Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/abc7d987-fde4-35c8-a696-bfa3e38b9c1e.roa
File: abc7d987-fde4-35c8-a696-bfa3e38b9c1e.roa (raw, json)
Hash identifier: 3Ow6FrVhfSLtP+QZs4fJbJKS25CYJtCVhHIbCpYRTNA=
Subject key identifier: D3:9D:FD:6F:A2:D7:31:02:DA:7D:38:6E:E7:BE:5F:60:1F:F7:F2:79
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584044E89C1ACFC1B817D87979F0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/abc7d987-fde4-35c8-a696-bfa3e38b9c1e.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 99.85.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:44:e8:9c:1a:cf:c1:b8:17:d8:79:79:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=f9113c1a-3344-46e9-b4fd-f7328e06fe3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:a4:fb:02:36:58:63:a5:cf:3e:6d:72:b0:
72:a7:c5:c9:7f:1c:a9:23:cb:14:99:5c:a2:d8:92:
a7:8a:a7:a0:90:45:ca:2c:09:4f:7c:0a:74:fd:a5:
90:99:30:57:63:ff:4a:ad:b5:46:92:51:47:68:42:
46:a7:a8:55:64:8a:d2:9c:10:75:83:de:cb:91:67:
c4:6f:96:2e:87:c7:e4:28:a8:1e:cf:17:be:94:ae:
f4:f3:6d:f5:78:38:fc:21:65:80:c8:d7:a2:ac:27:
73:47:d4:62:db:4f:8c:f0:b8:0a:60:44:1b:d7:e7:
88:c0:8b:ac:0b:d3:c6:76:86:72:8d:37:94:4b:d7:
db:6b:53:5e:ef:23:c1:62:00:e8:93:5a:c7:54:a7:
46:59:b5:6e:cc:51:55:f6:a3:13:16:32:1e:7b:26:
89:0e:2a:84:42:d0:80:be:bd:5d:ca:48:37:02:44:
38:26:87:70:f1:5c:0f:de:00:19:67:1d:8f:d7:d9:
51:24:bb:e9:c2:5e:3e:40:62:8e:cc:a1:9b:f5:9d:
d6:82:27:1f:3c:11:24:b6:2c:84:ab:42:6f:11:a0:
4d:7f:ba:61:9d:01:32:68:57:28:e0:b0:6b:0a:bb:
47:38:a6:dd:4d:cd:c5:f2:44:2c:10:17:27:48:36:
b2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9D:FD:6F:A2:D7:31:02:DA:7D:38:6E:E7:BE:5F:60:1F:F7:F2:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/abc7d987-fde4-35c8-a696-bfa3e38b9c1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.85.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:9f:63:91:69:f1:f2:15:62:df:6b:0e:ce:e8:42:c1:36:4b:
c8:42:f1:c4:7c:a1:36:bb:54:c9:05:e2:6d:ae:b3:22:0f:70:
53:51:07:29:73:f3:f5:88:7b:e6:6d:d6:12:9f:1d:02:54:52:
44:c2:f5:c1:dd:d5:bc:a3:f4:fb:8a:ba:44:41:00:18:48:d6:
67:3f:6c:24:98:21:98:56:af:f9:fa:e3:06:64:0b:0b:f4:b8:
ae:b2:3f:d0:bc:c8:d6:ca:59:78:5d:75:e9:1e:e8:a5:a1:57:
7c:7a:cc:68:11:9d:41:04:b6:5b:6c:c0:14:00:11:61:4f:cc:
79:a5:51:0d:ca:14:5f:62:7a:42:8d:38:a6:4b:63:b8:0d:af:
35:da:87:04:7f:bc:5a:81:0f:8a:61:52:2a:67:96:24:38:c8:
f2:6d:9f:09:1e:e2:fd:1b:3d:e4:0f:f9:09:b2:d8:fe:6c:2b:
67:03:a5:42:74:e3:74:14:e1:bb:00:33:9d:e2:8f:1d:8b:ba:
5f:fe:55:24:c8:b9:09:78:a7:fe:eb:4c:d6:32:e1:59:e2:af:
d5:18:cc:2c:a8:f3:4f:0c:37:06:bf:49:a1:a3:66:4c:e6:67:
63:b7:0d:08:b4:3b:c2:d4:53:99:3f:39:21:3c:42:18:74:86:
da:cf:d5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:31 2025 by rpki-client