Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a3e40d7b-81b4-3812-a4eb-cabd607e23b3.roa
File: a3e40d7b-81b4-3812-a4eb-cabd607e23b3.roa (raw, json)
Hash identifier: 8L3Lc0tm6EUCkh0DotRYN6u+mQMqwJBxraJAESNYZw8=
Subject key identifier: 28:4A:D2:4A:88:EA:8A:AE:65:40:6C:D0:9B:44:08:63:56:83:2D:E9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBDD81CA557A2AC9FBEA1C400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a3e40d7b-81b4-3812-a4eb-cabd607e23b3.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 130.171.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:d8:1c:a5:57:a2:ac:9f:be:a1:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=04469ff7-84a4-4da7-ac44-6e828df44b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:75:c6:bf:51:e3:86:69:56:57:77:b1:4a:
e1:41:03:12:98:5c:0d:66:9d:77:9f:46:05:af:2d:
db:30:d9:c2:b7:49:42:b6:11:19:52:21:14:32:04:
8e:44:3a:50:18:80:bb:dd:14:64:7e:13:fc:57:07:
82:58:5c:0f:85:9a:95:a4:0d:31:1d:f6:2d:c7:8e:
7b:6e:80:d5:25:c1:45:d9:97:77:46:c9:fa:c4:39:
c3:bb:86:7e:a9:d5:e5:5c:d9:9a:67:cc:20:12:e4:
fb:9c:6a:83:c7:46:8e:7f:b6:64:dd:f3:72:77:b7:
5d:69:41:b7:7a:c8:ed:79:81:46:1e:9e:74:d1:19:
c7:df:16:7c:7e:96:1b:99:7a:5e:f0:92:6d:e0:df:
0b:41:7d:78:b6:45:27:eb:51:17:55:aa:89:69:cb:
62:59:e9:d3:76:62:fe:c0:39:68:cd:cf:14:af:a4:
1f:91:8a:f9:ba:78:b9:8e:10:31:23:1a:8f:56:d5:
1c:14:e5:4c:ca:ed:c8:32:48:48:73:88:30:b9:18:
a1:ea:4e:18:b4:46:bf:14:a9:96:2e:06:ed:1e:e0:
b1:89:e0:73:d9:ff:e8:f6:d6:ba:f5:40:42:8b:9b:
dc:d0:61:7e:44:1e:f3:e6:29:fe:b0:a5:10:73:af:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4A:D2:4A:88:EA:8A:AE:65:40:6C:D0:9B:44:08:63:56:83:2D:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a3e40d7b-81b4-3812-a4eb-cabd607e23b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.171.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:7f:8f:19:51:50:9f:8b:e8:07:c3:fa:ba:19:e8:4b:d8:a2:
10:b6:35:92:a1:93:4a:1a:9f:99:2a:91:01:0e:56:27:94:3c:
e9:ce:64:f3:92:ed:a5:5a:f4:25:da:33:3e:0c:bc:2c:27:1b:
d3:b6:c8:ea:71:97:72:2e:35:ad:be:46:7d:51:ba:8f:e3:6f:
ab:33:39:ba:a8:f0:70:9b:06:90:74:89:ad:ab:4c:c4:25:35:
d5:63:e2:89:7d:51:2f:e7:28:1a:77:df:73:54:71:6d:9e:c7:
e8:19:7b:e4:32:17:98:69:1c:b4:eb:5f:82:81:f8:b3:a3:d9:
08:43:0a:6e:d2:e4:f6:a3:6c:be:17:cd:79:c5:10:6e:ca:fe:
6c:f5:6c:b8:c2:28:73:70:62:c5:b8:48:52:cd:b9:55:35:8f:
40:14:15:f9:09:72:6c:6f:60:30:e5:ba:23:c8:91:6a:07:6a:
4a:92:d9:51:de:7f:18:47:09:c2:e3:89:ff:d5:ff:1f:d0:7b:
82:7c:71:59:5c:88:36:6c:2c:8e:a2:81:08:b5:25:59:6b:79:
6c:95:0a:0b:3d:a0:f5:df:17:dc:37:73:17:79:3a:7a:ca:ac:
03:e7:b7:22:b7:aa:75:da:ce:9c:ec:be:0b:0b:fd:cd:a1:44:
ef:6a:33:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:52 2025 by rpki-client