Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba0f9a25-53ef-39a4-aeaf-82c2853e982a.roa
File: ba0f9a25-53ef-39a4-aeaf-82c2853e982a.roa (raw, json)
Hash identifier: ZzjRXGTQIvOixxt6PHljp8k6y5hxBrB1gv5ISQo8+80=
Subject key identifier: 74:0B:F9:AE:D8:8E:F6:00:A6:C5:1B:7A:CC:69:F7:AC:8D:4D:63:81
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B6D8A2D6ED9712BB4EEA7180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba0f9a25-53ef-39a4-aeaf-82c2853e982a.roa
Signing time: Thu 26 Jan 2023 15:12:07 +0000
ROA not before: Thu 26 Jan 2023 15:12:07 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 99.156.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b6:d8:a2:d6:ed:97:12:bb:4e:ea:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 26 15:12:07 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=cbac4632-468b-466a-877b-758f7bfca7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:14:60:f5:fe:29:7e:0f:a5:97:63:44:31:50:
46:b8:72:c0:8e:af:0a:cb:77:08:32:91:fe:a9:81:
c3:50:9c:a5:93:a8:9d:dc:16:58:2b:c2:45:f7:29:
23:ad:d6:f8:53:e6:46:4f:b9:5d:7e:1b:df:b8:cc:
d2:0e:6b:c6:5f:46:19:31:ab:5b:6f:44:d4:8b:47:
2c:82:98:c1:a2:fa:f1:fd:41:d0:28:7a:02:2d:12:
29:51:39:7d:2d:61:bd:5d:b2:fd:bb:38:a4:57:85:
6d:29:2e:a5:39:0d:64:3d:c5:47:fa:f0:55:7e:f1:
a5:fd:09:50:5c:ea:b3:bf:f6:e1:cf:03:7d:d4:2f:
49:d2:b0:72:e5:af:39:80:24:fa:61:d7:7f:c4:c7:
07:09:bf:4e:d2:71:cc:1f:06:60:30:a2:cd:b6:65:
54:a8:f5:0a:32:59:ac:f7:9f:68:57:e2:4c:a5:9f:
2f:63:80:48:8f:0e:11:52:f6:93:45:50:65:97:88:
7b:2f:21:95:74:c1:44:81:12:4c:22:8a:9f:8a:fc:
2d:59:08:60:5e:79:f0:b5:6d:87:e8:35:49:80:4d:
e9:77:8b:0d:3f:da:65:85:44:bd:11:a3:39:67:1e:
49:53:27:c5:71:e0:b0:be:1b:87:dd:04:a0:de:c0:
21:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0B:F9:AE:D8:8E:F6:00:A6:C5:1B:7A:CC:69:F7:AC:8D:4D:63:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba0f9a25-53ef-39a4-aeaf-82c2853e982a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.156.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:31:d0:67:62:74:b1:ab:0a:ad:53:52:6b:27:01:81:b9:26:
c7:4f:a3:84:ea:80:8c:ac:0a:03:93:0f:6f:c4:fb:de:89:35:
70:e4:9f:7e:6f:46:05:23:89:51:91:04:39:a3:8b:2a:3b:f5:
38:f4:d3:43:f4:34:8f:28:f2:63:fe:d1:ef:6c:60:34:f1:34:
6e:91:84:d2:d6:85:be:95:3c:b6:9b:56:ea:62:22:19:63:0f:
40:ed:b0:8e:55:cd:5b:d6:26:06:24:ab:67:75:31:e0:dd:2d:
5c:ce:df:30:66:2d:4f:db:ef:c8:73:6a:0a:8c:35:4a:bd:0b:
58:7f:63:70:c1:08:49:27:f7:a1:60:92:e9:14:c9:ee:bc:59:
db:51:28:c7:1d:9a:8a:cd:11:23:ab:3c:3d:7f:3c:d7:4b:cc:
30:30:63:e7:c7:27:c7:21:05:f0:02:b0:b4:c8:67:1f:c0:ec:
d4:ae:a3:00:4e:c3:41:a0:85:f3:69:ef:0d:6d:73:68:28:d2:
29:5a:2f:76:1b:59:d5:ee:76:0e:02:26:cb:01:84:20:9f:cd:
27:3a:c5:cf:fd:d1:87:cd:8c:ca:a6:d6:b7:fb:73:ba:8c:ba:
c4:96:cd:78:ea:91:d8:c0:c7:30:dd:1f:72:54:4d:9c:c4:59:
da:1a:69:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:58 2025 by rpki-client