Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a1ec8332-6999-3c2f-96f4-bc3c3ceace3d.roa
File: a1ec8332-6999-3c2f-96f4-bc3c3ceace3d.roa (raw, json)
Hash identifier: y000u6LTuL3xkHgrUawijdOLbjuSTb4CnDFYcOQ5cKE=
Subject key identifier: DA:3F:3B:4F:5F:C4:9B:E9:EB:4D:E1:D0:F2:A1:4E:04:65:C8:C4:07
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840449E2B3CE2F534181BD5EC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a1ec8332-6999-3c2f-96f4-bc3c3ceace3d.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:44:9e:2b:3c:e2:f5:34:18:1b:d5:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=1073093b-c90d-4c51-a102-87871b926ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:6b:2d:63:7f:59:a8:8d:cc:1f:60:e1:9b:
d6:c4:6f:d3:ac:12:a9:7e:39:94:ef:22:59:ee:90:
01:f8:a1:3a:ad:70:6a:a4:50:a4:89:05:77:b9:22:
fa:bf:98:35:2b:d1:31:ea:b8:ef:97:0f:c8:79:eb:
d8:a8:91:5f:72:a9:4d:18:ce:e8:22:3c:84:2f:16:
cb:d6:b2:52:16:b9:f4:1e:99:2b:e6:8e:46:07:7b:
44:12:bd:78:cd:ca:3a:da:66:91:e5:e4:19:26:ab:
34:94:69:9a:6a:74:05:70:64:5f:4e:35:c7:e2:82:
42:41:16:cb:d3:c2:08:4e:ce:b8:16:d2:c1:1a:2f:
56:8a:a0:93:df:aa:0b:e5:b5:01:e6:a9:c2:23:21:
61:69:f0:9a:df:0e:cf:1f:72:a0:74:01:05:2f:15:
f4:83:de:c0:7b:b6:a0:e1:2b:26:60:7a:85:39:57:
5e:a4:b9:d9:4b:58:e4:24:19:b0:6f:28:05:c6:ff:
91:31:2c:93:8b:0c:f8:fd:ba:92:1b:c0:da:f8:da:
10:23:e9:92:12:4a:1a:0e:0e:42:ec:7d:f6:b4:29:
99:5f:f6:4b:7e:33:c5:2e:1f:d8:1e:65:8c:e0:e5:
34:48:55:ed:61:28:dc:52:4e:06:db:a7:98:2b:bc:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3F:3B:4F:5F:C4:9B:E9:EB:4D:E1:D0:F2:A1:4E:04:65:C8:C4:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a1ec8332-6999-3c2f-96f4-bc3c3ceace3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:c1:a1:85:49:bb:78:8d:4d:b9:ce:d4:48:43:ff:e7:66:ea:
e9:22:67:35:ac:01:31:b3:c0:fa:63:99:b5:7a:dc:86:71:da:
63:b2:19:1b:9a:3d:1e:16:c6:d0:a6:22:64:6f:c9:bd:05:eb:
fc:d1:a3:54:ee:c6:e8:2b:0b:e7:2b:5d:9a:0d:2a:80:48:b8:
45:b7:90:7b:53:58:dc:e4:a6:07:39:59:39:b5:02:64:f1:c2:
3e:76:45:59:8c:df:c3:34:10:cf:ff:1b:ef:a2:a8:29:f4:0c:
b9:c2:5f:0d:92:ac:49:f5:ab:8e:5e:6a:4d:47:64:74:53:e8:
f3:2f:dd:2e:fc:12:16:a6:ce:85:fa:e6:1c:00:f2:f6:6a:d0:
d7:a2:49:e4:fb:b4:e7:f3:ef:30:03:4b:9c:df:01:65:97:d9:
40:54:36:1d:55:e4:3e:a5:77:0e:ad:f3:ff:99:2d:0e:ff:1f:
75:42:be:cd:af:3b:4b:e1:66:f9:82:d3:c1:e2:93:84:fa:4c:
5f:5a:fe:5c:92:a9:2d:80:b8:5e:ac:7a:d4:aa:0a:d1:ef:8b:
87:82:27:b7:5b:1b:75:b8:b6:86:09:ee:bd:cf:ae:6d:86:30:
60:57:75:96:7b:3e:a5:4f:0e:59:8b:39:93:56:66:e6:7e:c9:
b2:e4:77:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:04 2025 by rpki-client