-310a-b812-21c6a70ad503.roa (raw, json)
Hash identifier: vN4NfWYyHrwlP6aZE6U+9/+khy70dgHxgdeLhBX4bY0=
Subject key identifier: 59:B4:CD:CA:5F:D7:82:83:FF:12:5C:55:0B:6B:20:42:40:62:68:42
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A967DA09B8EE39F6AB4F300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9b957335-1a47-310a-b812-21c6a70ad503.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:96:7d:a0:9b:8e:e3:9f:6a:b4:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=50a626a0-62f9-4f85-8c29-4adfd1d61dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:38:6d:f4:3f:34:a1:31:2b:48:30:ef:a0:cb:
a0:91:35:c1:8b:4f:54:c9:98:a1:8e:45:da:83:44:
ad:92:2d:16:4a:0d:91:c9:d8:d5:94:30:f4:0e:7d:
08:f5:4a:8f:9f:21:99:bd:75:39:e8:2b:32:09:de:
93:62:62:a6:4b:ce:7e:d6:38:a9:98:9d:a7:b7:38:
9d:dc:cb:bc:23:44:a1:f2:26:67:cc:5f:7d:ad:12:
a2:59:5d:0c:90:6f:59:07:d4:0f:0d:a3:fb:19:64:
16:ff:43:b4:6d:11:45:1f:4a:8b:20:4e:0f:78:b0:
a8:70:24:b2:a9:41:29:5a:0a:56:df:8b:12:ff:48:
cf:77:82:cd:33:0f:f6:71:e0:89:d7:c8:1e:a9:52:
94:85:84:24:14:7d:ed:ac:12:97:07:26:b7:ae:2f:
0a:97:55:a0:81:0c:e1:76:35:e7:fb:58:92:17:f9:
65:48:a9:de:0f:1e:0d:2b:07:af:ed:dc:05:2c:9b:
57:ba:a4:ca:01:09:12:3d:f8:5e:d0:1f:e4:b1:24:
5c:3e:b2:bf:67:b5:39:60:7b:2a:13:af:6c:37:4b:
11:bb:cc:da:e5:af:28:60:8f:f4:fd:17:99:a2:6c:
5e:8c:3f:8a:03:1c:d5:d2:8d:44:69:d4:7b:d1:3b:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B4:CD:CA:5F:D7:82:83:FF:12:5C:55:0B:6B:20:42:40:62:68:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9b957335-1a47-310a-b812-21c6a70ad503.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:9d:2e:f8:8d:81:db:f0:08:33:b9:ee:33:2e:40:a8:08:5b:
68:d6:d7:7a:1e:b0:f3:33:5e:11:b9:90:b5:e8:0d:c7:6a:d7:
09:a0:c6:dc:d2:0b:74:4a:f8:53:aa:15:20:c6:67:86:30:d4:
6d:0e:cd:80:34:d1:08:7c:4e:cb:95:55:0b:f7:72:de:0a:bd:
53:08:6f:bf:46:7b:bc:20:10:41:fa:72:8d:f3:55:c7:62:95:
bf:b8:d1:3b:81:4c:4a:71:40:67:17:7f:9b:20:08:a0:62:19:
26:88:fb:3b:42:7d:c1:21:a2:b5:95:91:cf:71:b4:80:00:45:
87:cb:48:c9:13:c2:81:4c:06:5e:2f:24:52:6f:18:be:62:a6:
07:3c:44:f8:26:97:09:c3:9f:29:7d:93:2f:44:ff:b4:48:d1:
1a:98:b6:63:89:54:73:ce:3a:02:b2:e6:ac:2c:9b:fa:b4:67:
c2:43:69:f9:08:92:4b:9f:f8:a0:e9:fe:49:7b:6a:9c:ce:36:
46:92:c6:5e:93:78:b7:f9:e1:c1:3f:d4:32:7d:f2:22:80:72:
a3:1b:92:6b:3e:85:31:c3:55:38:97:fa:37:19:80:a6:0b:f6:
d2:75:ee:86:de:36:d9:77:58:0a:3a:90:ad:e3:c8:77:c4:27:
98:e6:7b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:59 2025 by rpki-client