Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa2b2d05-d8b1-396f-8dbd-adc62bf80fca.roa
File: aa2b2d05-d8b1-396f-8dbd-adc62bf80fca.roa (raw, json)
Hash identifier: Z0ruweOZUT6yWE8CpNSlJ8RNHFK7Fl4m3d8RRhpv5jo=
Subject key identifier: 95:43:63:1C:65:96:F7:08:12:AA:56:94:F2:E1:15:44:AC:F2:AA:AD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6FE022E1C81EC544ADD13600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa2b2d05-d8b1-396f-8dbd-adc62bf80fca.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:e0:22:e1:c8:1e:c5:44:ad:d1:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=de905585-4012-4d8e-be72-e26deb8b3c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:01:a4:18:99:3a:6b:c6:70:91:07:dd:6c:
82:84:5f:a3:9a:ef:f8:56:29:82:7f:ab:2e:f1:b6:
7c:7d:27:ee:4a:44:ae:8a:e1:5d:3f:13:ba:18:ad:
b0:37:43:61:cc:9a:49:64:a1:45:e2:55:88:57:90:
ed:95:36:9f:30:54:d0:1f:35:9b:4a:35:00:70:ad:
3d:c2:01:01:12:e0:7a:6f:3c:b2:d5:87:29:15:26:
1a:63:e8:bc:a2:44:65:ea:29:49:4f:4e:c1:6e:24:
e3:66:41:81:ae:8d:87:a5:b0:69:51:c9:ac:1a:18:
6f:96:dc:21:48:34:2c:24:ea:0e:35:c2:a3:2d:f9:
1c:25:11:13:c0:6f:86:2e:2e:9f:e6:51:4f:e0:2d:
ce:fa:fc:c1:d2:1c:8a:69:e0:c6:5b:8b:29:7f:12:
05:de:3b:42:61:98:79:fa:39:ee:3b:e5:66:ee:2f:
68:15:99:21:bf:11:83:4a:f4:33:66:9f:8d:39:4e:
cf:d3:6e:f1:bf:02:88:87:a0:c4:ac:5b:a4:ae:5d:
ce:09:be:68:53:c1:42:9a:95:0c:92:7b:01:4f:3c:
10:a0:6e:45:b1:26:15:04:58:69:c3:7a:9b:a8:8f:
a9:85:6d:e8:0b:ac:31:d2:47:0f:09:54:ea:95:16:
b2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:43:63:1C:65:96:F7:08:12:AA:56:94:F2:E1:15:44:AC:F2:AA:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa2b2d05-d8b1-396f-8dbd-adc62bf80fca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:9e:ff:5b:57:f1:64:bc:f3:e5:ce:9d:58:bd:b9:35:ac:7d:
0d:79:e1:31:3f:dc:bf:3f:f8:92:44:7f:07:8c:31:a5:7a:3a:
00:01:d9:f3:49:cb:ae:25:b3:ea:36:27:4e:6d:e7:5e:1c:22:
e4:d1:aa:cb:2b:6f:1e:a6:1f:c2:f9:d1:cf:d5:9c:29:a1:6d:
96:89:c0:c6:b6:4b:7b:cc:cd:a4:0c:24:b3:4e:c3:94:86:ea:
64:c3:2c:65:32:83:65:ab:99:20:21:b6:24:4b:0f:57:62:ec:
71:41:19:68:43:ed:5d:e5:2e:e3:8b:7d:83:2d:7b:cc:66:d1:
01:0b:71:a6:04:50:95:ae:3c:bf:e3:d3:0a:dd:db:54:d8:b5:
7a:f7:ab:71:e7:1e:d3:04:d9:42:85:87:3a:81:aa:95:dc:ee:
3a:87:cb:1c:7b:28:35:c5:13:08:16:4a:51:13:48:69:c5:cb:
09:52:b8:3c:3f:57:0d:00:9e:a1:d9:3f:ac:bf:67:70:43:c3:
a9:7c:75:7a:e4:63:f8:a1:98:3a:d4:03:39:7d:87:07:43:40:
b5:52:bf:5b:96:f0:0b:fe:4a:09:f9:7d:bc:d4:0a:7f:12:8f:
38:ff:2c:f9:0c:a6:ba:d0:b6:71:f9:03:1a:5e:11:06:f3:b9:
60:c6:ce:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:53 2025 by rpki-client