Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5f5cab6-1f40-34f8-be4b-dd0c8ca825ca.roa
File: a5f5cab6-1f40-34f8-be4b-dd0c8ca825ca.roa (raw, json)
Hash identifier: gZLhyLM4vhnPBfgjOnpnBS1VpFS3N5xE3ptQqkMIJnc=
Subject key identifier: FB:3C:B4:1E:20:FD:E4:12:EC:AB:80:3F:B8:38:CB:9D:74:31:8B:79
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840755B7912CEDA2DBF340EFE40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5f5cab6-1f40-34f8-be4b-dd0c8ca825ca.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 128.81.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:75:5b:79:12:ce:da:2d:bf:34:0e:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Feb 8 05:00:00 2023 GMT
Subject: CN=5e7652f7-812b-4c7b-b2ca-10721ad7b7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:5a:e7:d8:44:d6:a3:6f:82:7d:31:3c:33:
6d:5b:12:2c:14:b1:79:c6:50:de:7d:83:e4:0d:0e:
2e:ac:b7:ad:89:3e:52:d7:f2:b6:2a:e5:4a:d2:c4:
2b:d7:26:ec:1c:c5:5a:08:ac:e1:78:bb:ae:4b:39:
b7:70:fd:6d:b9:c5:96:45:23:6e:d1:73:4d:9b:5b:
a9:56:c1:57:ab:df:69:a2:11:a2:48:89:96:21:63:
00:54:34:14:8e:ed:08:c9:1c:48:41:6d:b9:6f:d5:
66:41:aa:c1:49:2e:77:da:f7:b5:0b:50:4e:a1:e0:
46:4c:0b:d9:d0:92:be:78:58:9d:93:04:22:8d:fb:
98:af:ae:d6:c1:82:35:7c:c1:2d:1d:19:37:36:30:
4e:26:fd:c7:4e:44:f7:bf:02:f1:9f:cc:33:9f:f1:
0c:4f:56:04:6e:7c:cf:bd:18:ee:78:91:8a:e9:62:
58:31:5d:11:6d:6f:85:28:db:c2:f4:cb:95:1d:58:
4c:ee:37:65:9d:31:6e:33:e1:4f:ac:2c:53:ad:35:
b9:42:4d:aa:c4:a8:9f:70:fd:c1:6e:87:65:07:d1:
97:eb:9f:bc:5c:02:f1:78:69:29:24:9f:ea:b3:6f:
5c:4e:67:60:af:44:98:02:6d:07:4b:c7:1d:9b:f2:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3C:B4:1E:20:FD:E4:12:EC:AB:80:3F:B8:38:CB:9D:74:31:8B:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5f5cab6-1f40-34f8-be4b-dd0c8ca825ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.81.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:1b:80:1e:28:b5:96:03:c9:a3:56:6f:e1:af:52:26:32:c3:
02:4d:ee:64:5f:9b:a3:de:5c:bb:ea:a1:78:52:b8:f5:f8:c0:
0a:a1:28:05:89:68:04:35:48:26:64:08:e2:15:a5:90:24:34:
71:4c:fd:56:f7:e6:fc:2f:c4:10:1c:23:ec:22:ee:a3:06:d3:
86:f8:27:2c:87:ff:09:28:a7:63:03:34:26:e5:c0:48:7e:e3:
6b:89:ac:48:36:bf:61:6d:b6:67:61:7c:ec:92:20:60:36:9a:
b9:e2:78:05:a9:7b:fc:9d:6d:5f:68:36:9b:59:69:c4:1b:c0:
5b:04:9e:ee:52:67:b2:5d:c0:d4:2c:c6:c7:f2:27:86:68:aa:
e4:bb:23:9b:aa:43:ad:93:d4:1c:fe:e6:0e:9f:a0:f5:03:1a:
03:a9:df:41:5f:6b:db:37:67:c5:e3:10:ea:3d:12:e3:1f:32:
a5:3a:03:ce:f3:fd:e8:51:a8:39:63:24:aa:0d:bf:66:3f:83:
b5:1e:f4:e6:1c:32:d7:69:7b:85:cd:58:a4:8f:83:67:94:1b:
25:61:bf:9d:28:f5:db:41:4d:05:2a:0a:1d:2b:31:aa:df:3f:
6c:6a:9e:5f:12:45:b5:89:09:e7:d3:d1:8c:b1:65:d1:c8:f2:
d2:fa:cd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:30:34 2025 by rpki-client