Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af68e442-0ab6-3b1d-a38b-3a53253f73b1.roa
File: af68e442-0ab6-3b1d-a38b-3a53253f73b1.roa (raw, json)
Hash identifier: NCnzspfMJaZHEMIDsLRnnosjnVc2P2X6UhscToqPjnw=
Subject key identifier: 86:77:6F:68:39:48:74:E3:D1:67:9F:7F:FE:3B:32:10:A2:00:8E:39
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F5C2D1096E0B8DD92DC5D7540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af68e442-0ab6-3b1d-a38b-3a53253f73b1.roa
Signing time: Sat 24 Sep 2022 12:00:00 +0000
ROA not before: Sat 24 Sep 2022 12:00:00 +0000
ROA not after: Sun 30 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 138.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5c:2d:10:96:e0:b8:dd:92:dc:5d:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 24 12:00:00 2022 GMT
Not After : Oct 30 04:00:00 2022 GMT
Subject: CN=888ffae2-325e-4909-87dc-c9863eeadf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8c:ec:ee:9a:69:8d:74:e0:5b:29:62:f6:22:
20:ca:2f:86:63:75:12:d1:77:f8:19:f2:43:e0:82:
5c:15:bd:3c:9a:20:19:e8:c4:d6:f0:c3:44:d1:35:
24:b4:52:fc:3b:f2:a0:8a:76:50:e2:a8:fd:89:1d:
25:8b:74:21:14:53:41:ce:f7:56:e0:cc:39:e5:b2:
26:24:b2:4a:24:29:da:10:d5:66:fd:ed:ca:97:04:
83:a1:df:ff:45:ac:26:f3:25:31:f9:e6:54:b4:11:
9b:b9:b1:19:4a:c3:37:38:8b:9f:3f:10:bf:fe:19:
a3:3c:d9:77:c9:58:6d:c0:4e:66:ef:eb:84:a4:1f:
03:f4:82:3a:2e:88:cb:07:41:ed:98:96:aa:85:67:
43:70:f5:0f:5e:05:6f:c9:29:fb:4d:6d:44:5b:a8:
b7:d2:bd:d8:01:12:2d:f9:52:87:80:9e:e5:b2:03:
c5:ce:aa:31:26:4b:03:82:1b:c3:5f:10:eb:50:ee:
c8:9a:1d:55:38:db:3c:d8:e4:54:1c:68:ed:e0:87:
76:32:cd:f3:67:c1:20:be:0d:ba:28:60:3c:9c:35:
86:c9:b8:50:8b:09:cc:b5:81:2f:39:a4:56:6d:0d:
63:dd:3c:29:77:9b:66:21:a6:44:c4:5a:ef:c8:41:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:77:6F:68:39:48:74:E3:D1:67:9F:7F:FE:3B:32:10:A2:00:8E:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af68e442-0ab6-3b1d-a38b-3a53253f73b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
138.240.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:af:45:82:12:75:2b:6a:05:1a:93:c6:c4:d3:5a:b7:24:81:
ad:26:43:45:9e:5a:b3:6f:29:82:46:6b:ff:53:e3:92:ca:8f:
7a:72:4a:86:b1:4d:9e:1a:d5:23:02:4c:4e:13:c3:cf:14:9c:
9e:67:77:36:8d:64:e1:76:e0:df:d2:36:d3:3a:5c:9e:09:a5:
29:d8:a4:5e:31:11:45:f7:32:bb:a3:7b:a8:e9:6c:50:c1:74:
5c:5a:41:7a:09:8d:d2:7a:c6:d7:bc:90:8c:25:af:25:b9:5a:
98:2f:13:cf:89:2e:ca:92:e4:e7:1d:d5:b6:0f:55:00:0a:79:
dd:4d:f4:18:7b:84:46:45:e6:3e:ce:e0:c1:c8:9f:27:5b:ab:
c0:04:e0:32:47:75:47:6c:09:bc:1b:5a:6c:f1:ee:07:45:55:
7f:d0:2f:73:8d:e3:fd:8d:0f:16:c5:20:fe:b9:b2:03:27:0b:
d4:59:c0:76:04:44:b1:05:0f:0a:ea:00:93:4e:55:3b:60:fd:
5f:5d:8d:68:88:83:f5:48:d6:2b:55:d5:ad:27:9e:97:cc:15:
b2:f3:db:ba:b7:28:bc:e0:da:e4:2a:c4:b6:23:e1:0e:e3:e6:
2e:c8:c6:f3:3b:9a:18:4e:ee:bf:ff:b4:00:0d:55:39:10:11:
4f:15:02:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:11 2025 by rpki-client