Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/abab5f31-781e-380a-880a-c41ababb9112.roa
File: abab5f31-781e-380a-880a-c41ababb9112.roa (raw, json)
Hash identifier: yKBIdRYO0W+P7DYxc5tC9jN2NKoGgGHaa0gqZJfmeVk=
Subject key identifier: E0:55:42:55:AE:B0:FD:8C:FE:21:0D:F4:9C:BF:E9:17:5B:85:40:F2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF207624A1F235DF8ABEB8280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/abab5f31-781e-380a-880a-c41ababb9112.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f2:07:62:4a:1f:23:5d:f8:ab:eb:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=6bd934e5-11b2-4970-a5f9-45b85e6e7e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b9:c3:96:1e:28:d0:13:f0:ee:0c:a6:5c:52:
b7:03:65:ef:c8:95:ac:19:3c:90:15:b2:36:8d:51:
6e:9b:6c:50:cd:2c:e1:ee:94:a2:7c:a3:16:b6:ac:
ee:e2:e3:2d:b2:95:56:b7:5b:47:7c:96:39:2d:d2:
d2:7d:05:57:ae:03:66:dd:7b:73:39:b9:d4:41:dc:
42:c1:21:44:62:47:43:82:60:07:de:c7:2f:0b:37:
88:5b:cb:e2:0f:8a:87:06:ac:29:8e:d0:f9:cd:07:
fa:57:96:e4:b2:39:f1:d1:47:94:f3:29:4c:e0:42:
be:c3:b6:4a:07:3d:42:ab:9e:5f:b1:b0:c8:9b:89:
6d:de:7a:6d:0c:c1:03:fe:bc:4f:fc:87:c0:8c:08:
82:0a:c3:93:07:35:ef:eb:2c:93:3e:3a:28:26:33:
8f:1e:c2:ea:e7:9e:af:27:7b:d5:01:e6:81:eb:7b:
09:bd:02:54:58:3a:72:65:ed:02:0d:57:66:80:78:
c5:cd:5f:d5:be:40:99:65:98:5e:13:c7:71:08:21:
38:6e:58:2d:25:77:04:43:4f:e5:8e:38:85:c2:5b:
3c:12:e5:58:2d:c8:49:ad:f6:ea:1b:0e:b0:78:36:
0b:d1:af:b3:e4:47:da:2a:7b:a9:77:c7:49:ef:ab:
c2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:55:42:55:AE:B0:FD:8C:FE:21:0D:F4:9C:BF:E9:17:5B:85:40:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/abab5f31-781e-380a-880a-c41ababb9112.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:4b:ae:bb:18:ac:21:cb:ec:39:e2:19:c6:12:8a:d8:a4:a0:
86:f0:20:b7:d6:9d:39:b7:49:76:6a:a6:4b:52:02:ac:58:83:
03:96:b0:3b:72:76:9c:b0:b6:24:17:26:10:dd:b0:3b:94:1a:
52:d1:b8:4a:39:f2:ba:26:9c:c7:bf:31:6b:ae:60:86:68:dc:
24:ea:b1:21:1d:ff:f6:44:29:e9:e2:ce:a0:d4:d3:5d:14:79:
d3:ea:2c:65:ee:c0:86:12:70:9b:85:71:e8:6e:74:35:22:f0:
71:44:05:7b:4b:9d:33:65:ab:1a:96:cc:8f:ed:3f:83:d8:90:
6b:7b:de:68:41:54:30:d9:dc:72:c6:8a:a2:70:d1:7f:e6:e4:
4c:b8:45:b3:c3:d9:e6:af:41:db:35:80:ba:f6:bf:f1:60:7a:
b2:bf:b6:b3:8e:65:04:4f:c1:68:9a:69:d7:1c:31:85:b9:2f:
ff:2d:0d:ea:52:25:ce:3f:3d:79:5a:6c:27:6f:79:ff:cc:3d:
79:8b:d4:be:45:5b:4c:4f:d6:c1:e6:bc:47:9a:7f:4b:74:51:
27:1b:e1:d2:e1:eb:e3:a6:ce:9d:c9:30:29:12:84:06:5b:cd:
ef:c7:6c:2e:9d:75:4e:4b:ff:6d:be:7c:c1:34:8d:d1:97:83:
a1:d6:62:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:46 2025 by rpki-client