Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5beea96-1979-3c67-88e9-c7180cb37d6c.roa
File: a5beea96-1979-3c67-88e9-c7180cb37d6c.roa (raw, json)
Hash identifier: zff/ZTaAMf4F0qT70/JhGu38XWkPZCjxnA/T+UU9bt8=
Subject key identifier: 01:59:CF:6B:FA:AD:92:C5:9B:84:90:21:EA:67:F3:5A:98:FC:EC:C8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0C63F6FE28F0E6A0EAC54350
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5beea96-1979-3c67-88e9-c7180cb37d6c.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:63:f6:fe:28:f0:e6:a0:ea:c5:43:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=300084ba-efa3-459b-94fa-32a4252d5bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:65:8e:a4:3f:25:2d:dc:27:d3:7f:a2:ac:
2c:da:82:29:28:8a:0e:0c:2c:5b:74:c4:80:27:2a:
ba:a4:c5:b1:ba:7e:4a:d0:88:ad:33:f8:9f:03:8c:
86:d8:19:ef:a3:c4:5b:4f:97:b6:3b:fe:0a:db:31:
c9:9e:25:f5:64:44:ee:90:5f:0a:81:66:50:e5:72:
cd:84:e6:54:dd:63:ac:65:e2:15:bf:7a:91:88:37:
bc:e2:56:1c:52:15:dd:88:35:ba:ca:78:05:77:2e:
79:c7:40:76:c6:4c:2c:bb:57:88:84:01:7f:3c:61:
3c:dc:23:44:98:95:cb:c3:f1:70:6a:0c:0a:95:ae:
d7:da:0a:70:19:51:af:b1:06:1b:a9:d6:ad:ae:9a:
d8:f2:30:b3:c1:16:1b:74:ea:bb:16:6d:56:2c:08:
71:fa:39:8a:5c:cc:3a:45:a8:a9:7c:dc:50:41:9e:
a5:59:14:17:33:c6:90:fb:f6:a3:41:aa:9f:51:db:
ee:92:1c:16:3f:00:2c:f2:9c:05:84:4e:c3:77:c3:
72:6f:b0:63:4b:22:e8:40:0f:78:2a:f7:f8:0c:cd:
b5:5d:44:e1:77:3a:b5:5a:0c:78:4d:fd:6f:51:23:
81:4b:73:2d:a8:bd:3a:30:2e:db:2b:83:27:45:b1:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:59:CF:6B:FA:AD:92:C5:9B:84:90:21:EA:67:F3:5A:98:FC:EC:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5beea96-1979-3c67-88e9-c7180cb37d6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:41:21:df:66:bf:5d:19:f9:97:ee:07:1f:8a:8d:7e:a3:03:
30:58:02:20:bd:10:ac:8c:eb:22:e2:de:f2:41:e1:4c:90:93:
8b:e4:68:45:a5:98:7f:e1:6c:d9:25:fe:9a:3e:bf:81:e1:42:
3c:b1:50:3d:09:89:c3:42:50:9a:7e:f9:86:a3:8e:7c:c7:47:
ab:fe:43:c8:9c:88:53:cd:01:c1:fc:2f:8e:4b:ae:f1:91:29:
ae:83:ea:fa:54:73:f1:8b:d6:bd:c1:64:01:99:6c:06:59:47:
4a:93:8c:54:12:da:d3:e3:32:d9:b7:19:63:3b:1b:3f:10:8f:
dd:64:d6:0c:4d:9d:e3:e0:56:1f:6d:2d:13:ce:ed:b4:cb:07:
38:8f:9d:b6:d0:13:c5:27:0e:c0:d9:02:9d:d6:da:09:1a:f8:
6f:5d:2e:f4:5f:56:f2:69:79:90:f4:1b:87:01:c6:c2:e4:6c:
7a:53:b2:89:4b:96:b8:69:51:15:6a:49:39:22:af:e7:7c:18:
dd:43:e0:8a:70:25:71:77:7a:6e:c3:86:4e:59:c4:10:24:6d:
36:1f:2d:11:a9:4a:06:0a:61:08:0c:b6:c3:42:cf:e7:b4:44:
ef:24:f7:6f:a4:f3:f2:59:76:e6:2e:09:22:fb:c1:c5:bf:39:
b8:68:59:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:09 2025 by rpki-client