Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9f50f9a-2f19-344f-9f1d-d7c957d25ea8.roa
File: a9f50f9a-2f19-344f-9f1d-d7c957d25ea8.roa (raw, json)
Hash identifier: XZCiHKCwVuYAxfngma9YEd5UngNMgCtnyZHgUEMyB/8=
Subject key identifier: 7F:48:4F:0F:78:B0:E1:FF:9D:B0:43:BF:40:ED:FE:D2:76:29:A8:A0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FFA587083EDBF33A67CF44720
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9f50f9a-2f19-344f-9f1d-d7c957d25ea8.roa
Signing time: Sun 20 Nov 2022 12:00:00 +0000
ROA not before: Sun 20 Nov 2022 12:00:00 +0000
ROA not after: Mon 26 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 130.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fa:58:70:83:ed:bf:33:a6:7c:f4:47:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 20 12:00:00 2022 GMT
Not After : Dec 26 05:00:00 2022 GMT
Subject: CN=aeeabaa6-7fc0-46b8-bed1-8a938cf3510d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d7:53:3c:42:71:0e:60:0f:54:71:49:c9:37:
24:3f:87:1e:b4:b6:f0:ad:5a:54:be:f9:64:86:0e:
ab:c6:5c:1a:68:01:02:1c:45:e7:13:30:11:d3:f4:
83:d4:07:e4:30:98:5f:0d:f6:c0:a1:68:d4:e5:f3:
ea:8f:fa:54:af:ce:db:78:d4:2d:3c:f9:0d:a7:42:
12:03:2d:80:e9:2d:f9:a4:e3:5c:fc:7a:85:fe:84:
05:66:8f:b7:08:b3:03:bd:bb:b9:77:08:0b:d8:8c:
07:97:33:73:d4:70:14:22:bd:96:80:4c:1f:5f:1b:
f7:97:d5:31:e8:94:3d:80:a5:8a:2b:ff:6d:28:fb:
2c:1a:3a:be:6b:6c:71:fe:c4:8c:63:ee:5d:79:3d:
85:69:67:27:3d:5f:d9:c5:a8:62:95:ce:c5:5d:b7:
23:d9:3f:5a:a7:e1:ac:2f:72:aa:27:b5:35:6f:e1:
06:71:0f:6a:8e:fc:a9:38:d2:1f:ab:b5:c4:77:88:
89:43:46:39:d4:45:1d:b5:51:91:04:93:92:f3:c0:
6d:e3:4c:27:06:1d:7f:5d:d8:ab:28:7e:ef:9f:99:
83:0c:6e:8b:5d:06:89:13:d8:7f:87:9f:9c:31:f9:
43:32:e7:38:c8:e9:c9:c0:1a:ca:d2:c9:7d:b9:f7:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:48:4F:0F:78:B0:E1:FF:9D:B0:43:BF:40:ED:FE:D2:76:29:A8:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9f50f9a-2f19-344f-9f1d-d7c957d25ea8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:83:36:a0:26:e7:20:32:ab:11:27:32:18:d7:be:d5:ce:55:
a6:61:35:90:e2:f4:a5:f9:37:c9:9d:ce:4d:8e:4b:cc:99:19:
0b:72:00:36:a8:81:cb:b3:35:78:95:b7:cb:40:96:68:ff:69:
95:14:c2:85:d2:b8:db:c9:b5:39:16:77:66:83:38:c2:13:c2:
86:f9:62:0d:34:ba:4c:c7:be:47:da:46:0d:29:91:b4:7e:db:
fe:9d:31:d5:ea:2e:e7:4b:5f:b6:3f:6b:79:42:16:2a:a0:ad:
be:4d:32:19:56:f2:97:e3:2a:e7:ed:06:0e:49:13:ef:ac:4a:
95:76:94:8c:d0:dc:ac:00:04:95:f3:6f:5a:0b:9f:54:e5:a9:
d4:25:a3:03:22:70:f6:9b:e0:ea:3d:00:a7:c0:b9:44:05:cc:
8e:47:fa:08:da:41:3a:78:df:0b:cb:f8:f5:fb:b7:80:80:ee:
19:0e:2e:dc:7f:57:2e:58:c4:2e:3b:54:36:bd:e6:63:2c:96:
4d:4c:fe:7d:db:24:b1:9b:de:2f:d9:be:4d:7d:f3:c1:a0:cf:
09:4d:7a:c9:de:0d:c2:80:c4:c8:58:29:18:36:0f:c3:79:ac:
05:ec:86:e2:dd:53:b4:16:33:bc:82:ea:50:42:32:1c:a6:4d:
0d:39:6f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:09:05 2025 by rpki-client