Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b366acac-ea6a-3497-91ba-983e0ef23969.roa
File: b366acac-ea6a-3497-91ba-983e0ef23969.roa (raw, json)
Hash identifier: YyG7G2TmbUdeiA7nwM4sTa/QcfvIS73l8LU4NCEsaiw=
Subject key identifier: 43:B1:0E:A2:F4:56:6D:55:FF:E7:46:71:FE:15:8A:E9:00:26:27:C9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D8161C1E632276194BC4B9880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b366acac-ea6a-3497-91ba-983e0ef23969.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:61:c1:e6:32:27:61:94:bc:4b:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=044aa56d-115e-4239-851b-b5a048f0dbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:de:6f:da:20:ab:f9:c2:0e:68:36:98:67:
53:71:6a:9d:8c:12:3e:92:f2:e1:bd:45:bb:21:cf:
0f:f7:d4:9a:79:8b:05:97:da:4c:fd:02:07:eb:ba:
09:b8:a8:b6:60:e7:95:80:25:98:d4:e9:03:68:e5:
0c:a6:27:c8:4d:00:ef:27:14:01:5c:cf:39:16:1e:
20:d7:cc:39:d0:8b:75:e2:40:19:96:76:b0:20:06:
4c:70:5c:8a:c1:2a:5a:b0:0f:85:9c:1e:4a:2a:76:
33:1d:46:3a:d3:35:f3:9f:91:eb:2c:fc:cc:13:a5:
9c:91:d4:53:9e:6b:c1:56:24:62:f4:d7:d7:9c:f5:
85:30:99:b0:30:85:8b:42:45:7c:fc:01:8e:f4:52:
91:3d:b0:1b:58:61:e2:dd:7b:ba:fe:5a:b5:b7:24:
73:47:bb:16:92:b9:04:1a:c3:2c:68:1f:75:ad:b8:
07:bb:f6:bb:a9:52:51:24:1a:ae:ac:f5:85:55:fd:
f3:7d:77:a9:2f:0e:09:d0:df:82:9d:33:09:cd:3d:
7f:a6:64:9a:57:fd:2d:5f:15:ff:20:05:46:7d:f1:
93:37:f3:05:16:ae:bb:9b:61:94:07:df:09:89:3b:
50:9e:57:e6:77:09:31:bc:e8:b0:b2:8c:ea:67:f3:
7b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B1:0E:A2:F4:56:6D:55:FF:E7:46:71:FE:15:8A:E9:00:26:27:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b366acac-ea6a-3497-91ba-983e0ef23969.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:64:20:98:4e:7a:58:c1:fb:46:17:57:8a:be:1d:2c:2b:5b:
27:26:e0:f2:c1:e7:f8:5e:ea:14:7e:3c:6d:e6:61:2c:6f:6f:
73:f0:13:ac:35:e3:9d:55:57:13:e7:ef:08:77:64:9a:06:25:
97:fa:58:ca:eb:ba:d2:47:47:9b:58:ed:98:f0:01:3a:b3:e4:
d1:14:3b:12:b3:b8:94:df:e5:6f:b9:cb:e0:e0:37:48:b3:7c:
30:20:b0:60:31:14:88:80:12:7c:96:82:8e:13:d5:bc:6b:d5:
7d:25:9c:3b:03:77:8f:28:04:98:8b:7d:34:1e:d0:a3:34:18:
0f:b3:c1:59:af:ba:d2:a8:7a:95:84:1e:d7:f3:1a:2f:aa:33:
67:1a:6d:93:23:03:4e:6b:8d:82:1f:39:cb:e7:7f:1a:e9:d1:
7e:09:9e:5f:f6:3d:8d:56:ab:03:f7:a6:84:d4:bd:c8:22:36:
24:a5:39:ff:92:2c:75:aa:72:da:09:68:62:01:da:d0:2a:29:
8d:e5:ba:64:a8:88:f7:c9:ff:d6:f4:2e:00:65:49:4e:9a:85:
91:32:4c:b2:5d:4a:95:0b:96:0d:ef:41:44:06:b8:dd:e8:6a:
56:24:58:8a:87:28:ca:67:48:53:e9:9c:77:3b:b3:48:7c:84:
27:af:fa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:22 2025 by rpki-client