Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9dbce250-e157-3b1a-9407-dd2abcd87752.roa
File: 9dbce250-e157-3b1a-9407-dd2abcd87752.roa (raw, json)
Hash identifier: k03MQHlzZHtEahYzz6pQ0sbdBUjv5uwGIfi5/LXiqTA=
Subject key identifier: 49:9D:24:35:31:2C:92:1B:59:30:CA:E7:D3:20:B0:B8:20:FD:A8:75
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401D974E4CAACA73D2CF359200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9dbce250-e157-3b1a-9407-dd2abcd87752.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1d:97:4e:4c:aa:ca:73:d2:cf:35:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=d29280a8-09d5-4d39-ac00-f71fac9d30af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:aa:b7:a7:9d:49:9b:87:a6:04:4a:92:29:79:
f1:b5:00:ad:dd:21:77:e3:27:3a:f4:5e:6c:57:9c:
4d:53:1f:cb:53:bb:14:fd:3c:28:f5:48:e6:ae:50:
71:f2:7c:5d:e7:e2:b5:88:0e:85:52:a5:ea:95:e0:
58:46:6f:ac:a1:d0:98:66:97:2c:9a:d9:b0:48:7c:
5b:4e:7c:9f:dd:44:b2:e8:24:b2:03:9f:63:0d:0b:
ed:d3:20:9f:63:6c:91:24:69:98:d6:eb:eb:a8:6f:
93:40:67:e9:83:75:e2:37:27:cf:dc:05:cf:28:c0:
7a:1e:35:50:76:b4:0c:c3:1f:6a:d5:fc:87:7f:8c:
b0:2c:c3:d9:a8:f6:f3:82:f8:e0:5b:88:d7:fd:86:
65:f4:85:2a:49:85:a5:2e:12:11:49:f1:05:ba:6f:
51:f0:e8:0e:07:e0:39:5f:62:d6:f8:3e:a8:8e:d2:
a2:c6:62:fc:47:35:80:78:ea:b3:14:25:98:3f:e2:
c4:a6:c1:07:53:71:ed:9a:16:8a:19:81:aa:ac:35:
60:9b:e4:db:62:a3:21:d3:fd:86:f3:97:d9:c5:66:
c4:c3:d9:91:d2:b5:ce:14:0b:b6:7b:bc:e3:b9:75:
cf:a0:65:20:16:37:b9:fd:7c:0d:07:a5:8a:40:40:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9D:24:35:31:2C:92:1B:59:30:CA:E7:D3:20:B0:B8:20:FD:A8:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9dbce250-e157-3b1a-9407-dd2abcd87752.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:55:35:1c:c9:5f:8d:3c:b5:4c:ad:49:a2:13:5e:5b:75:38:
7d:0b:8c:06:7a:82:43:d1:07:14:ac:1f:5e:7f:74:77:32:88:
f3:21:95:73:61:b3:a4:4a:5f:30:4a:cc:a2:ad:da:88:26:32:
50:e0:05:4e:a0:4d:6f:32:7d:ec:44:87:e4:98:44:d4:cd:f6:
9d:d5:85:7c:24:76:23:5b:fb:dd:35:b9:8e:48:ac:41:d6:60:
3b:f7:3b:db:62:0c:0e:4a:7b:3c:08:e1:0a:5a:33:1c:4d:ab:
64:88:18:cb:82:33:47:16:79:fe:c4:87:4d:73:0e:84:bb:ff:
5c:29:eb:42:91:a4:7c:7d:b3:1e:a2:e6:6c:45:78:f7:a7:a3:
f3:82:04:a6:c7:26:12:3e:6e:b6:45:c1:55:8d:b0:4e:0e:58:
17:14:60:93:2e:dc:36:60:b9:01:50:a4:28:de:04:49:7b:55:
6d:fc:ef:59:86:68:af:e9:7d:8d:c1:d6:a4:2c:a1:11:a6:d4:
b6:01:17:bd:fa:9c:ab:0c:48:6d:18:58:e8:17:24:09:2d:8c:
b1:7a:54:7c:fa:35:bd:44:10:fb:92:b7:13:2c:8c:c6:0d:36:
0e:71:ef:21:f6:dd:6e:2d:c5:38:2e:c7:17:d3:b5:1e:25:70:
e1:aa:18:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:40 2025 by rpki-client