Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aef45be2-6e57-36a8-96ff-0e4f28ec6fe9.roa
File: aef45be2-6e57-36a8-96ff-0e4f28ec6fe9.roa (raw, json)
Hash identifier: vUre1gEsFPzu9NnRF0Dm+2mAU3sKe0Kd68enJFXskDo=
Subject key identifier: 31:1B:DA:B8:12:95:3D:A7:89:B0:63:4A:01:1D:ED:A8:58:C2:B5:52
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0C0AAB9A3054DE7DDAF4E740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aef45be2-6e57-36a8-96ff-0e4f28ec6fe9.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:0a:ab:9a:30:54:de:7d:da:f4:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=5637e796-e029-4ee9-97af-06d7e2371a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1a:21:84:b3:ec:a4:77:d6:28:b1:53:2e:d0:
09:84:8b:37:42:4d:c4:a9:23:92:54:b1:f8:6f:aa:
c9:af:d7:e9:2a:d3:e3:ee:f6:c6:7a:af:42:f3:22:
ac:ec:21:28:bb:9d:aa:f5:dd:64:ba:19:03:ae:9e:
93:a3:5a:fe:92:09:5d:5d:fc:d6:70:43:24:bd:2a:
0e:e8:db:2c:40:10:66:5a:c5:51:21:73:8b:21:b6:
df:fc:eb:69:b6:c0:4b:a9:f9:13:b7:21:89:d0:ca:
90:30:64:e9:4e:b2:f9:25:aa:e4:ad:10:42:9b:d2:
dc:e6:d5:46:75:b5:2f:ad:a9:da:32:fa:65:7d:93:
37:a3:3d:96:b4:32:1e:4d:1b:2e:3e:19:3d:7d:7c:
f2:cc:5b:12:b8:b2:6c:e4:e2:53:91:31:b5:99:43:
0e:dd:6a:2b:30:47:3f:fa:39:4c:09:42:10:62:99:
e1:e3:44:78:51:7c:03:f9:14:09:f8:55:9f:58:98:
dd:7c:d4:db:9c:43:4b:e6:06:84:0b:2b:e6:6d:00:
9e:f2:99:58:d7:35:3b:7e:c7:f6:84:73:02:47:fe:
e3:2f:95:99:40:c4:c5:2b:06:1b:fe:0c:7e:25:95:
38:8c:f7:16:79:68:1d:12:6e:36:9d:70:da:d3:6e:
ad:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1B:DA:B8:12:95:3D:A7:89:B0:63:4A:01:1D:ED:A8:58:C2:B5:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aef45be2-6e57-36a8-96ff-0e4f28ec6fe9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:38:fa:3d:98:04:17:a2:5b:d2:67:40:b0:f8:ff:0b:80:fa:
85:a3:b9:d2:ed:d2:dc:5a:d1:37:48:57:5d:d2:33:e2:98:17:
bb:9d:14:18:15:46:1b:83:0f:09:a8:67:ad:3a:9d:35:e9:24:
04:86:37:5e:19:8b:bf:a4:3f:87:19:2d:33:ff:13:63:36:ce:
e9:f2:2b:23:d2:ab:c4:0b:dd:1b:c0:18:cd:f4:8d:37:94:26:
41:9e:d5:f8:9e:3d:42:db:9c:d4:7e:d7:49:70:18:80:d6:91:
de:e1:16:17:d1:d1:51:9d:e9:0a:29:38:42:ed:ff:2e:72:5c:
41:6b:62:2b:dc:eb:00:77:5a:38:5c:ea:4d:8c:37:59:6b:63:
dd:71:34:44:dc:fd:f4:1e:cf:f1:64:c6:af:68:ef:f4:67:59:
d1:d1:5f:1e:1d:b0:99:7e:8d:60:bf:2c:a0:aa:68:49:04:01:
f0:5d:3c:c7:77:7a:26:10:72:8e:a5:68:ec:e7:91:6d:00:a4:
d8:c2:80:d2:94:d9:96:c3:17:19:e7:87:40:7b:0a:81:58:8b:
ac:d3:15:39:13:eb:4a:1c:78:5a:01:cd:6e:5e:f6:c4:d9:7b:
7e:6f:8a:7b:52:85:4e:44:4a:32:dc:ce:8d:9b:b6:41:aa:b3:
1f:4a:f9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:42 2025 by rpki-client