Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9a4c120-2b32-3b64-a789-f4a391591ada.roa
File: a9a4c120-2b32-3b64-a789-f4a391591ada.roa (raw, json)
Hash identifier: QY6xPD0fT9r8uwyCTZA0kMHJnOsO51VMyvthnjrFW7g=
Subject key identifier: 5A:17:C1:95:FB:D3:74:F1:36:C5:90:C2:5F:F5:7E:6B:0D:EE:D4:99
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584019F4B3B423A87264F9A9A140
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9a4c120-2b32-3b64-a789-f4a391591ada.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 99.82.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:f4:b3:b4:23:a8:72:64:f9:a9:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=9805e70c-f3fc-44cd-97d6-7fbfe61df957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:d5:97:be:dc:a4:14:f9:56:b4:a5:0a:ff:
ac:d3:ef:61:5c:df:15:3b:56:33:6c:1f:ba:7b:7e:
c3:0e:4b:d6:cc:8b:74:a5:46:26:e2:a2:ac:95:07:
e1:2f:b8:c7:2c:17:c6:a3:9d:02:10:cd:f9:bd:9a:
85:b6:34:9d:db:7e:4f:ad:e5:81:13:2e:b9:be:16:
56:64:64:0a:86:fb:24:5f:ef:11:66:6d:28:01:83:
bf:7b:18:7c:81:b2:93:26:0d:f1:db:0a:71:52:a4:
d6:f6:e6:3d:7b:a7:c3:f2:f6:03:b0:d2:1f:b2:a7:
93:74:f5:2e:24:6e:af:5b:95:2e:31:24:80:da:07:
56:55:7b:13:6c:ad:ac:c6:db:4f:83:5f:65:01:0d:
6f:7f:bb:42:30:39:20:a6:50:d3:62:c7:48:3a:78:
e5:5c:0e:43:79:a2:76:bb:fb:ed:3e:cd:14:5b:b9:
ac:0f:16:2c:4e:74:21:23:ca:1f:67:ec:1e:a1:07:
08:9e:ae:a3:54:ce:61:8e:5f:c9:85:77:44:3b:77:
72:23:de:73:73:ec:61:c8:a6:1b:28:10:e0:16:ba:
61:11:4e:3f:28:87:53:62:f5:20:dc:2e:d7:0b:5c:
da:09:1b:5c:d9:db:36:16:8f:2b:03:e0:de:30:38:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:17:C1:95:FB:D3:74:F1:36:C5:90:C2:5F:F5:7E:6B:0D:EE:D4:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9a4c120-2b32-3b64-a789-f4a391591ada.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.82.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:89:aa:e3:3e:02:7b:1e:7b:c2:dd:12:a3:9f:03:ee:fd:ed:
94:25:f4:4a:18:25:b8:74:f8:66:68:f1:db:14:12:fb:6d:eb:
9e:9f:bb:a6:fb:16:33:62:2c:aa:e2:f1:fb:d1:10:f1:7f:ef:
79:a5:78:b2:6f:05:75:a2:fc:c5:63:d9:14:23:93:38:fa:a5:
ce:87:0b:89:73:53:65:f6:a1:4e:a9:c1:30:c9:c1:9c:c2:1b:
a2:35:16:6c:e3:bf:6a:62:e0:eb:34:1a:6a:86:00:02:62:ed:
c3:f9:6d:83:5d:a4:fc:34:38:d9:36:10:5b:0c:a0:c7:9a:a2:
94:0f:9c:7d:dc:59:3b:39:95:d8:78:b6:a1:ad:67:06:9b:04:
23:64:8a:ec:4f:95:f8:68:59:d5:dc:11:b6:a9:d0:43:c3:b4:
d5:af:4e:82:b1:e4:3e:fe:b8:c0:83:5d:38:9d:02:3f:4f:7f:
96:f2:72:95:ed:1e:5a:f4:46:f3:f9:c9:50:20:17:34:24:d9:
ac:a8:60:7d:3d:f3:b8:a1:62:c9:be:13:d8:78:7b:5d:6e:a0:
9e:59:c6:37:2d:c9:db:26:af:81:b7:51:80:1c:3f:98:f1:1f:
f8:45:00:33:c9:df:15:87:9d:fb:87:e8:95:1d:f3:3d:85:3b:
5d:c2:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:58:39 2025 by rpki-client