Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f20e528-6f50-3fb2-ae89-158cb1adc327.roa
File: 9f20e528-6f50-3fb2-ae89-158cb1adc327.roa (raw, json)
Hash identifier: WRk91XH8oQ1xU22PHDEo6Gk9e1t9pyaFdfpWiLTlATE=
Subject key identifier: 8A:D6:69:C5:F2:82:AD:20:36:0B:B3:8A:7F:1C:5E:60:17:21:FE:FC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C96B3C63C7EE712CC18F85B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f20e528-6f50-3fb2-ae89-158cb1adc327.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:b3:c6:3c:7e:e7:12:cc:18:f8:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=90eca100-d9ef-4709-9a75-aefaba89d46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:a4:2e:39:b1:01:4c:b1:0e:79:fe:ce:18:
26:c4:af:da:83:3e:43:bb:99:8a:7d:04:0a:1c:1b:
d8:31:8a:d0:ad:1d:25:69:c5:22:18:10:49:5d:99:
fd:5a:ba:eb:ef:25:39:33:b4:9b:06:5b:f7:dd:da:
6b:e5:48:9b:2c:32:0a:b2:ce:e4:b5:3a:5b:91:c0:
a2:6b:bd:53:5e:bc:60:6e:b3:e8:33:3a:af:64:30:
f1:41:83:b3:b3:59:63:3e:48:9d:46:d3:df:d6:30:
45:d5:60:8d:5b:c6:cb:f8:2e:e6:1f:fa:17:62:5e:
fa:b9:f1:91:70:e2:a7:7d:70:a7:e8:4a:a2:c6:62:
06:eb:63:6e:ee:4d:41:88:ff:06:af:87:8b:3f:5b:
32:94:0c:bd:23:22:35:81:83:98:c7:72:4f:6e:5f:
f5:62:03:f7:d5:0f:c9:6a:5e:7a:02:d0:e9:59:7f:
c0:21:46:5f:69:41:f6:00:b2:46:4e:99:6a:c1:da:
ba:3f:b8:e6:6b:fd:2b:5e:02:38:e1:e3:e9:41:70:
31:f6:95:3f:08:22:e2:92:8e:45:16:28:91:9d:62:
39:80:48:10:7b:9d:8c:3e:5e:dc:42:7b:e6:e7:bd:
8f:08:cd:84:3a:1b:52:b7:a5:95:aa:aa:10:d3:7e:
8f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D6:69:C5:F2:82:AD:20:36:0B:B3:8A:7F:1C:5E:60:17:21:FE:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f20e528-6f50-3fb2-ae89-158cb1adc327.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:0b:63:d4:6c:66:ea:d9:d3:e5:36:47:ae:fb:5c:65:e4:a9:
95:75:b1:76:a4:d4:a4:83:2e:31:1f:6d:38:3e:41:35:61:e9:
0d:97:88:1f:94:9f:53:6a:44:9c:bc:cd:40:69:7b:ab:6d:76:
5f:cd:10:f5:81:ab:cb:6c:20:13:8d:1f:6e:37:3f:fb:07:9a:
90:94:70:36:6f:5e:15:89:c3:64:22:45:2a:d4:ca:01:0e:3a:
c0:0d:0c:f7:c1:ea:44:af:c6:04:18:80:10:d4:d6:b3:e5:62:
6c:35:d1:9f:6e:48:2c:10:cd:5b:4a:2f:0c:79:18:f8:6a:27:
d3:c5:d4:8b:48:7a:b0:36:b2:1e:50:b7:b8:b2:44:2f:5b:9f:
d7:03:3f:46:a2:41:59:9e:4b:12:18:93:2a:ef:d7:a8:fc:a2:
0d:0a:8a:e9:e0:48:ce:e3:b5:00:62:0b:9f:55:89:ec:31:6c:
15:11:82:30:d1:2f:0e:d5:f5:72:01:1c:20:06:17:cb:20:96:
90:23:9d:1b:e8:62:a9:06:d2:45:08:c6:55:bd:d8:54:96:e1:
ed:98:71:04:8b:44:16:52:8a:d9:e6:ee:b7:5c:f5:13:a7:6a:
d0:e6:dd:bb:15:9f:08:b0:a4:ea:4c:ad:8e:bb:69:74:4a:28:
12:fc:bb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:09 2025 by rpki-client