Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af33c3a8-2b9e-3184-a30f-54e8cc994c2e.roa
File: af33c3a8-2b9e-3184-a30f-54e8cc994c2e.roa (raw, json)
Hash identifier: EAaL5EuXsp5/LGJBhih3iUs3YZnjbk6McK+VKtY28lo=
Subject key identifier: 91:84:24:CB:27:AF:05:62:88:22:59:CD:A4:18:DE:58:27:44:09:B6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0C0A81F0DE157DC2BCADE808
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af33c3a8-2b9e-3184-a30f-54e8cc994c2e.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 108.128.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:0a:81:f0:de:15:7d:c2:bc:ad:e8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=a39136d7-ba2b-42f0-921d-e33f2d055715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c8:0b:17:3b:9f:fd:46:4d:68:10:f6:ac:70:
f6:a0:3c:3d:51:2a:66:08:8f:f6:bd:22:56:10:f3:
4f:12:f8:60:c8:76:2f:f2:7f:b3:b7:d5:bc:07:5e:
b1:5e:59:fe:46:2d:ff:02:cc:b9:d1:b8:f0:5e:89:
48:b7:92:43:85:5f:d6:e2:10:38:fc:7b:95:ac:89:
ac:6d:b9:d8:96:11:81:73:76:56:8d:2d:cb:52:87:
44:1e:6b:04:44:9f:c5:44:97:7a:ff:a4:f0:88:a5:
a7:e5:4d:4e:f6:e1:41:02:a0:26:c5:ed:da:bb:78:
3b:9b:34:2d:0f:8d:e7:9c:42:d4:82:b1:5b:db:50:
65:78:e8:af:4e:58:16:c3:30:a4:9a:7e:a6:b9:70:
20:7d:c6:b3:4e:0c:64:85:77:8e:59:a0:f1:2a:32:
d9:b3:27:bb:44:93:51:6e:fc:88:1f:83:17:11:5f:
43:86:00:47:57:f9:ae:0f:ae:b1:03:70:53:a8:4d:
ae:30:b0:91:d4:4f:03:fe:09:86:4e:8b:8d:94:f8:
14:3b:b8:b7:57:48:53:f7:19:ac:b6:a0:cc:f5:5b:
ce:7d:66:08:b4:87:49:fb:ca:1d:9a:36:bd:b0:ec:
e7:18:35:be:f9:e7:e0:b8:3f:d9:df:5b:87:9a:51:
de:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:84:24:CB:27:AF:05:62:88:22:59:CD:A4:18:DE:58:27:44:09:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af33c3a8-2b9e-3184-a30f-54e8cc994c2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.128.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:d6:15:1d:a8:7e:74:3c:64:3f:2e:2d:f3:08:f5:90:69:a9:
1f:36:e1:7d:26:7f:a4:38:75:53:f5:6a:9f:c1:a6:9c:c7:d3:
14:57:52:b1:b7:dd:0b:07:ed:47:f7:92:57:01:6a:45:83:fc:
bf:43:ee:e6:df:fa:f7:7e:60:a1:22:09:bb:53:a4:33:47:08:
e2:86:2a:9a:0b:4f:fb:95:cc:e8:f0:08:5f:53:d8:09:3c:6c:
f8:4f:3b:0f:7d:37:04:d8:dc:ce:5a:3c:41:9e:e5:8e:03:e2:
e9:36:ac:fb:2f:1c:c7:40:51:2e:6b:ae:55:4a:58:98:3e:f6:
db:c2:94:80:73:bc:1c:4b:25:af:f4:55:59:81:0f:01:f4:94:
a4:22:74:88:0c:58:d5:25:d1:b6:d4:cb:43:34:b7:d9:85:55:
55:08:8a:71:f5:e2:70:a0:00:62:30:3b:ed:90:6e:32:00:e2:
5d:85:bd:3a:4d:c9:5e:ed:f4:ad:59:36:d7:30:db:eb:02:e6:
b0:b1:4d:be:6e:f9:d8:9c:1e:5e:af:9a:67:02:f5:c9:5a:2c:
5a:c1:9c:df:20:ee:42:03:c9:0d:2a:96:a8:7a:cc:e2:16:ad:
73:4f:a7:1e:3e:9b:c9:55:53:fa:ac:05:8a:ca:fa:7e:aa:f0:
9d:d7:cf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:15 2025 by rpki-client