Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae07e9c2-8d60-30f1-b2c9-150efabe1533.roa
File: ae07e9c2-8d60-30f1-b2c9-150efabe1533.roa (raw, json)
Hash identifier: EispTVl7JRhxo3X4s7BuUsAGIPk9UeOpk1AOgoB8tm4=
Subject key identifier: 09:04:2C:BB:4C:74:69:86:B2:98:50:63:AB:76:4F:5F:9F:09:67:0F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F51DE2794E4B5DA2043DCB800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae07e9c2-8d60-30f1-b2c9-150efabe1533.roa
Signing time: Tue 20 Sep 2022 12:00:00 +0000
ROA not before: Tue 20 Sep 2022 12:00:00 +0000
ROA not after: Wed 26 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 129.235.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:51:de:27:94:e4:b5:da:20:43:dc:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 20 12:00:00 2022 GMT
Not After : Oct 26 04:00:00 2022 GMT
Subject: CN=9588636f-615d-4428-909f-9e7f6dfc85ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:66:bc:30:f1:87:8e:8c:fd:0f:e0:44:03:
16:e0:a0:c2:fc:97:f4:6c:27:13:6a:24:9e:98:df:
ad:ca:6e:b9:f6:b8:3c:e3:27:5a:1e:89:21:86:60:
83:b6:50:4e:d6:15:55:bc:4e:18:fe:33:22:38:9a:
24:94:33:16:a3:e7:f5:9e:db:53:11:77:a3:1f:c7:
1a:85:8e:78:66:db:2d:ef:31:79:25:b5:60:87:4e:
78:1b:c7:12:1e:76:61:d9:1e:07:ba:11:93:44:c7:
cf:0d:9c:1d:f2:8f:ea:af:09:6b:cf:18:43:e1:0c:
9f:52:fc:18:16:e6:d7:4a:ef:20:fc:8d:74:34:7a:
74:3a:8c:0a:85:67:9e:23:ee:92:52:2e:51:58:7a:
54:8f:66:c9:db:a7:79:3f:82:c7:43:a9:b9:c4:88:
1d:f6:91:d1:e2:ca:fd:21:3e:dc:40:9f:73:f8:e8:
99:03:27:81:9e:5e:60:5c:b2:e8:44:be:a9:69:12:
05:19:c0:99:0c:8c:b0:e2:ae:12:cb:cb:52:06:ef:
fe:03:d9:14:0b:1e:d2:8b:36:8f:af:42:04:46:ac:
ef:39:fb:2a:ac:51:43:87:c5:8a:2f:2d:dd:0f:f8:
a6:1b:e9:83:fe:38:9b:44:06:8b:12:5e:32:86:b7:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:04:2C:BB:4C:74:69:86:B2:98:50:63:AB:76:4F:5F:9F:09:67:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae07e9c2-8d60-30f1-b2c9-150efabe1533.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
129.235.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:ff:dc:78:95:0f:ea:b2:c3:f8:7e:da:56:31:1b:0a:4c:6c:
ba:dd:11:e6:65:35:dd:ea:11:a9:1c:bf:05:41:c2:e0:e5:8a:
09:20:b0:60:bf:a3:cf:53:ff:6a:26:08:bd:61:48:3b:c0:d4:
c3:33:26:be:38:24:3e:c4:b4:b0:39:f4:7b:94:fc:02:3b:83:
12:ab:17:6d:22:6c:31:96:76:25:80:ab:c1:b8:4b:a6:05:72:
12:94:07:98:8f:db:d7:cc:ef:7c:08:3f:df:6f:2c:b0:93:ca:
3e:d5:4e:f6:8c:d9:a7:34:dc:be:69:8a:f9:45:df:e5:bc:80:
8d:ed:e3:c7:49:05:94:22:1a:3f:a1:19:92:d5:8c:67:7b:23:
c5:2f:3a:bf:a8:92:98:9e:04:89:58:45:bd:f4:b6:7c:54:63:
ff:e9:55:e6:d9:96:d4:a1:25:2b:a0:e8:c6:e1:0e:30:5b:b5:
bc:ca:ef:4b:3b:6d:6b:83:22:df:d6:cd:e3:31:69:20:a8:5d:
1d:8d:52:3d:d5:80:39:3c:d3:68:e9:53:18:4f:33:90:26:cd:
9d:84:ae:e8:95:23:49:df:cc:83:ff:31:47:68:d1:03:f3:6f:
16:c8:e9:6a:6e:1a:f7:c5:0d:54:0f:3d:45:1f:4b:44:77:80:
dd:62:50:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:30 2025 by rpki-client