Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6b1c9ca-7f79-3496-a9f5-8c811acde1e5.roa
File: a6b1c9ca-7f79-3496-a9f5-8c811acde1e5.roa (raw, json)
Hash identifier: xJoDxLFeFHCUiBcSGYsoMuPg7ZZ/zzZQFAdi6tnPdUA=
Subject key identifier: BE:74:BB:A2:B8:3D:D9:93:D5:3E:F1:87:40:CC:21:A2:86:2D:7A:A8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840BC7CE4F06B56437DA7404B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6b1c9ca-7f79-3496-a9f5-8c811acde1e5.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bc:7c:e4:f0:6b:56:43:7d:a7:40:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=b5f0caaa-3b43-40c9-9de7-92f8b6fffe33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:66:52:44:f9:f9:d8:dc:ca:06:5a:84:ff:03:
33:dd:05:77:5b:12:db:c7:07:44:22:18:9a:33:86:
1d:ab:fb:08:94:4c:7c:d8:be:5a:ab:c8:ef:4f:16:
3c:42:b4:82:05:3d:c1:3a:c7:51:58:09:73:b8:a4:
16:01:18:a7:f6:df:7e:83:2c:9b:46:d9:c5:a6:04:
ee:dd:50:b7:d7:67:4f:6c:a4:63:eb:03:8f:5c:c6:
67:37:89:7e:4e:b3:c9:15:f1:72:07:44:f9:61:53:
e1:db:11:1a:f8:65:5e:5b:f6:fe:f0:ec:aa:b3:74:
3d:9b:9e:18:9b:46:c3:32:78:22:a1:37:38:93:f7:
13:a0:24:1a:76:1b:44:31:24:03:9a:f7:fe:39:f7:
a4:70:ef:75:ca:bc:c3:fd:1f:ff:01:2c:d8:c5:9f:
d8:af:ff:a7:8b:de:a2:8b:72:66:bf:20:0c:4c:34:
48:80:ac:26:ac:60:5e:25:69:74:7f:e9:dd:09:e7:
06:1a:57:c8:b0:3a:76:50:2c:60:83:0e:14:1a:8c:
75:4e:df:c9:24:09:88:fc:c6:2a:16:03:a2:73:42:
1b:59:27:56:e0:95:e8:86:04:a8:2e:ed:41:88:eb:
01:ce:1d:ac:24:8f:d5:c0:d4:ff:f0:73:cf:0c:88:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:74:BB:A2:B8:3D:D9:93:D5:3E:F1:87:40:CC:21:A2:86:2D:7A:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6b1c9ca-7f79-3496-a9f5-8c811acde1e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:8e:2e:68:56:b4:40:90:ac:6f:bd:7d:2a:e4:cb:65:55:de:
8f:68:a3:d1:58:32:34:98:78:6c:9c:1a:ef:a7:b7:01:c1:fc:
05:80:5d:fd:f7:fb:67:50:91:20:aa:f0:fa:c6:da:84:5b:c7:
76:c2:61:38:61:bf:e1:4c:3f:a7:af:9d:b8:e2:60:aa:11:9c:
9c:d6:81:75:84:35:83:00:bd:95:14:35:02:2f:fa:75:60:51:
2d:38:5d:dd:42:f6:ee:91:8d:5f:bd:38:4a:60:ea:30:9b:98:
a0:e8:a7:45:79:f4:cb:0d:0e:02:ae:1a:5f:66:c4:f6:1f:9d:
2a:9e:62:dc:2f:8c:98:bd:19:5b:01:21:0f:68:c1:7f:d3:c5:
60:ae:0c:bc:5d:bc:d5:0a:20:75:3d:05:7a:a0:66:4a:6e:69:
aa:6c:ea:ac:84:21:20:95:44:1c:a0:66:90:36:6a:21:2f:08:
cf:6e:08:27:d2:14:3f:78:2d:05:37:13:42:dc:11:6f:c9:21:
07:2e:c3:63:d5:f7:85:ac:64:43:ab:96:4d:26:74:3a:d3:b3:
26:6b:82:c4:5e:c3:56:4e:f7:a3:6b:01:7c:e6:13:ef:da:bd:
c0:a9:b8:72:9e:74:5c:71:33:ae:a8:82:8c:bb:51:e2:07:de:
e5:fc:0f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:56 2025 by rpki-client