Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/badd3c60-581d-3c37-8f91-2b77a252d11c.roa
File: badd3c60-581d-3c37-8f91-2b77a252d11c.roa (raw, json)
Hash identifier: pU80ejugBZJyL7oO47kr1NQrK848grt0+UnIUg8IvS0=
Subject key identifier: 2D:56:41:8D:2A:71:BA:FD:A5:9E:79:27:DC:C3:14:B8:87:2A:AB:57
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584013D20F547A11C6C65304B780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/badd3c60-581d-3c37-8f91-2b77a252d11c.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 129.235.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:d2:0f:54:7a:11:c6:c6:53:04:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=769c4a8b-49c1-4f9d-a54e-b46cfb974a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:72:45:be:85:bf:67:49:1d:58:da:4c:da:de:
f5:8c:69:dc:9e:d3:22:af:34:69:46:56:77:37:bc:
77:17:f4:de:21:a0:3b:1b:54:ac:2a:d8:54:d3:33:
ef:4e:d2:a6:db:d9:5f:65:d5:18:80:87:16:e7:4e:
93:96:18:dc:58:d0:8e:88:1f:e4:37:77:a8:06:dc:
20:d9:28:be:8a:85:7f:79:e4:c4:ae:bf:70:62:e6:
d9:28:78:8a:c8:2e:48:b9:d2:ae:93:b2:cd:cd:03:
34:55:c8:97:85:23:3c:af:b2:4a:8e:aa:94:1c:0a:
e3:f2:04:82:67:47:9d:bc:f5:74:81:26:87:20:68:
b4:d4:38:58:55:3f:b8:12:7c:a7:40:74:8b:37:11:
2c:9b:ea:3b:1f:53:d2:d8:6b:05:6a:ec:d9:ef:fb:
5c:d6:be:35:50:2f:df:04:98:61:75:c8:72:bd:66:
74:aa:7b:cb:09:9c:4f:ef:63:72:2c:40:b5:de:3c:
40:a4:bd:43:0f:b0:6e:5a:88:a1:49:93:e2:9f:e6:
e7:0c:35:9f:fd:57:d6:c9:c8:e7:cf:59:69:71:21:
c0:53:ab:16:1d:ed:4a:6f:20:41:b5:d7:2a:fb:5f:
1e:1b:75:e5:3c:01:95:9b:30:6a:33:d9:71:cb:d4:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:56:41:8D:2A:71:BA:FD:A5:9E:79:27:DC:C3:14:B8:87:2A:AB:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/badd3c60-581d-3c37-8f91-2b77a252d11c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
129.235.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:b3:9c:7f:dd:34:6b:12:aa:8c:f6:4d:14:71:77:18:bb:e3:
f9:5e:c8:83:d1:f2:d4:39:b0:28:30:8e:81:af:45:69:9a:d0:
b7:7a:2f:05:06:e9:e4:93:22:0a:cb:14:7d:f0:7a:c2:b7:0d:
2d:6f:12:17:08:8e:38:3c:99:4c:1c:91:1a:50:ec:38:2a:fa:
dc:d1:dd:a1:7e:01:a2:96:d7:f0:cc:92:99:40:fe:e3:9c:76:
a2:08:83:01:a0:0f:00:61:2f:f8:e0:b8:f5:8c:b4:24:e3:29:
5e:61:a8:28:0b:d3:55:b5:e9:81:a4:43:04:d2:b9:9a:4d:65:
94:30:aa:3f:87:28:42:97:ce:28:91:7c:d6:37:85:ba:1f:7a:
02:f0:ad:4d:fc:e9:52:13:c7:92:47:4b:4c:39:e2:e8:ea:45:
0c:9c:71:98:c8:6b:bb:ad:1f:80:31:e3:af:f2:25:ab:5a:2a:
a4:d5:c5:20:f1:e8:1a:09:5d:45:32:c7:43:0a:02:47:b6:91:
cf:35:06:d9:f0:fb:83:05:19:4a:65:6f:eb:e0:26:e3:23:2f:
93:ed:f4:26:cc:8d:9e:a0:a8:73:96:af:61:e2:88:7d:68:e2:
db:19:e1:05:7c:a9:6b:a5:14:92:22:63:b6:9a:44:d2:c5:10:
fc:59:15:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:31 2025 by rpki-client