Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a042bdcb-3e37-3825-8223-a3a737fb9952.roa
File: a042bdcb-3e37-3825-8223-a3a737fb9952.roa (raw, json)
Hash identifier: vObfqbm6wld9nng+KlegBGrojqDPqhLbKgVl73eqP0w=
Subject key identifier: 2A:6B:A3:94:B0:73:3D:5A:B0:DA:7B:98:0A:CC:3E:71:A4:14:BC:DA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F5DFAA8AA416B423356A9B900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a042bdcb-3e37-3825-8223-a3a737fb9952.roa
Signing time: Sun 25 Sep 2022 12:00:00 +0000
ROA not before: Sun 25 Sep 2022 12:00:00 +0000
ROA not after: Mon 31 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 130.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5d:fa:a8:aa:41:6b:42:33:56:a9:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 25 12:00:00 2022 GMT
Not After : Oct 31 04:00:00 2022 GMT
Subject: CN=c4595759-1ad1-4f24-97d7-3f9c10186ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:e3:64:0e:52:92:c2:74:7f:57:1e:a5:e2:
28:a6:16:00:f5:aa:7d:66:f6:a9:5b:95:1c:44:76:
65:10:65:16:c9:9c:0b:9f:cd:ea:b0:8f:bc:5f:5d:
33:1d:9f:fb:90:79:77:88:2e:6d:fd:5c:72:34:71:
fc:b5:86:22:03:7d:3e:41:f3:cc:d5:d6:d3:c8:e5:
77:39:25:9c:21:ef:8c:ef:e4:c9:6f:dc:e0:27:51:
d7:5e:92:8e:0b:40:26:a4:6a:0d:60:e4:b0:cb:70:
34:ee:36:91:6d:19:0d:4a:cc:3b:41:22:73:03:ea:
a6:6c:33:7c:04:9d:95:c7:7a:40:8a:74:9c:e3:aa:
cd:0c:5b:a1:0b:40:88:79:04:82:2e:1b:43:e3:6a:
36:fa:2a:0b:f6:f9:c8:79:e2:e5:02:63:8f:f3:13:
8e:b2:44:7d:3a:81:52:5b:36:c7:75:27:3f:5f:75:
95:f2:cc:31:c8:d2:26:ad:77:e8:7e:e4:d9:21:c8:
71:49:42:ec:88:9d:d3:a4:8b:30:b7:eb:2c:3f:ae:
a2:58:89:9a:d6:59:db:c7:9d:09:82:06:99:bb:a9:
b8:04:14:56:a6:df:90:1a:48:26:d1:7f:dd:26:2e:
10:74:41:c8:63:00:20:13:5a:c5:8e:14:e0:04:43:
3a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6B:A3:94:B0:73:3D:5A:B0:DA:7B:98:0A:CC:3E:71:A4:14:BC:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a042bdcb-3e37-3825-8223-a3a737fb9952.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:69:c0:68:cf:13:b9:30:6a:87:f8:d6:03:03:de:4e:61:fc:
de:53:d0:04:c3:48:7f:09:00:c5:e5:8f:5f:45:87:47:db:14:
f8:66:d6:f5:2a:22:d6:58:dd:6f:a6:f7:27:43:05:91:40:fd:
cb:a2:3d:70:4e:4b:64:8e:56:11:38:d3:fc:97:87:f0:b1:e4:
55:6a:70:f2:ea:4d:4a:40:12:18:2e:e5:2e:2a:e5:a5:74:71:
df:2f:53:35:b6:90:c5:17:38:65:ff:8b:e4:90:b8:e4:4b:e4:
d6:11:2e:83:a9:b6:6d:e3:6c:54:bf:86:db:3d:b3:29:28:08:
e9:5d:df:68:cb:5e:82:9b:79:7c:8c:c9:da:df:80:e0:00:d5:
5d:02:ad:03:81:8a:57:6b:b9:1c:e5:7f:6e:d7:6e:6d:5a:61:
85:a4:cb:90:84:bd:36:19:ef:24:6e:20:1e:7f:62:d4:a5:b3:
4e:30:a0:82:fb:95:df:36:73:9a:e0:af:43:46:e1:bf:23:3f:
3e:ee:eb:33:98:15:b4:5a:23:19:55:0e:bc:79:f8:95:55:82:
9f:8c:29:7a:60:c3:f4:a7:96:75:23:81:59:c1:01:eb:74:00:
5e:3d:5b:43:1e:81:a5:af:f6:fd:a3:0e:cc:70:5b:f3:69:7f:
ec:16:b5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:32 2025 by rpki-client